navigine/jq
1
0 Fork 0
mirror of https://github.com/jqlang/jq.git synced 2026-10-30 10:06:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

jv_setpath()+setpath/2: don't leak the input after an invalid get

Browse Source 
Ref: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64906
This commit is contained in:
Emanuele Torre authored and GitHub committed 2023-12-10 19:40:29 +01:00
1 parent 80bc768c5d
commit 6b69ffe769
2 files changed
+5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/jv_aux.c
+1
View File
@@ -408,6 +408,7 @@ jv jv_setpath(jv root, jv path, jv value) {
jv subroot = jv_get(jv_copy(root), jv_copy(pathcurr)); jv subroot = jv_get(jv_copy(root), jv_copy(pathcurr));
if (!jv_is_valid(subroot)) { if (!jv_is_valid(subroot)) {
jv_free(root);
jv_free(pathcurr); jv_free(pathcurr);
jv_free(pathrest); jv_free(pathrest);
jv_free(value); jv_free(value);
tests/jq.test
+4
View File
@@ -2091,3 +2091,7 @@ try ("foobar" | .[1.5]) catch .
null null
"Cannot index string with number" "Cannot index string with number"
# setpath/2 does not leak the input after an invalid get #2967
try ["ok", setpath([1]; 1)] catch ["ko", .]
{"hi":"hello"}
["ko","Cannot index object with number"]