[CXF-7496] Parsing Bug in org.apache.cxf.jaxrs.json.basic.JsonMapObjectReaderWriter: in-string "{"

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.7, 3.1.12
• Fix Version/s: 3.1.13, 3.2.0
• Component/s: JAX-RS

Environment

java version "1.8.0_25"
Java(TM) SE Runtime Environment (build 1.8.0_25-b18)
Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)

• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Alon Bar-Lev
• Created: 04/Sep/17 17:02
• Updated: 28/Nov/17 10:42
• Resolved: 05/Sep/17 15:35

Description

Hello,

We have found incorrect parsing of "{" within JSON strings. It seems like the parser searches for "

{" and "}

" regardless of string boundary.

A reproduction program is attached, using latest 3.1.12 version.

Thanks!

REPRODUCTION

import org.apache.cxf.jaxrs.json.basic.JsonMapObjectReaderWriter;

public class JsonMapReaderNotWorking {
	
	public static void main(String args[]) throws Exception
	{
		JsonMapObjectReaderWriter jsonMapObjectReaderWriter = new JsonMapObjectReaderWriter();
		String s = "{\"x\":{\"y\":\"{\"}}";
		System.out.println(s);
		jsonMapObjectReaderWriter.fromJson(s);
	}
}

RESULT

	{"x":{"y":"{"}}
	Exception in thread "main" java.lang.StringIndexOutOfBoundsException: String index out of range: -6
		at java.lang.String.substring(String.java:1967)
		at org.apache.cxf.jaxrs.json.basic.JsonMapObjectReaderWriter.readJsonObjectAsSettable(JsonMapObjectReaderWriter.java:189)
		at org.apache.cxf.jaxrs.json.basic.JsonMapObjectReaderWriter.fromJson(JsonMapObjectReaderWriter.java:162)
		at JsonMapReaderNotWorking.main(JsonMapReaderNotWorking.java:13)