Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
davegamble/cjson
master @ fb16e5c
12
Fixes
13
CVEs
CRITICAL
Peak severity
90.0%
Coverage
Highlights
Buffer Overflow: 2 prior fixes. Scrutinize any change in this area.
cJSON.c: most-fixed (10 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Buffer Overflow: Unsafe standard C string manipulation functions (like strcpy and sprintf) and lack of bounds validation when parsing unclosed elements lead to severe buffer write overflows during JSON printing and minification.
Heap Buffer Overflow: Improper offset bounds-checking during parsing of objects and arrays allows read/write pointer increments to exceed the allocated input buffer boundary, leading to out-of-bounds heap operations.
Use After Free: Memory deallocation pathways can leave dangling pointers intact, or perform operations on string references (like in add_item_to_object when key and value are aliased) after they have been freed.