File json-lib-CVE-2024-47855.patch of Package json-lib.35923
--- json-lib/jenkins-json-lib-2.4/src/main/java/net/sf/json/util/JSONTokener.java 2024-10-05 07:26:05.555889398 +0200
+++ json-lib/jenkins-json-lib-2.4/src/main/java/net/sf/json/util/JSONTokener.java 2024-10-05 07:28:30.170135837 +0200
@@ -192,6 +192,8 @@
if (c == '*') {
if (next() == '/') {
break;
+ } else if (!more()) {
+ return 0;
}
back();
}
--- json-lib/src/main/java/net/sf/json/util/JSONTokener.java 2024-10-05 07:26:05.532555915 +0200
+++ json-lib/src/main/java/net/sf/json/util/JSONTokener.java 2024-10-05 07:27:43.363177887 +0200
@@ -196,6 +196,8 @@
if( c == '*' ){
if( next() == '/' ){
break;
+ } else if (!more()) {
+ return 0;
}
back();
}