json.c be sure a string is NUL terminated.

1 files changed, 1 insertions, 0 deletions

diff --git a/json.c b/json.c
index 0f912c4a..6f444c18 100644
--- a/json.c
+++ b/json.c
@@ -394,6 +394,7 @@ static int json_internal_read_object(const char *cp,
 	    case 'u':
 		for (n = 0; n < 4 && cp[n] != '\0'; n++)
 		    uescape[n] = *cp++;
+		uescape[n] = '\0';      /* terminate */
 		--cp;
 		(void)sscanf(uescape, "%04x", &u);
 		*pval++ = (char)u;	/* will truncate values above 0xff */