From fd4ae8304e23007672af9a37855c7a76de7c78cf Mon Sep 17 00:00:00 2001 From: W-Mark Kubacki Date: Fri, 19 Aug 2016 20:10:21 +0200 Subject: Parse no deeper than MAX_PARSING_DEPTH while true; do printf '{"deeper": '; done | jq . --- src/jv_parse.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/jv_parse.c') diff --git a/src/jv_parse.c b/src/jv_parse.c index 84245b86..51ad9f09 100644 --- a/src/jv_parse.c +++ b/src/jv_parse.c @@ -10,6 +10,10 @@ typedef const char* presult; +#ifndef MAX_PARSING_DEPTH +#define MAX_PARSING_DEPTH (256) +#endif + #define TRY(x) do {presult msg__ = (x); if (msg__) return msg__; } while(0) #ifdef __GNUC__ #define pfunc __attribute__((warn_unused_result)) presult @@ -147,11 +151,13 @@ static void push(struct jv_parser* p, jv v) { static pfunc parse_token(struct jv_parser* p, char ch) { switch (ch) { case '[': + if (p->stackpos >= MAX_PARSING_DEPTH) return "Exceeds depth limit for parsing"; if (jv_is_valid(p->next)) return "Expected separator between values"; push(p, jv_array()); break; case '{': + if (p->stackpos >= MAX_PARSING_DEPTH) return "Exceeds depth limit for parsing"; if (jv_is_valid(p->next)) return "Expected separator between values"; push(p, jv_object()); break; -- cgit v1.2.3