Skip to content

Nul character allowed in JSON? #357

@edgarogh

Description

@edgarogh

Hello, I'm doing differential fuzzing to find issues in my own JSON lexer, and it seems like simd-json allows nul bytes within an array:

fn main() {
    let mut source = Vec::from(b"[-2374611873366417043\0]".as_slice());
    let _ = dbg!(simd_json::to_borrowed_value(&mut source));
}
[src/main.rs:6] simd_json::to_borrowed_value(&mut source) = Ok(
    Array(
        [
            Static(
                I64(
                    -2374611873366417043,
                ),
            ),
        ],
    ),
)

My lexer and Firefox's JSON.parse both reject it. According to the spec, NUL bytes are not part of allowed whitespace characters.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions