File json-lib-CVE-2024-47855.patch of Package json-lib.35923

--- json-lib/jenkins-json-lib-2.4/src/main/java/net/sf/json/util/JSONTokener.java	2024-10-05 07:26:05.555889398 +0200
+++ json-lib/jenkins-json-lib-2.4/src/main/java/net/sf/json/util/JSONTokener.java	2024-10-05 07:28:30.170135837 +0200
@@ -192,6 +192,8 @@
                             if (c == '*') {
                                 if (next() == '/') {
                                     break;
+                                } else if (!more()) {
+                                    return 0;
                                 }
                                 back();
                             }
--- json-lib/src/main/java/net/sf/json/util/JSONTokener.java	2024-10-05 07:26:05.532555915 +0200
+++ json-lib/src/main/java/net/sf/json/util/JSONTokener.java	2024-10-05 07:27:43.363177887 +0200
@@ -196,6 +196,8 @@
                      if( c == '*' ){
                         if( next() == '/' ){
                            break;
+                        } else if (!more()) {
+                           return 0;
                         }
                         back();
                      }
openSUSE Build Service is sponsored by