open-source-parsers / jsoncpp / 23129608104

90%

master: 90%

push

github

Fix use-after-free in Reader::parse(std::istream&)

The istream overload stored the document in a local String then
passed raw pointers into it to parse(const char*, const char*),
which kept those pointers in begin_/end_. After parse() returned
the local String was destroyed, leaving begin_/end_ dangling.
Any subsequent call to getFormattedErrorMessages() would then
read freed memory.

Fix by reading the stream into the member document_ instead, matching
the behavior of parse(const std::string&).

Also document the lifetime requirement on parse(const char*, const
char*): the caller's buffer must outlive the Reader if error-reporting
methods are used after parsing.

Fixes #1623

2171 of 2574 branches covered (84.34%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

2554 of 2679 relevant lines covered (95.33%)

23969.17 hits per line