The current REST JSON input parser only calls the json_decode() PHP function without any further checking. As a result, if the JSON is invalid, you only get an error message due to NULL being used as an array.