ensure: Validate buffer offset

DaveGamble · Mar 23, 2017 · 1934059 · 1934059
1 parent cc84a44
commit 1934059
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cJSON.c b/cJSON.c
@@ -253,6 +253,12 @@ static unsigned char* ensure(printbuffer * const p, size_t needed, const interna
         return NULL;
     }
 
+    if ((p->length > 0) && (p->offset >= p->length))
+    {
+        /* make sure that offset is valid */
+        return NULL;
+    }
+
     if (needed > INT_MAX)
     {
         /* sizes bigger than INT_MAX are currently not supported */