itchyny fb59f14910 Limit path depth to prevent stack overflow ...

Deeply nested path arrays can cause unbounded recursion in
`jv_setpath`, `jv_getpath`, and `jv_delpaths`, leading to
stack overflow. Add a depth limit of 10000 to match the
existing `tojson` depth limit. This fixes CVE-2026-33947.

2026-04-13 11:23:40 +09:00

..

modules

Bind libraries backward for consistent shadowing

2019-02-26 21:57:08 -06:00

torture

Add Streaming parser (--stream)

2014-12-26 23:05:56 -06:00

base64.test

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

base64test

Add @base64d for decoding base64 #47

2017-02-12 16:03:59 -05:00

jq_fuzz_compile.c

jq_fuzz_compile: dump disassembly

2023-11-30 14:40:36 +01:00

jq_fuzz_execute.cpp

jq_fuzz_execute: limit oniguruma depth to 1024 (#3377)

2025-10-05 12:50:42 +09:00

jq_fuzz_fixed.cpp

jq_fuzz_fixed: fix test cases that use string interpolation

2023-12-10 15:22:03 +01:00

jq_fuzz_load_file.c

Update jq_fuzz_load_file.c: Add missing include unistd.h (#3085)

2024-03-29 10:13:25 +01:00

jq_fuzz_parse_extended.c

jq_fuzz_parse_extended.c: don't jv_free() twice

2023-11-28 20:51:07 +01:00

jq_fuzz_parse_stream.c

fix jq_fuzz_parse_stream: use iterative parser API for streaming mode (#3499)

2026-03-11 11:49:14 +09:00

jq_fuzz_parse.c

Add first fuzzer for integration with OSS-Fuzz.

2023-07-10 13:57:38 -05:00

jq-f-test.sh

Make it easier to use jq with shebangs (fix #1044)

2015-12-14 22:08:17 -08:00

jq.test

Limit path depth to prevent stack overflow

2026-04-13 11:23:40 +09:00

jqtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

local.supp

Save literal value of the parsed number to preserve it for the output

2019-10-22 14:11:04 -04:00

man.test

Add trimstr/1 function (#3319)

2025-05-21 18:46:04 +09:00

manonig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

manonigtest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

mantest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

no-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00

onig.supp

Added regex support as per issue #164.

2014-06-18 21:02:47 -05:00

onig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

onigtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

optional.test

Fix portability of strptime especially for Windows (#3342)

2025-06-14 08:00:55 +09:00

optionaltest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

setup

Disable Valgrind by default during testing (#3269)

2025-03-04 22:12:25 +09:00

shtest

Fix NUL truncation in the JSON parser

2026-04-13 08:46:11 +09:00

uri.test

Refactor @uri and @urid and fix multi-byte UTF-8 corruption (#3495)

2026-03-05 08:28:09 +09:00

uritest

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

utf8test

Fix slurping raw input not to corrupt multi-byte characters (fix #3389) (#3421)

2025-10-31 15:16:29 +09:00

yes-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00