UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing

Posted by Ron E on Aug 26UltraJSON contains an out-of-bounds read in its native C JSON decoder when processing certain incomplete JSON values supplied through an explicitly length-bounded input buffer. The affected native entry point, JSON_DecodeObject(), accepts both a buffer pointer and an explicit buffer length: JSON_DecodeObject(...