Date: Mon, 16 May 2016 02:25:40 +0000 (UTC) From: "Vanilla I. Shu" <vanilla@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r415303 - in head/devel/jansson: . files Message-ID: <201605160225.u4G2PePw086125@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: vanilla Date: Mon May 16 02:25:40 2016 New Revision: 415303 URL: https://svnweb.freebsd.org/changeset/ports/415303 Log: Fix issue to parse large flat json files. PR: 209492 Reported by: yuri@rawbw.com Modified: head/devel/jansson/Makefile head/devel/jansson/files/patch-CVE-2016-4425 Modified: head/devel/jansson/Makefile ============================================================================== --- head/devel/jansson/Makefile Mon May 16 02:17:34 2016 (r415302) +++ head/devel/jansson/Makefile Mon May 16 02:25:40 2016 (r415303) @@ -3,7 +3,7 @@ PORTNAME= jansson PORTVERSION= 2.7 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= devel MASTER_SITES= http://www.digip.org/jansson/releases/ Modified: head/devel/jansson/files/patch-CVE-2016-4425 ============================================================================== --- head/devel/jansson/files/patch-CVE-2016-4425 Mon May 16 02:17:34 2016 (r415302) +++ head/devel/jansson/files/patch-CVE-2016-4425 Mon May 16 02:25:40 2016 (r415303) @@ -1,16 +1,16 @@ ---- src/jansson_config.h.in.orig 2016-05-04 11:43:48.386196000 +0800 -+++ src/jansson_config.h.in 2016-05-04 11:44:21.204996000 +0800 +--- src/jansson_config.h.in.orig 2016-05-16 10:22:34.333432000 +0800 ++++ src/jansson_config.h.in 2016-05-16 10:23:18.042096000 +0800 @@ -36,4 +36,8 @@ otherwise to 0. */ #define JSON_HAVE_LOCALECONV @json_have_localeconv@ +/* Maximum recursion depth for parsing JSON input. -+ * This limits the depth of e.g. array-within-array constructions. */ ++ This limits the depth of e.g. array-within-array constructions. */ +#define JSON_PARSER_MAX_DEPTH 2048 + #endif ---- src/load.c.orig 2016-05-04 11:44:34.356957000 +0800 -+++ src/load.c 2016-05-04 11:46:44.547307000 +0800 +--- src/load.c.orig 2014-10-02 12:59:26.000000000 +0800 ++++ src/load.c 2016-05-16 10:21:41.006239000 +0800 @@ -61,6 +61,7 @@ typedef struct { typedef struct { stream_t stream; @@ -32,7 +32,15 @@ switch(lex->token) { case TOKEN_STRING: { const char *value = lex->value.string.val; -@@ -877,6 +884,8 @@ static json_t *parse_json(lex_t *lex, si +@@ -870,6 +877,7 @@ static json_t *parse_value(lex_t *lex, s + if(!json) + return NULL; + ++ lex->depth--; + return json; + } + +@@ -877,6 +885,8 @@ static json_t *parse_json(lex_t *lex, si { json_t *result;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201605160225.u4G2PePw086125>