News for hackers. Stuff that matters.
Re:Parsing JSON Is a Minefield (2018) by userbinator on Saturday August 17, 2019 @04:46PM (#20726245)
Those aren't caused by values being length-delimited, they are caused by people deserializing variable-length values into fixed-length buffers without a check. That mistake can be made just as easily with a text format as with a binary format. In fact I've seen it much more often with text.

Especially since text can be arbitrarily long. From that perspective, length-delimited text (I've seen that before in a few file formats, and more notably HTTP) is probably the worst of both worlds.

There are no comments on this comment yet.