From 69d4be3e9e708383b560e0841523fda54f53611a Mon Sep 17 00:00:00 2001
From: Michael R Sweet <msweet@msweet.org>
Date: Sat, 13 Jun 2026 12:21:46 -0400
Subject: [PATCH] Fix JSON and PPD/PS long number error handling (Issue #1608)

---
 cups/json.c             | 3 +++
 cups/raster-interpret.c | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/cups/json.c b/cups/json.c
index a71937f06a..3b87359c7d 100644
--- a/cups/json.c
+++ b/cups/json.c
@@ -1005,6 +1005,9 @@ cupsJSONImportString(const char *s)	// I - JSON string
         goto error;
 
       current->value.number = _cupsStrScand(s, (char **)&s, loc);
+      if (!s)
+        goto error;
+
       count ++;
       prev = current;
 
diff --git a/cups/raster-interpret.c b/cups/raster-interpret.c
index 69d7858e86..60aa04aedd 100644
--- a/cups/raster-interpret.c
+++ b/cups/raster-interpret.c
@@ -1322,6 +1322,8 @@ scan_ps(_cups_ps_stack_t *st,		/* I  - Stack */
 	  */
 
 	  obj.value.number = _cupsStrScand(start, &cur, localeconv());
+	  if (!cur)
+	    return (NULL);
           break;
 	}
 	else
-- 
2.47.3