json/include/nlohmann/detail/input at 98ab9f31c3c685c4235d4565456682c8eba9c3cb - json

mirror of https://github.com/nlohmann/json.git synced 2026-09-06 16:27:59 +00:00

Files

T

Niels Lohmann aee9421883 Reserve capped array capacity for definite-length binary arrays

CBOR, MessagePack, and the optimized [$type#count UBJSON/BJData form all
pass an exact element count to sax->start_array(len), but
json_sax_dom_parser::start_array() (and the callback variant) only used
len for an overflow check against max_size() and never reserved the
underlying vector, so each element triggered a reallocation cascade via
emplace_back().

Reserve upfront, but cap the reservation at 16384 elements: max_size()
for a std::vector is far larger than any realistic input, so an
unbounded reserve(len) would let a crafted/truncated header (e.g. CBOR
0x9A + a huge uint32 count with no data) trigger a multi-gigabyte
allocation attempt instead of the normal graceful parse_error. With the
cap, a hostile length still fails fast with the existing parse_error,
while realistic arrays get a single up-front allocation.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-09-05 20:51:47 +02:00

binary_reader.hpp

Fix CBOR tag handlers not recognizing tags 0-5 and 21-23 (#5331 )

2026-08-19 20:19:47 +02:00

input_adapters.hpp

reject out-of-range code points in UTF-32 wide-string input (#5348 )

2026-08-05 13:43:36 +02:00

json_sax.hpp

Reserve capped array capacity for definite-length binary arrays

2026-09-05 20:51:47 +02:00

lexer.hpp

Fix start_pos() for strings containing escape sequences (#5361 )