================================================== CVE-2026-49844 reproduction | log4j-api version: 2.25.5-fixed ================================================== --- Path 1: getFormattedMessage(["JSON"]) with scalar Double values --- [double-scalar] value=NaN JSON output: {"number":"NaN"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [double-scalar] value=Infinity JSON output: {"number":"Infinity"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [double-scalar] value=-Infinity JSON output: {"number":"-Infinity"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) --- Path 1: getFormattedMessage(["JSON"]) with double[] arrays --- [double-array] value=NaN JSON output: {"numbers":["NaN"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [double-array] value=Infinity JSON output: {"numbers":["Infinity"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [double-array] value=-Infinity JSON output: {"numbers":["-Infinity"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) --- Path 1: getFormattedMessage(["JSON"]) with scalar Float values --- [float-scalar] value=NaN JSON output: {"number":"NaN"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [float-scalar] value=Infinity JSON output: {"number":"Infinity"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [float-scalar] value=-Infinity JSON output: {"number":"-Infinity"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) --- Path 1: getFormattedMessage(["JSON"]) with float[] arrays --- [float-array] value=NaN JSON output: {"numbers":["NaN"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [float-array] value=Infinity JSON output: {"numbers":["Infinity"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) [float-array] value=-Infinity JSON output: {"numbers":["-Infinity"]} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) --- Path 2: asJson(StringBuilder) direct call (protected) --- [asJson-direct] value=NaN/Inf/-Inf JSON output: {"inf":"Infinity","ninf":"-Infinity","number":"NaN"} >> non-finite value is QUOTED (valid JSON string) >> strict JSON parse OK (valid RFC 8259 JSON) ================================================== SUMMARY (2.25.5-fixed) total cases tested : 13 bare NaN/Infinity tokens : 0 quoted NaN/Infinity tokens: 13 JSON parse failures : 0 ================================================== VERDICT|2.25.5-fixed|FIXED|bare=0|quoted=13|parseFail=0