Fix parsing single quote within double quotes

Found with go-fuzz

Signed-off-by: Jonathan Rudenberg <[email protected]>

Author: titanous

decode.go

@@ -1189,6 +1189,7 @@ func unquoteBytes(s []byte) (t []byte, ok bool) {
 	if len(s) < 2 || (s[0] != '"' && s[0] != '\'') || (s[len(s)-1] != '"' && s[len(s)-1] != '\'') {
 		return
 	}
+	orig := s
 	s = s[1 : len(s)-1]
 
 	// Check for unusual characters. If there are none,
@@ -1287,7 +1288,7 @@ func unquoteBytes(s []byte) (t []byte, ok bool) {
 			}
 
 		// Quote, control characters are invalid.
-		case s[0] == '"' && c == '"', s[0] == '\'' && c == '\'', c < ' ':
+		case orig[0] == '"' && c == '"', orig[0] == '\'' && c == '\'', c < ' ':
 			return
 
 		// ASCII

json5_test.go

@@ -130,3 +130,16 @@ func TestJSON5Decode(t *testing.T) {
 		return nil
 	})
 }
+
+// found with go-fuzz
+func TestQuotedQuote(t *testing.T) {
+	var v struct {
+		E string
+	}
+	if err := Unmarshal([]byte(`{e:"'"}`), &v); err != nil {
+		t.Error(err)
+	}
+	if v.E != "'" {
+		t.Errorf(`expected "'", got %q`, v.E)
+	}
+}