itchyny fb59f14910 Limit path depth to prevent stack overflow ...

Deeply nested path arrays can cause unbounded recursion in
`jv_setpath`, `jv_getpath`, and `jv_delpaths`, leading to
stack overflow. Add a depth limit of 10000 to match the
existing `tojson` depth limit. This fixes CVE-2026-33947.

2026-04-13 11:23:40 +09:00

..

modules

…

torture

…

base64.test

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

base64test

…

jq_fuzz_compile.c

jq_fuzz_compile: dump disassembly

2023-11-30 14:40:36 +01:00

jq_fuzz_execute.cpp

jq_fuzz_execute: limit oniguruma depth to 1024 (#3377)

2025-10-05 12:50:42 +09:00

jq_fuzz_fixed.cpp

jq_fuzz_fixed: fix test cases that use string interpolation

2023-12-10 15:22:03 +01:00

jq_fuzz_load_file.c

Update jq_fuzz_load_file.c: Add missing include unistd.h (#3085)

2024-03-29 10:13:25 +01:00

jq_fuzz_parse_extended.c

jq_fuzz_parse_extended.c: don't jv_free() twice

2023-11-28 20:51:07 +01:00

jq_fuzz_parse_stream.c

fix jq_fuzz_parse_stream: use iterative parser API for streaming mode (#3499)

2026-03-11 11:49:14 +09:00

jq_fuzz_parse.c

…

jq-f-test.sh

…

jq.test

Limit path depth to prevent stack overflow

2026-04-13 11:23:40 +09:00

jqtest

…

local.supp

…

man.test

Add trimstr/1 function (#3319)

2025-05-21 18:46:04 +09:00

manonig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

manonigtest

…

mantest

…

no-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00

onig.supp

…

onig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

onigtest

…

optional.test

Fix portability of strptime especially for Windows (#3342)

2025-06-14 08:00:55 +09:00

optionaltest

…

setup

Disable Valgrind by default during testing (#3269)

2025-03-04 22:12:25 +09:00

shtest

Fix NUL truncation in the JSON parser

2026-04-13 08:46:11 +09:00

uri.test

Refactor @uri and @urid and fix multi-byte UTF-8 corruption (#3495)

2026-03-05 08:28:09 +09:00

uritest

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

utf8test

Fix slurping raw input not to corrupt multi-byte characters (fix #3389) (#3421)

2025-10-31 15:16:29 +09:00

yes-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00