commit de3c692e2c6f8f495156841f83c2ccdd3f272161
author aPiecek <piecek@cesnet.cz> Mon May 24 14:42:10 2021 +0200
committer Michal Vasko <mvasko@cesnet.cz> Mon May 24 15:16:24 2021 +0200
tree c20cd42475aeb8cc35081b066e9aea65cae53151
parent 5b115fcb9672f2dcb097e19f524339bae4c8da14

parser json BUGFIX in metadata member

Only the JSON object is allowed inside single metadata object.

src/parser_json.c

diff --git a/src/parser_json.c b/src/parser_json.c
index eaaade8..4722d81 100644
--- a/src/parser_json.c
+++ b/src/parser_json.c
@@ -807,6 +807,7 @@
         /* next member */
         ret = lyjson_ctx_next(lydctx->jsonctx, &status);
         LY_CHECK_GOTO(ret, cleanup);
+        LY_CHECK_GOTO((status != LYJSON_OBJECT) && (status != LYJSON_OBJECT_CLOSED), representation_error);
     }
 
     if (nodetype == LYS_LEAFLIST) {

tests/fuzz/corpus/lyd_parse_mem_json/pull1585

diff --git a/tests/fuzz/corpus/lyd_parse_mem_json/pull1585 b/tests/fuzz/corpus/lyd_parse_mem_json/pull1585
new file mode 100644
index 0000000..e9c1d5d
--- /dev/null
+++ b/tests/fuzz/corpus/lyd_parse_mem_json/pull1585
@@ -0,0 +1 @@
+{"@types:uint32":{"@":{"ns:int32":{"a":[1