Proof Portal

Projects

jsonparser

ProbeLabs36 findings · 123 requirements
Back to findings
Problem reportDEFECT-260727-WWWY

Set beyond-length array index on scalar array destroys all elements (SYS-REQ-110 violation)

FixedFixedHigh

This defect has been fixed and verified.

Verified by 1 regression testResolved 1 known issue:KI-4

Introduced

When and where this issue first entered the codebase — the commit it traces back to.

Inception (latent from the first version)
Origin
Audit Finding

Severity, explained

Why this is rated the way it is — and the scoring signals behind the rating (each ⓘ explains the term).

HighRated severity — the impact if this issue is exploited or hit.
risk area
Data Integrity

Root cause

What actually went wrong underneath — and how it is classified.

parser.go:Set, subpath-not-found branch: the condition guarding "append to existing array" required `data[subObjOff] == '{'`, limiting the append path to arrays whose first element is an object. All other non-empty arrays fell through to the "replace container" branch (object=true), destroying existing elements.

Proof it's fixed

The tests, tightened requirements and new obligations that prove this defect is gone — and can't quietly return.

Covered by a requirement.

verified by
regression tests
strengthened requirements

Blast radius

If you touch this issue, what else may need re-checking — the requirements it affects and the code and tests that hang off them.

Nothing to trace into

This finding links no requirements, so there is no dependency graph to follow. Everything we know about it is in the evidence above.

Discussions

Discuss this with the proof team. Nothing changes in your audit automatically — you open a request and a staff member records any outcome inside the thread.

Sign in to discuss this with the proof team.Sign in