Skip to content

1#1610

Closed
tonghuaroot wants to merge 1 commit into
FasterXML:2.18from
tonghuaroot:fix/ghsa-r7wm-3cxj-wff9
Closed

1#1610
tonghuaroot wants to merge 1 commit into
FasterXML:2.18from
tonghuaroot:fix/ghsa-r7wm-3cxj-wff9

Conversation

@tonghuaroot
Copy link
Copy Markdown
Contributor

@tonghuaroot tonghuaroot commented May 20, 2026

No description provided.

…AILABLE exits

Sibling of FasterXML#1555 (CVE-2026-XXXXX / GHSA-72hv-8253-57qq). The original
fix wired validateIntegerLength into the sync value-complete branches
(_setIntLength + terminator paths) but did not extend to the async
parser's NOT_AVAILABLE exits in NonBlockingUtf8JsonParserBase. The
fraction path was patched correctly; this patch extends the same
idiom to the integer path.

Addresses GHSA-r7wm-3cxj-wff9.

Signed-off-by: tonghuaroot <tonghuaroot@gmail.com>
@tonghuaroot tonghuaroot deleted the fix/ghsa-r7wm-3cxj-wff9 branch May 20, 2026 00:24
@tonghuaroot tonghuaroot changed the title fix(streaming): apply integer-length validator to async parser NOT_AVAILABLE exits 1 May 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant