From c15eb6333bde9e8870afc233e689d7de4b2cb5a2 Mon Sep 17 00:00:00 2001
From: tlnguyen <tlnguyen@smu.edu.sg>
Date: Sun, 25 Jan 2026 20:44:18 +0800
Subject: [PATCH] Potential Vulnerability in Cloned Code

---
 contrib/deprecated/python/ujson/py3/lib/ultrajsondec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/deprecated/python/ujson/py3/lib/ultrajsondec.c b/contrib/deprecated/python/ujson/py3/lib/ultrajsondec.c
index 21a732eceb..0e0a65a988 100644
--- a/contrib/deprecated/python/ujson/py3/lib/ultrajsondec.c
+++ b/contrib/deprecated/python/ujson/py3/lib/ultrajsondec.c
@@ -449,7 +449,7 @@ FASTCALL_ATTR JSOBJ FASTCALL_MSVC decode_string ( struct DecoderState *ds)
       escStart = (wchar_t *)ds->dec->realloc(ds->escStart, newSize * sizeof(wchar_t));
       if (!escStart)
       {
-        ds->dec->free(ds->escStart);
+        // Don't free ds->escStart here; it gets handled in JSON_DecodeObject.
         return SetError(ds, -1, "Could not reserve memory block");
       }
       ds->escStart = escStart;