cpwhidden 997fe01809 [stdlib] Prevent type coercion from Bool to numerical types when decoding JSON and plist ...

JSONEncoder and PropertyListEncoder both use NSNumber to box Bool values.  An encoded Bool can be coerced to any numerical type during decoding because (false as NSNumber).intValue == 0.  As a remedy, all of the unbox(_:as:) methods of _JSONDecoder and _PlistDecoder for numerical types include a check that the value is not identical to either kCFBooleanTrue or kCFBooleanFalse, and throw a DecodingError._typeMismatch(at:expectation:) if this check fails.

2017-09-12 15:31:04 -05:00

94 KiB

Raw Blame History

View Raw