mirror of
https://github.com/aljazceru/lightning.git
synced 2025-12-19 07:04:22 +01:00
7b59e26dd7
jsmn would accept invalid JSON objects. This is bad because it would set ->size incorrectly: we expect to have at least size * 2 tokens (in pairs). We want to rely on ->size, but this would create an exploitable buffer overflow! Fortunately, this is fixed upstream, so we add a test and upgrade to v1.0.0. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>