Menu

#56 Unbounded recursion vulnerability

0.5.0
closed-fixed
nobody
Reader (16)
5
2015-03-06
2013-03-07
nrundle
No

json_reader.cpp makes use of unbounded recursion among readValue, readObject, and readArray. This can lead to user input blowing the stack. Suggest either not using recursion or making a configuration option for the maximum depth of recursion allowed.

Discussion

  • Christopher Dunn

    • status: open --> closed-fixed
     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.