Release 1.7.17

update version to 1.7.17

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 85fa40cce32ab7a9e97f9fe647366a5fd045b1ec..51261ab52d92cca75e8351aca07b9bd24649b7bb 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+1.7.17 (Dec 26, 2023)
+======
+Fixes:
+------
+* Fix null reference in cJSON_SetValuestring(CVE-2023-50472), see #809
+* Fix null reference in cJSON_InsertItemInArray(CVE-2023-50471), see #809 and #810
+
 1.7.16 (Jul 5, 2023)
 ======
 Features:

diff --git a/CMakeLists.txt b/CMakeLists.txt
index f23ec63195827a04fcfc16f21afa0bd817c3cc9d..0d807ea62c6ee72a6ce753061342786293c0f2c5 100644 (file)
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -2,7 +2,7 @@ set(CMAKE_LEGACY_CYGWIN_WIN32 0)
 cmake_minimum_required(VERSION 3.0)
 
 project(cJSON
-    VERSION 1.7.16
+    VERSION 1.7.17
     LANGUAGES C)
 
 cmake_policy(SET CMP0054 NEW)  # set CMP0054 policy

diff --git a/Makefile b/Makefile
index 40b61527b8031a63f131becb67ff6807f6944bbd..bc762e05cbdd884eed71bff3e0a63595f41a04f8 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -8,7 +8,7 @@ CJSON_TEST_SRC = cJSON.c test.c
 
 LDLIBS = -lm
 
-LIBVERSION = 1.7.16
+LIBVERSION = 1.7.17
 CJSON_SOVERSION = 1
 UTILS_SOVERSION = 1
 

diff --git a/cJSON.c b/cJSON.c
index 8411d9477b8a04c6f3e60d182eec6be6b2cb48a6..4e4979e99d56f471a07fef903378c8303e549e27 100644 (file)
--- a/cJSON.c
+++ b/cJSON.c
@@ -117,7 +117,7 @@ CJSON_PUBLIC(double) cJSON_GetNumberValue(const cJSON * const item)
 }
 
 /* This is a safeguard to prevent copy-pasters from using incompatible C and header files */
-#if (CJSON_VERSION_MAJOR != 1) || (CJSON_VERSION_MINOR != 7) || (CJSON_VERSION_PATCH != 16)
+#if (CJSON_VERSION_MAJOR != 1) || (CJSON_VERSION_MINOR != 7) || (CJSON_VERSION_PATCH != 17)
     #error cJSON.h and cJSON.c have different versions. Make sure that both have the same.
 #endif
 

diff --git a/cJSON.h b/cJSON.h
index 2628d7637d403e6eee7478086f9a893a86634ba8..218cc9ea6aff89a152e907e110b49d8617a67cf6 100644 (file)
--- a/cJSON.h
+++ b/cJSON.h
@@ -81,7 +81,7 @@ then using the CJSON_API_VISIBILITY flag to "export" the same symbols the way CJ
 /* project version */
 #define CJSON_VERSION_MAJOR 1
 #define CJSON_VERSION_MINOR 7
-#define CJSON_VERSION_PATCH 16
+#define CJSON_VERSION_PATCH 17
 
 #include <stddef.h>