Chris Coulson dc052e5ac7 json: Avoid a double-free when parsing fails. ... When grub_json_parse() succeeds, it returns the root object which contains a pointer to the provided JSON string. Callers are responsible for ensuring that this string outlives the root object and for freeing its memory when it's no longer needed. If grub_json_parse() fails to parse the provided JSON string, it frees the string before returning an error. This results in a double free in luks2_recover_key(), which also frees the same string after grub_json_parse() returns an error. This changes grub_json_parse() to never free the JSON string passed to it, and updates the documentation for it to make it clear that callers are responsible for ensuring that the string outlives the root JSON object. Fixes: CID 292465 Signed-off-by: Chris Coulson <chris.coulson@canonical.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>		2020-07-29 16:55:48 +02:00
..
jsmn.h	json: Update jsmn library to upstream commit 053d3cd	2020-04-21 22:15:14 +02:00
json.c	json: Avoid a double-free when parsing fails.	2020-07-29 16:55:48 +02:00
json.h	json: Avoid a double-free when parsing fails.	2020-07-29 16:55:48 +02:00