Fix #898: use ctxt as expected, not _parent

FasterXML · Jan 28, 2023 · 48f3066 · 48f3066
1 parent 3b9c7ed
commit 48f3066
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -26,6 +26,8 @@ JSON library.
  (contributed by Phillipe M)
 #897: Note that jackson-core 2.15 is now a multi-release jar
   (for more optimized number parsing for JDKs beyond 8)
+#898: Possible flaw in `TokenFilterContext#skipParentChecks()`
+ (reported by @robotmrv)
 - Build uses package type "jar" but still produces valid OSGi bundle
  (changed needed to keep class timestamps with Reproducible Build)
 

diff --git a/src/main/java/com/fasterxml/jackson/core/filter/TokenFilterContext.java b/src/main/java/com/fasterxml/jackson/core/filter/TokenFilterContext.java
@@ -274,7 +274,7 @@ public TokenFilterContext closeObject(JsonGenerator gen) throws IOException
     public void skipParentChecks() {
         _filter = null;
         for (TokenFilterContext ctxt = _parent; ctxt != null; ctxt = ctxt._parent) {
-            _parent._filter = null;
+            ctxt._filter = null;
         }
     }