Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by klysm on Sunday September 21, 2025 @02:34PM
(#45325382)
2 billion characters seems fairly plausible to hit in the real world
[ Parent
| on HN ]
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by naasking on Sunday September 21, 2025 @03:14PM
(#45325746)
2GB in a single JSON file is definitely an outlier. A simple caveat when using this header could suffice: ensure inputs are less than 2GB.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by jeroenhd on Sunday September 21, 2025 @04:07PM
(#45326188)
I've seen much bigger, though technically that wasn't valid json, but rather structured logging with JSON on each line. On the other hand, I've seen exported JSON files that could grow to such sizes without doing anything weird, just nothing exceeding a couple hundred megabytes because I didn't use the software for long enough.
Restricting the input to a reasonable size is an easy workaround for sure, but this limitation isn't indicated everywhere, so anyone deciding to consume this random project into their important code wouldn't know to defend against such situation.
In a web server scenario, 2GiB of { (which would trigger two overflows) in a compressed request would require a couple hundred kilobytes to two megabytes, depending on how old your server software is.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by account42 on Tuesday September 23, 2025 @10:28AM
(#45347551)
To be fair, anyone who uses a 150 line library without bothering to read it deserves what they get.
And in the spirit of your profile text I'm quite glad for such landmines being out there to trip up those that do blindly ingest all code they can find.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by layer8 on Sunday September 21, 2025 @03:28PM
(#45325861)
Less than INT_MAX, more accurately. But since the library contains a check when decreasing the counter, it might as well have a check when increasing the counter (and line/column numbers).
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by EasyMark on Sunday September 21, 2025 @03:25PM
(#45325833)
Or fork and make a few modifications to handle it? I have to admit I haven't looked at the code to see if this particular code would allow for that.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by maleldil on Sunday September 21, 2025 @04:24PM
(#45326317)
Not really. I deal with this everyday. If the library has a limit on the input size, it should mention this.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by naasking on Sunday September 21, 2025 @08:12PM
(#45327838)
If you deal with this every day, you're an outlier.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by johnisgood on Monday September 22, 2025 @04:43AM
(#45330665)
It is ~150 lines of code. Submit a PR, or when you git clone it add your checks, or stop complaining because the author does not owe you anything.
Re:Sj.h: A tiny little JSON parsing library in ~150 lines of...
by ricardobeat on Sunday September 21, 2025 @04:22PM
(#45326305)
In a single line. Still not impossible, but people handling that amount of data will likely not have “header only and <150 lines” as a strong criteria for choosing their JSON parsing library.