Merge pull request #52 from npt-1707/fix_CVE-2023-50471

Fix potential vulnerable cloned function
This commit is contained in:
2025-06-04 10:01:34 +08:00
committed by GitHub

View File

@@ -2142,7 +2142,7 @@ CJSON_PUBLIC(void) cJSON_InsertItemInArray(cJSON *array, int which, cJSON *newit
{ {
cJSON *after_inserted = NULL; cJSON *after_inserted = NULL;
if (which < 0) if (which < 0 || newitem == NULL)
{ {
return; return;
} }
@@ -2154,6 +2154,10 @@ CJSON_PUBLIC(void) cJSON_InsertItemInArray(cJSON *array, int which, cJSON *newit
return; return;
} }
if (after_inserted != array->child && newitem->prev == NULL) {
return;
}
newitem->next = after_inserted; newitem->next = after_inserted;
newitem->prev = after_inserted->prev; newitem->prev = after_inserted->prev;
after_inserted->prev = newitem; after_inserted->prev = newitem;