github-mirrors/thirdparty-ArduinoJson
1
0
Fork 0
mirror of https://github.com/eledio-devices/thirdparty-ArduinoJson.git synced 2025-11-01 00:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added a nesting limit to the parser to prevent stack overflow that could be a security issue

Browse Source
This commit is contained in:
Benoit Blanchon
2014-11-06 10:24:37 +01:00
parent 2e4dd2d591
commit a3425a6306
5 changed files with 104 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
include/ArduinoJson/JsonBuffer.hpp
View File

@@ -19,9 +19,11 @@ class JsonBuffer {
JsonArray &createArray();
JsonObject &createObject();
JsonArray &parseArray(char *json);
JsonObject &parseObject(char *json);
JsonArray &parseArray(char *json, uint8_t nestingLimit = DEFAULT_LIMIT);
JsonObject &parseObject(char *json, uint8_t nestingLimit = DEFAULT_LIMIT);
virtual void *alloc(size_t size) = 0;
static const uint8_t DEFAULT_LIMIT = 10;
};
}