Security context

Highlights

Buffer Overflow: 5 prior fixes. Scrutinize any change in this area.

src/lib_json/json_reader.cpp: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Buffer Overflow: Integer overflow and negative length in duplicateStringValue lead to undersized malloc and heap overflow; high impact on any string parsing path.

Stack Buffer Overflow: decodeDouble uses a buffer too small for a 32-character double plus null terminator, causing stack overflow on crafted input.

Buffer Overflow: Fuzzer harness had an off-by-one size calculation leading to heap overflow, indicating the test input sizing logic itself is a risk surface.