From: Eric Hawicz Date: Sat, 27 Jun 2026 13:35:37 +0000 (-0400) Subject: More updates to ChangeLog for a 0.19 release X-Git-Tag: json-c-0.19-20260627~2 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c54e6900e7bdbdb572acc9a4f932ca529fe58b14;p=thirdparty%2Fjson-c.git More updates to ChangeLog for a 0.19 release --- diff --git a/AUTHORS b/AUTHORS index 80ad6d6..b66c19a 100644 --- a/AUTHORS +++ b/AUTHORS @@ -1,5 +1,6 @@ Alan Coopersmith Alan Urmancheev <108410815+alurm@users.noreply.github.com> +Alb3e3 <74142887+Alb3e3@users.noreply.github.com> Alexander Dahl Alexandru Ardelean An7ar35 @@ -10,7 +11,7 @@ Awildidiot <69577313+0xfadead@users.noreply.github.com> Björn Esser BonsaY Bruno Haible -Cameron Armstrong +Cameron Armstrong (Nightfox) Careles changyong guo chenguoping @@ -24,6 +25,7 @@ David McCann DeX77 Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com> dota17 +dxbjavid Eric Haszlakiewicz Eric Hawicz Evan Si @@ -40,6 +42,7 @@ hofnarr ihsinme <61293369+ihsinme@users.noreply.github.com> Ivan Romanov Jaap Keuter +JaisonZheng <1254186821@qq.com> Jakov Smolic janczer Ján Tomko @@ -56,6 +59,7 @@ Kizuna-Meraki Lakshmi-Surekha Leon Gross Liang, Gao +lone Luca Mannella Marc <34656315+MarcT512@users.noreply.github.com> Matthias Gatto @@ -63,6 +67,7 @@ max Micah Snyder Michael Clark Michele Locati +Milan Broz myd7349 Pascal Cuoq Pavel Zwerschke diff --git a/ChangeLog b/ChangeLog index 6304eef..a8cbbc4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,5 @@ -0.19 (up to commit 8948568, 2026-01-18) +0.19 (up to commit 3c1cf2b, 2026-06-27) ======================================== Deprecated and removed features: @@ -32,6 +32,14 @@ Significant changes and bug fixes * Fix bug involving supplemental code points that look like high surrogates * Fix runtime issue with test_util_file.c in Windows (add O_BINARY) * Fix macro WIN32_LEAN_AND_MEAN redefined +* Issue #914: Fix Memory usage regression due to newlocale() on macOS +* Issue #916: Fix OOM via large array index in json_pointer_set +* Issue #923: Avoid stack recursion in json_object_put() +* Issue #927: CVE-2026-9146 - update json_object_iterator documentation +* Issue #929: CVE-2026-11322 - fix information disclosure bug in apps/json_parse (not installed by default) +* Issue #930: fix locale-dependent strtod in json_object_get_double +* Issue #931: deep copy values in json_patch copy op to avoid aliasing and cycles + 0.18 (up to commit 6bfab90, 2024-09-15) ======================================== diff --git a/issues_closed_for_0.19.md b/issues_closed_for_0.19.md index d6a9345..3bb0c64 100644 --- a/issues_closed_for_0.19.md +++ b/issues_closed_for_0.19.md @@ -2,54 +2,13 @@ This list was created with: ``` PREV=2024-09-15 -NOW=2026-01-19 +NOW=2026-06-27 curl "https://api.github.com/search/issues?q=repo%3Ajson-c%2Fjson-c+closed%3A>${PREV}+created%3A<${NOW}&sort=created&order=asc&per_page=100&page=1" > issues1.out jq -r '.items[] | "[" + .title + "](" + .url + ")" | tostring' issues?.out > issues.md sed -e's,^\[ *\(.*\)\](https://api.github.com/.*/\([0-9].*\)),* [Issue #\2](https://github.com/json-c/json-c/issues/\2) - \1,' -i issues.md cat issues.md >> issues_closed_for_0.19.md ``` -* [Issue #826](https://github.com/json-c/json-c/issues/826) - CMake: remove needless policy setting -* [Issue #827](https://github.com/json-c/json-c/issues/827) - Resolve build issue in tokener_parse_ex_fuzzer.c -* [Issue #828](https://github.com/json-c/json-c/issues/828) - Put arc4random check under DISABLE_EXTRA_LIBS=OFF in CMakeLists.txt. -* [Issue #829](https://github.com/json-c/json-c/issues/829) - Cannot build with clang-cl -* [Issue #830](https://github.com/json-c/json-c/issues/830) - I am looking whether this CVE - CVE-2021-32292 is impacted by json-c version v0.13.1or not ? -* [Issue #831](https://github.com/json-c/json-c/issues/831) - rename WIN32 to _WIN32 -* [Issue #833](https://github.com/json-c/json-c/issues/833) - memory leak issue in 0.13 -* [Issue #834](https://github.com/json-c/json-c/issues/834) - fix error des of 'error_memory' -* [Issue #835](https://github.com/json-c/json-c/issues/835) - fix error des of 'error_memory' -* [Issue #836](https://github.com/json-c/json-c/issues/836) - Null pointer dereference in tokener_parse_ex_fuzzer.cc -* [Issue #837](https://github.com/json-c/json-c/issues/837) - Add type checking for parsed objects in tokener_parse_ex_fuzzer -* [Issue #838](https://github.com/json-c/json-c/issues/838) - Cannot link properly using cmake -* [Issue #839](https://github.com/json-c/json-c/issues/839) - json_pointer.c: initialize idx -* [Issue #840](https://github.com/json-c/json-c/issues/840) - Memory leak when enable HAVE_SETLOCALE and HAVE_USELOCALE -* [Issue #841](https://github.com/json-c/json-c/issues/841) - Random crash in json_tokener_parse -* [Issue #842](https://github.com/json-c/json-c/issues/842) - Assignment bug in json_pointer.c -* [Issue #843](https://github.com/json-c/json-c/issues/843) - _WIN32 should be used, not WIN32 in source code ifdefs. -* [Issue #844](https://github.com/json-c/json-c/issues/844) - Doxygen: mis-wording in `json_object_put` -* [Issue #845](https://github.com/json-c/json-c/issues/845) - [CMP0153](https://cmake.org/cmake/help/latest/policy/CMP0153.html) -* [Issue #846](https://github.com/json-c/json-c/issues/846) - CMP0153 -* [Issue #848](https://github.com/json-c/json-c/issues/848) - json_object_from_file caused calloc SIGSEGV -* [Issue #849](https://github.com/json-c/json-c/issues/849) - random_seed.c: add a Coverity Scan suppression -* [Issue #850](https://github.com/json-c/json-c/issues/850) - Missing return description -* [Issue #851](https://github.com/json-c/json-c/issues/851) - Allow NULL in json_object_new_string() and json_object_new_string_len() -* [Issue #852](https://github.com/json-c/json-c/issues/852) - docs: micro typo in json_object_put doc -* [Issue #853](https://github.com/json-c/json-c/issues/853) - json_tokener_parse_verbose does not set the error indicator when it fails to allocate the tokener -* [Issue #854](https://github.com/json-c/json-c/issues/854) - json_tokener_parse_verbose sets the error indicator to a wrong value when there is a memory allocation failure -* [Issue #856](https://github.com/json-c/json-c/issues/856) - Using libjson-c.so or compiling from source seg faults on json_tokener_parse_ex in alpine docker container -* [Issue #857](https://github.com/json-c/json-c/issues/857) - json_tokener_parse_verbose sets the error indicator to a wrong value when there is a memory allocation failure -* [Issue #858](https://github.com/json-c/json-c/issues/858) - json_tokener.h: json_tokener_parse_verbose: fix typo -* [Issue #859](https://github.com/json-c/json-c/issues/859) - Develop -* [Issue #860](https://github.com/json-c/json-c/issues/860) - Develop -* [Issue #861](https://github.com/json-c/json-c/issues/861) - Handle yet another out-of-memory condition. -* [Issue #862](https://github.com/json-c/json-c/issues/862) - Missing `json-c-targets.cmake` during build cmake build step -* [Issue #863](https://github.com/json-c/json-c/issues/863) - build ios simulator error -* [Issue #864](https://github.com/json-c/json-c/issues/864) - Build pkg-config for msvc as well -* [Issue #865](https://github.com/json-c/json-c/issues/865) - Assertion usage -* [Issue #866](https://github.com/json-c/json-c/issues/866) - Added github actions -* [Issue #868](https://github.com/json-c/json-c/issues/868) - I meet compile error in harmony -* [Issue #869](https://github.com/json-c/json-c/issues/869) - At a high level how are jsons parses? Are they terminated by the new line? -* [Issue #870](https://github.com/json-c/json-c/issues/870) - Non-Compliant features should be optional (and disabled) * [Issue #825](https://github.com/json-c/json-c/issues/825) - Add support for WASI * [Issue #847](https://github.com/json-c/json-c/issues/847) - Add support for Commodore Amiga * [Issue #867](https://github.com/json-c/json-c/issues/867) - Parsing of control characters @@ -66,6 +25,7 @@ cat issues.md >> issues_closed_for_0.19.md * [Issue #882](https://github.com/json-c/json-c/issues/882) - Explicitly handle NaN values when converting to integer * [Issue #883](https://github.com/json-c/json-c/issues/883) - Add fuzz tests for json_object/point/array apis * [Issue #884](https://github.com/json-c/json-c/issues/884) - fix macro WIN32_LEAN_AND_MEAN redefined +* [Issue #885](https://github.com/json-c/json-c/issues/885) - A core dump occurs when executing json_object_put. * [Issue #886](https://github.com/json-c/json-c/issues/886) - Linking to json-c using cmake's find_package error * [Issue #887](https://github.com/json-c/json-c/issues/887) - Can json-c accept invalid JSON strings? * [Issue #888](https://github.com/json-c/json-c/issues/888) - Allow build with cmake 4.0.0 @@ -79,6 +39,8 @@ cat issues.md >> issues_closed_for_0.19.md * [Issue #899](https://github.com/json-c/json-c/issues/899) - Meson support * [Issue #900](https://github.com/json-c/json-c/issues/900) - meson cleanups * [Issue #901](https://github.com/json-c/json-c/issues/901) - miscellanious gitignore updates +* [Issue #902](https://github.com/json-c/json-c/issues/902) - json_object_get_int() doesn't support INT32_MIN or INT32_MAX. +* [Issue #903](https://github.com/json-c/json-c/issues/903) - meson: use override_dependency * [Issue #904](https://github.com/json-c/json-c/issues/904) - Include getopt.h header file if the platform is not AIX. * [Issue #905](https://github.com/json-c/json-c/issues/905) - Fix typo * [Issue #906](https://github.com/json-c/json-c/issues/906) - json-c: fix calloc argument order to avoid GCC14 -Wcalloc-transposed-args in arraylist.c and json_object.c @@ -89,3 +51,19 @@ cat issues.md >> issues_closed_for_0.19.md * [Issue #911](https://github.com/json-c/json-c/issues/911) - Building libjson-c DLL for Windows under Cygwin: why it's named cygjson-c? * [Issue #912](https://github.com/json-c/json-c/issues/912) - libjson-c.dll is missing VERSIONINFO * [Issue #913](https://github.com/json-c/json-c/issues/913) - Add VERSIONINFO to libjson-c.dll +* [Issue #914](https://github.com/json-c/json-c/issues/914) - Memory usage regression due to newlocale() on macOS +* [Issue #915](https://github.com/json-c/json-c/issues/915) - Fix memory leak on macOS by auto-enabling NEWLOCALE_NEEDS_FREELOCALE +* [Issue #916](https://github.com/json-c/json-c/issues/916) - OOM via large array index in json_pointer_set +* [Issue #917](https://github.com/json-c/json-c/issues/917) - Fix: OOM vulnerability cause by is_valid_index +* [Issue #918](https://github.com/json-c/json-c/issues/918) - Assertion failed has occurred in function json_object_object_add_ex at json_object.c +* [Issue #919](https://github.com/json-c/json-c/issues/919) - Compiling json-c in Windows for a non x86 target fails +* [Issue #920](https://github.com/json-c/json-c/issues/920) - Broken link at wiki/List-of-json-c-tutorials +* [Issue #922](https://github.com/json-c/json-c/issues/922) - ninja install target does not install all headers needed +* [Issue #923](https://github.com/json-c/json-c/issues/923) - json-c seems to be stack recursive, which can cause stack overflows +* [Issue #924](https://github.com/json-c/json-c/issues/924) - avoid recursion during json_object_put +* [Issue #925](https://github.com/json-c/json-c/issues/925) - Fix build with clang-21 +* [Issue #927](https://github.com/json-c/json-c/issues/927) - Coordinated Vulnerability Disclosure - json-c 0.18.99 Use-After-Free via json_object_iterator Concurrent Modification +* [Issue #928](https://github.com/json-c/json-c/issues/928) - Build error from current top of tree: d1018cf +* [Issue #929](https://github.com/json-c/json-c/issues/929) - Coordinated Vulnerability Disclosure - json-c 0.18.99 +* [Issue #930](https://github.com/json-c/json-c/issues/930) - fix locale-dependent strtod in json_object_get_double +* [Issue #931](https://github.com/json-c/json-c/issues/931) - deep copy values in json_patch copy op to avoid aliasing and cycles