theyoucheng df924eae91 Fix undefined pointer arithmetic in UTF-8 helpers ...

Fixes GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq.

2026-05-23 10:11:11 +09:00

..

builtin.c

Fix one-byte over-read in BASE64_DECODE_TABLE (#3547)

2026-05-23 09:36:15 +09:00

builtin.h

…

builtin.jq

Use // instead of //= in from_entries definition (#3516)

2026-04-02 22:04:51 +09:00

bytecode.c

…

bytecode.h

…

compile.c

Reject embedded NUL bytes in module import paths

2026-05-09 17:08:43 +09:00

compile.h

Reject embedded NUL bytes in module import paths

2026-05-09 17:08:43 +09:00

exec_stack.h

Fix signed-int overflow in stack_reallocate

2026-04-24 22:09:44 +09:00

execute.c

Fix use-after-free in args2obj() array argument path (#3498)

2026-03-09 17:30:08 +09:00

inject_errors.c

…

jq_parser.h

…

jq_test.c

Fix crashes and resource leaks in jq_testsuite (#3509)

2026-03-15 21:45:16 +09:00

jq.h

…

jv_alloc.c

…

jv_alloc.h

…

jv_aux.c

Guard deep structural equality and comparison recursion (#3539)

2026-05-22 20:07:16 +09:00

jv_dtoa_tsd.c

Use jv_mem_alloc to allocate dtoa_context in tsd_dtoa_context_get (#3356)

2025-06-30 07:27:24 +09:00

jv_dtoa_tsd.h

…

jv_dtoa.c

Fix whitespace in number parsing (#3195)

2025-05-29 04:11:00 +09:00

jv_dtoa.h

…

jv_file.c

Fix memory leaks and double frees (#3487)

2026-03-01 06:15:58 +09:00

jv_parse.c

Fix signed-int overflow in tokenadd to prevent buffer overflow

2026-04-26 22:59:17 +09:00

jv_print.c

Reject numeric literals longer than DEC_MAX_DIGITS (999999999)

2026-05-06 19:45:24 +09:00

jv_private.h

…

jv_thread.h

…

jv_unicode.c

Fix undefined pointer arithmetic in UTF-8 helpers

2026-05-23 10:11:11 +09:00

jv_unicode.h

…

jv_utf8_tables.h

…

jv.c

Guard deep structural equality and comparison recursion (#3539)

2026-05-22 20:07:16 +09:00

jv.h

…

lexer.c

…

lexer.h

…

lexer.l

…

libm.h

…

linker.c

Detect circular module imports to prevent stack overflow

2026-05-11 20:41:38 +09:00

linker.h

…

locfile.c

Fix syntax error assertion failure (fix #3348) (#3350)

2025-06-17 15:25:46 +09:00

locfile.h

…

main.c

Fix NUL truncation in program files loaded with -f

2026-04-24 22:15:08 +09:00

opcode_list.h

…

parser.c

Reject embedded NUL bytes in module import paths

2026-05-09 17:08:43 +09:00

parser.h

…

parser.y

Reject embedded NUL bytes in module import paths

2026-05-09 17:08:43 +09:00

util.c

Fix NUL truncation in the JSON parser

2026-04-13 08:46:11 +09:00

util.h

…