Fixed heap-use-after-free in JSON.stringify().

njs_json_stringify_iterator() assumed, while stringifying flat arrays, that a
flat array will always remain flat.  This is not the case for flat arrays with
values with custom getters which may modify the enclosing array upon
invocation.

This closes #322 issue on GitHub.
2 files changed
tree: fe5c987f8812c29815e45d6dd91de60c7f25f3f9
  1. .hgtags
  2. CHANGES
  3. LICENSE
  4. README
  5. auto/
  6. configure
  7. nginx/
  8. src/
  9. test/
  10. utils/