scottcgi / mojojson

A simple and fast JSON parser.

"One day, I realized all the dumb, selfish things people do... it's not our fault. No one designed us. We're just an accident, Harold. We're just bad code. But the thing you built... It's perfect. Rational. Beautiful. By design." — Root (Person of Interest)

mojojson's Issues

heap-buffer-overflow in func SkipString

input value : "@<=>?@ABCDEFGHIJiLM$^^&(^(
you can use ASAN compile the lib and the API JsonValue* value = AJson->Parse(jsonString); it supply and input this value to the API .
it can trige in a buffer-overflow bug.

==2238917==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200000323c at pc 0x564852e329cc bp 0x7fff7edbed90 sp 0x7fff7edbed80
READ of size 1 at 0x60200000323c thread T0
#0 0x564852e329cb in SkipString /opt1/software/MojoJson/Json.c:695
#1 0x564852e32b03 in ParseString /opt1/software/MojoJson/Json.c:719
#2 0x564852e33b76 in ParseValue /opt1/software/MojoJson/Json.c:858
#3 0x564852e34143 in Parse /opt1/software/MojoJson/Json.c:949
#4 0x564852e342ef in easyloop /opt1/software/MojoJson/test.c:8
#5 0x564852e44355 in main /opt1/software/betafuzz/srap/wrapentry.c:98
#6 0x7f587147ad8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
#7 0x7f587147ae3f

null def in function Destory

test.c:
char* jstr = ":#@$^^&^(";
JsonValue value = AJson->Parse(jstr);
if(value != NULL)
AJson->Destroy(value);

=================================================================
==2239161==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x564852e30c19 bp 0x7fff7edbef40 sp 0x7fff7edbef10 T0)
==2239161==The signal is caused by a READ memory access.
==2239161==Hint: address points to the zero page.
#0 0x564852e30c19 in Destroy /opt1/software/MojoJson/Json.c:404
#1 0x564852e30cee in Destroy /opt1/software/MojoJson/Json.c:411
#2 0x564852e34333 in easyloop /opt1/software/MojoJson/test.c:10
#3 0x564852e44355 in main /opt1/software/betafuzz/srap/wrapentry.c:98
#4 0x7f587147ad8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
#5 0x7f587147ae3f in __libc_start_main_impl ../csu/libc-start.c:392
#6 0x564852e2f994 in _start (/opt1/software/MojoJson/test+0x4994)