Praveen Kumar
9f802bd1a3
cjson: upgrade 1.7.18 -> 1.7.19
...
This includes CVE-fix for CVE-2023-26819.
Removed CVE-2025-57052, as the issue was already resolved
in v1.7.19.
Changelog:
==========
https://github.com/DaveGamble/cJSON/blob/master/CHANGELOG.md
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com >
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
2025-10-27 11:17:59 +01:00
Shubham Pushpkar
24d495df72
cjson 1.7.18: Fix CVE-2025-57052
...
Upstream Repository: https://github.com/DaveGamble/cJSON.git
Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-57052
Type: Security Fix
CVE: CVE-2025-57052
Score: 9.8
Patch: https://github.com/DaveGamble/cJSON/commit/74e1ff4994aa
Signed-off-by: Shubham Pushpkar <spushpka@cisco.com >
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
2025-09-23 09:07:36 +02:00
Peter Marko
09d95e03ad
cjson: upgrade 1.7.17 -> 1.7.18
...
Changelog:
============
* Add NULL check to cJSON_SetValuestring()(CVE-2024-31755)
* Remove non-functional list handling of compiler flags
* Fix heap buffer overflow
* remove misused optimization flag -01
* Set free'd pointers to NULL whenever they are not reassigned immediately after
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
(From meta-openembedded rev: 535822eff7 )
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-10-13 11:19:39 -04:00
Archana Polampalli
caef559130
cjson: upgrade 1.7.15 -> 1.7.17
...
The following CVEs are addressed in this release.
CVE-2023-50471
CVE-2023-50472
https://github.com/DaveGamble/cJSON/releases/tag/v1.7.17
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-01-12 07:14:16 -05:00
Richard Purdie
b402a3076f
recipes: Update SRC_URI branch and protocols
...
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-11-03 06:57:49 -07:00
wangmy
fa00ac02df
cjson: upgrade 1.7.14 -> 1.7.15
...
Fixes:
Fix potential core dumped for strrchr, see https://github.com/DaveGamble/cJSON/pull/546
Fix null pointer crash in cJSON_CreateXxArray, see https://github.com/DaveGamble/cJSON/pull/538
Fix several null pointer problems on allocation failure, see https://github.com/DaveGamble/cJSON/pull/526
Fix a possible dereference of null pointer, see https://github.com/DaveGamble/cJSON/pull/519
Fix windows build failure about defining nan, see https://github.com/DaveGamble/cJSON/pull/518
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-09-05 22:19:55 -07:00
zangrc
0e8e4ee499
cjson: upgrade 1.7.13 -> 1.7.14
...
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2020-11-27 11:54:04 -08:00
Ting Liu
13174e92a9
cjson: add recipe for v1.7.13
...
cJSON aims to be the dumbest possible parser that you can get your
job done with. It's a single file of C, and a single header file.
Homepage: https://github.com/DaveGamble/cJSON
Signed-off-by: Ting Liu <ting.liu@nxp.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2020-04-26 23:10:57 -07:00