diff --git a/tinygltf_json.h b/tinygltf_json.h index f39bc19..5c1e8dc 100644 --- a/tinygltf_json.h +++ b/tinygltf_json.h @@ -480,8 +480,9 @@ static char *cj_unescape_string(const char *p, const char *str_end, break; } default: - *dst++ = (char)esc; - break; + /* Unknown escape sequence is invalid in JSON */ + free(out); + return NULL; } } else if (c < 0x20u) { ++p; /* skip invalid control char */