mirror of
				https://github.com/neovim/neovim.git
				synced 2025-10-26 12:27:24 +00:00 
			
		
		
		
	eval/decode: Reject even more numbers
Rejects leading zeroes and numbers like 1.e+5 (decimal dot with missing number with signed exponent).
This commit is contained in:
		| @@ -492,6 +492,7 @@ static inline int parse_json_number(const char *const buf, const size_t buf_len, | ||||
|   const char *ints = NULL; | ||||
|   const char *fracs = NULL; | ||||
|   const char *exps = NULL; | ||||
|   const char *exps_s = NULL; | ||||
|   if (*p == '-') { | ||||
|     p++; | ||||
|   } | ||||
| @@ -499,6 +500,10 @@ static inline int parse_json_number(const char *const buf, const size_t buf_len, | ||||
|   while (p < e && ascii_isdigit(*p)) { | ||||
|     p++; | ||||
|   } | ||||
|   if (p != ints + 1 && *ints == '0') { | ||||
|     emsgf(_("E474: Leading zeroes are not allowed: %.*s"), LENP(s, e)); | ||||
|     goto parse_json_number_fail; | ||||
|   } | ||||
|   if (p < e && p != ints && (*p == '.' || *p == 'e' || *p == 'E')) { | ||||
|     if (*p == '.') { | ||||
|       p++; | ||||
| @@ -509,6 +514,7 @@ static inline int parse_json_number(const char *const buf, const size_t buf_len, | ||||
|     } | ||||
|     if (p < e && (*p == 'e' || *p == 'E')) { | ||||
|       p++; | ||||
|       exps_s = p; | ||||
|       if (p < e && (*p == '-' || *p == '+')) { | ||||
|         p++; | ||||
|       } | ||||
| @@ -521,7 +527,7 @@ static inline int parse_json_number(const char *const buf, const size_t buf_len, | ||||
|   if (p == ints) { | ||||
|     emsgf(_("E474: Missing number after minus sign: %.*s"), LENP(s, e)); | ||||
|     goto parse_json_number_fail; | ||||
|   } else if (p == fracs || exps == fracs + 1) { | ||||
|   } else if (p == fracs || exps_s == fracs + 1) { | ||||
|     emsgf(_("E474: Missing number after decimal dot: %.*s"), LENP(s, e)); | ||||
|     goto parse_json_number_fail; | ||||
|   } else if (p == exps) { | ||||
|   | ||||
| @@ -119,6 +119,8 @@ describe('json_decode() function', function() | ||||
|     eq(-100000, funcs.json_decode('-100000')) | ||||
|     eq(100000, funcs.json_decode('  100000  ')) | ||||
|     eq(-100000, funcs.json_decode('  -100000  ')) | ||||
|     eq(0, funcs.json_decode('0')) | ||||
|     eq(0, funcs.json_decode('-0')) | ||||
|   end) | ||||
|  | ||||
|   it('fails to parse +numbers and .number', function() | ||||
| @@ -128,6 +130,17 @@ describe('json_decode() function', function() | ||||
|        exc_exec('call json_decode(".1000")')) | ||||
|   end) | ||||
|  | ||||
|   it('fails to parse numbers with leading zeroes', function() | ||||
|     eq('Vim(call):E474: Leading zeroes are not allowed: 00.1', | ||||
|        exc_exec('call json_decode("00.1")')) | ||||
|     eq('Vim(call):E474: Leading zeroes are not allowed: 01', | ||||
|        exc_exec('call json_decode("01")')) | ||||
|     eq('Vim(call):E474: Leading zeroes are not allowed: -01', | ||||
|        exc_exec('call json_decode("-01")')) | ||||
|     eq('Vim(call):E474: Leading zeroes are not allowed: -001.0', | ||||
|        exc_exec('call json_decode("-001.0")')) | ||||
|   end) | ||||
|  | ||||
|   it('fails to parse incomplete numbers', function() | ||||
|     eq('Vim(call):E474: Missing number after minus sign: -.1', | ||||
|        exc_exec('call json_decode("-.1")')) | ||||
| @@ -147,6 +160,10 @@ describe('json_decode() function', function() | ||||
|        exc_exec('call json_decode("0.0e-")')) | ||||
|     eq('Vim(call):E474: Missing number after decimal dot: 1.e5', | ||||
|        exc_exec('call json_decode("1.e5")')) | ||||
|     eq('Vim(call):E474: Missing number after decimal dot: 1.e+5', | ||||
|        exc_exec('call json_decode("1.e+5")')) | ||||
|     eq('Vim(call):E474: Missing number after decimal dot: 1.e+', | ||||
|        exc_exec('call json_decode("1.e+")')) | ||||
|   end) | ||||
|  | ||||
|   it('parses floating-point numbers', function() | ||||
| @@ -159,6 +176,27 @@ describe('json_decode() function', function() | ||||
|     eq(-100000.5e-50, funcs.json_decode('-100000.5e-50')) | ||||
|     eq(100000.5e-50, funcs.json_decode('100000.5e-50')) | ||||
|     eq(100000e-50, funcs.json_decode('100000e-50')) | ||||
|     eq(0.5, funcs.json_decode('0.5')) | ||||
|     eq(0.005, funcs.json_decode('0.005')) | ||||
|     eq(0.005, funcs.json_decode('0.00500')) | ||||
|     eq(0.5, funcs.json_decode('0.00500e+002')) | ||||
|     eq(0.00005, funcs.json_decode('0.00500e-002')) | ||||
|  | ||||
|     eq(-0.0, funcs.json_decode('-0.0')) | ||||
|     eq(-0.0, funcs.json_decode('-0.0e0')) | ||||
|     eq(-0.0, funcs.json_decode('-0.0e+0')) | ||||
|     eq(-0.0, funcs.json_decode('-0.0e-0')) | ||||
|     eq(-0.0, funcs.json_decode('-0e-0')) | ||||
|     eq(-0.0, funcs.json_decode('-0e-2')) | ||||
|     eq(-0.0, funcs.json_decode('-0e+2')) | ||||
|  | ||||
|     eq(0.0, funcs.json_decode('0.0')) | ||||
|     eq(0.0, funcs.json_decode('0.0e0')) | ||||
|     eq(0.0, funcs.json_decode('0.0e+0')) | ||||
|     eq(0.0, funcs.json_decode('0.0e-0')) | ||||
|     eq(0.0, funcs.json_decode('0e-0')) | ||||
|     eq(0.0, funcs.json_decode('0e-2')) | ||||
|     eq(0.0, funcs.json_decode('0e+2')) | ||||
|   end) | ||||
|  | ||||
|   it('fails to parse numbers with spaces inside', function() | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 ZyX
					ZyX