cJSON/CHANGELOG.md

1.4.6

Fixes:

• Several corrections in the README
• Making clear that valueint should not be written to
• Fix overflow detection in ensure (2683d4d987)
• Fix a potential null pointer dereference in cJSON_Utils (795c3acabe)
• Replace incorrect sizeof('\0') with sizeof("") (84237ff48e)
• Add caveats section to the README (50b3c30dfa)
• Make cJSON locale independent (#146) Thanks @peterh for reporting
• Fix compiling without CMake with MSVC (#147) Thanks @dertuxmalwieder for reporting

1.4.5

Fixes:

• Fix bug in cJSON_SetNumberHelper, thanks @mmkeeper (#138 ef34500693)
• Workaround for internal compiler error in GCC 5.4.0 and 6.3.1 on x86 (2f65e80a34 GCC bugreport)

1.4.4

Fixes:

• Fix a theoretical integer overflow, (not sure if it is possible on actual hardware) e58f7ec027
• Fix an off by one error (cc84a446be), thanks @gatzka
• Double check the offset of the print buffer in ensure (1934059554)

Improvements:

• Add a note in the header about required buffer size when using cJSON_PrintPreallocated (4bfb880093)

1.4.3

Fixes:

• Fix compilation of the tests on 32 bit PowerPC and potentially other systems (4ec6e76ea2)
• Fix compilation with old GCC compilers (4.3+ were tested) (227d3398d6, 466eb8e3f8), see also #126

1.4.2

Fixes:

• Fix minimum required cmake version (30e1e7af7c)
• Fix detection of supported compiler flags (76e5296d0d)
• Run cJSON_test and cJSON_test_utils along with unity tests (c597601cf1)

1.4.1

Fix: Make print_number abort with a failure in out of memory situations (cf1842dc6f)

1.4.0

Features

• Functions to check the type of an item (#120)
• Use dllexport on windows and fvisibility on Unix systems for public functions (#116), thanks @mjerris
• Remove trailing zeroes from printed numbers (#123)
• Expose the internal boolean type cJSON_bool in the header (2d3520e0b9)

Fixes

• Fix handling of NULL pointers in cJSON_ArrayForEach (b47d0e34ca)
• Make it compile with GCC 7 (fix -Wimplicit-fallthrough warning) (9d07917feb)

Other Improvements

• internally use realloc if available (#110)
• builtin support for fuzzing with afl (#111)
• unit tests for the print functions (#112)
• Always use buffered printing (#113)
• simplify the print functions (#114)
• Add the compiler flags -Wdouble-conversion, -Wparentheses and -Wcomma (#122)

1.3.2

Fix:

• Don't build the unity library if testing is disabled ( #121 ). Thanks @ffontaine

1.3.1

Bugfix release that fixes an out of bounds read #118. This shouldn't have any security implications.

1.3.0

This release includes a lot of rework in the parser and includes the Cunity unit testing framework, as well as some fixes. I increased the minor version number because there were quite a lot of internal changes.

Features:

• New type for cJSON structs: cJSON_Invalid (#108)

Fixes:

• runtime checks for a lot of potential integer overflows
• fix incorrect return in cJSON_PrintBuffered (cf9d57d56c)
• fix several potential issues found by Coverity
• fix potentially undefined behavior when assigning big numbers to valueint (41e2837df1)
  • Numbers exceeding INT_MAX or lower than INT_MIN will be explicitly assigned to valueint as INT_MAX and INT_MIN respectively (saturation on overflow).
  • fix the cJSON_SetNumberValue macro (87f77274de), this slightly changes the behavior, see commit message

Introduce unit tests

Started writing unit tests with the Cunity testing framework. Currently this covers the parser functions.

Also:

• Support for running the tests with Valgrind
• Support for compiling the tests with AddressSanitizer and UndefinedBehaviorSanitizer.
• travis.yml file for running unit tests on travis. (not enabled for the repository yet though #102)

Simplifications

After having unit tests for the parser function in place, I started refactoring the parser functions (as well as others) and making them easier to read and maintain.

• Use strtod from the standard library for parsing numbers (0747669972)
• Use goto-fail in several parser functions (#100)
• Rewrite/restructure all of the parsing functions to be easier to understand and have less code paths doing the same as another. (#109)
• Simplify the buffer allocation strategy to always doubling the needed amount (9f6fa94c91)
• Combined cJSON_AddItemToObject and cJSON_AddItemToObjectCS to one function (cf862d0fed)

Other changes

• Prevent the usage of incompatible C and header versions via preprocessor directive (123bb1af7b)
• Let CMake automatically detect compiler flags
• Add new compiler flags (-Wundef, -Wswitch-default, -Wconversion, -fstack-protector-strong) (#98)
• Change internal sizes from int to size_t (ecd5678527)
• Change internal strings from char* to unsigned char* (28b9ba4334)
• Add const in more places

1.2.1

Fixes:

• Fixes a potential null pointer dereference in cJSON_Utils, discovered using clang's static analyzer by @bnason-nf (#96)

1.2.0

Features:

• Add a new type of cJSON item for raw JSON and support printing it. Thanks @loigu (#65, #90)

Fixes:

• Compiler warning if const is casted away, Thanks @gatzka (#83)
• Fix compile error with strict-overflow on PowerPC, (#85)
• Fix typo in the README, thanks @MicroJoe (#88)
• Add compile flag for compatibility with C++ compilers

1.1.0

• Add a function cJSON_PrintPreallocated to print to a preallocated buffer, thanks @ChisholmKyle (#72)
• More compiler warnings when using Clang or GCC, thanks @gatzka (#75, #78)
• fixed a memory leak in cJSON_Duplicate, thanks @alperakcan (#81)
• fix the ENABLE_CUSTOM_COMPILER_FLAGS cmake option

1.0.2

Rename internal boolean type, see #71.

1.0.1

Small bugfix release.

• Fixes a bug with the use of the cJSON structs type in cJSON_Utils, see d47339e274
• improve code readability
• initialize all variables

1.0.0

This is the first official versioned release of cJSON. It provides an API version for the shared library and improved Makefile and CMake build files.