fix security hole for string-key-lengths > 2^30

src/lib_json/json_reader.cpp

@@ -1430,6 +1430,7 @@ bool OurReader::readObject(Token& tokenStart) {
       return addErrorAndRecover(
           "Missing ':' after object member name", colon, tokenObjectEnd);
     }
+    if (name.length() >= (1U<<30)) throw std::runtime_error("keylength >= 2^30");
     Value& value = currentValue()[name];
     nodes_.push(&value);
     bool ok = readValue();

src/lib_json/json_value.cpp

@@ -191,8 +191,6 @@ void Value::CommentInfo::setComment(const char* text, size_t len) {
 
 // Notes: policy_ indicates if the string was allocated when
 // a string is stored.
-//
-// TODO: Check for length > 1GB, in Reader.
 
 Value::CZString::CZString(ArrayIndex index) : cstr_(0), index_(index) {}