Document input file for each vuln

Author: grajagandev

build-command-line

@@ -128,9 +128,10 @@ static int new_value (json_state * state,
 	the length of a JSON array is 0. The program attempts to use that memory
 	block later in the program.
 
-	Diff     - Added: free(*top);
-	Payload  - An empty JSON array: []
-	Triggers - Use after free in json_value_free()
+	Diff       - Added: free(*top);
+	Payload    - An empty JSON array: []
+  Input File - emptyArray
+	Triggers   - Use after free in json_value_free()
 ******************************************************************************/
 
                free(*top);
@@ -1009,9 +1010,10 @@ void json_value_free_ex (json_settings * settings, json_value * value)
 	value->u.object.length, causing an invalid read when attempting to free the 
 	memory space in the if-statement above.
 
-	Diff     - [--value->u.object.length] --> [value->u.object.length--]
-	Payload  - Any valid JSON object : {"":0}
-	Triggers - Invalid free in the above if-statement
+	Diff       - [--value->u.object.length] --> [value->u.object.length--]
+	Payload    - Any valid JSON object : {"":0}
+  Input File - validObject
+	Triggers   - Invalid free in the above if-statement
 ******************************************************************************/
 
             value = value->u.object.values [value->u.object.length--].value;
@@ -1028,9 +1030,10 @@ void json_value_free_ex (json_settings * settings, json_value * value)
 	is empty. After decrementing, the program tries to call mem_free on the
 	pointer, which no longer references the JSON string.
 
-	Diff     - Added: if (!value->u.string.length) value->u.string.ptr--;
-	Payload  - An empty JSON string : ""
-	Triggers - Invalid free on decremented value->u.string.ptr
+	Diff       - Added: if (!value->u.string.length) value->u.string.ptr--;
+	Payload    - An empty JSON string : ""
+  Input File - emptyString
+	Triggers   - Invalid free on decremented value->u.string.ptr
 ******************************************************************************/
 
          		if (!value->u.string.length){
@@ -1045,9 +1048,10 @@ void json_value_free_ex (json_settings * settings, json_value * value)
   The code below creates and dereferences a NULL pointer if the string
   is of length one.
 
-  Diff     - Check for one byte string - create and dereference a NULL pointer
-  Payload  - An JSON string of length one : "A"
-  Triggers - NULL pointer dereference
+  Diff       - Check for one byte string - create and dereference a NULL pointer
+  Payload    - A JSON string of length one : "A"
+  Input File - oneByteString
+  Triggers   - NULL pointer dereference
 ******************************************************************************/
 
             if (value->u.string.length == 1) {