mirror of
https://github.com/ElementsProject/lightning.git
synced 2026-08-16 13:00:32 +02:00
jsmn would accept invalid JSON objects. This is bad because it would set ->size incorrectly: we expect to have at least size * 2 tokens (in pairs). We want to rely on ->size, but this would create an exploitable buffer overflow! Fortunately, this is fixed upstream, so we add a test and upgrade to v1.0.0. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> |
||
|---|---|---|
| .. | ||
| jsmn@18e9fe42cb | ||
| libbacktrace@5a99ff7fed | ||
| libbase58@16c2527608 | ||
| libsodium@675149b9b8 | ||
| libwally-core@c51bca3379 | ||
| .gitignore | ||
| Makefile | ||