While i was testing SimpleJSON security i found a crash during string parsing inside parse_string function , below a screenshot.

This seems to be an information leak bug since the parser will try to parse a string until it found a matching " character in order to close the string inside the object, so providing something similar will result in a read out of bounds!

Step to reproduce:

Let me know if you need more information!

Regards,
Daniele Linguaglossa