mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2025-11-01 22:58:50 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

json: fix \uXXXX parsing

Browse source 
We need exactly 4 hex characters, everything else is refused. We
also copy those characters directly to the output string without
assuming any encoding.

See #2337
This commit is contained in:
Wim Taymans 2022-04-26 11:01:33 +02:00
parent d9871f36c1
commit f2cdb15e0c
2 changed files with 10 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
spa/include/spa/utils/json.h
View file

@ -355,15 +355,15 @@ static inline int spa_json_parse_stringn(const char *val, int len, char *result,
else if (*p == 'f')
*result++ = '\f';
else if (*p == 'u') {
char *end;
uint16_t v = strtol(p+1, &end, 16);
if (p+1 == end) {
uint8_t v[2];
if (p + 5 > val + len ||
sscanf(p+1, "%02hhx%02hhx", &v[0], &v[1]) != 2) {
*result++ = *p;
} else {
p = end-1;
if (v > 0xff)
*result++ = (v >> 8) & 0xff;
*result++ = v & 0xff;
p += 4;
if (v[0] != 0)
*result++ = v[0];
*result++ = v[1];
}
} else
*result++ = *p;