Scott Seal 3985b80ce5 Fix use-after-free in args2obj() array argument path (#3498) ...

Copy `kk` and `vk` before passing to jv_object_get(), which consumes
its arguments. Without copies, subsequent loop iterations read freed
memory (CWE-416) and post-loop jv_free() double-frees (CWE-415).

This bug was introduced in `b279713e` when array processing was hoisted
out of
the loop into locals without accounting for jv_object_get() semantics.
Fixes GHSA-gf4g-95wj-4q4r.

2026-03-09 17:30:08 +09:00

..

builtin.c

Fix tonumber and toboolean to reject strings with embedded null bytes (#3496)

2026-03-05 08:28:43 +09:00

builtin.h

Constant fold all kinds of constants

2023-08-04 11:47:34 -05:00

builtin.jq

Fix rtrimstr("") always output "" (#3415)

2025-09-29 17:15:43 +02:00

bytecode.c

…

bytecode.h

builtin.c: typecheck builtin cfunctions in function_list

2024-12-01 11:49:44 +01:00

compile.c

Limit number of function parameters and definitions to prevent SEGV (#3460)

2026-02-25 07:49:40 +09:00

compile.h

Fix warning: a function definition without a prototype is deprecated (#3259)

2025-05-07 21:25:32 +09:00

exec_stack.h

Remove undefined behavior caught by LLVM 10 UBSAN.

2023-10-08 12:32:22 -05:00

execute.c

Fix use-after-free in args2obj() array argument path (#3498)

2026-03-09 17:30:08 +09:00

inject_errors.c

Remove all #define _GNU_SOURCE in source files

2023-07-24 15:44:29 +02:00

jq_parser.h

…

jq_test.c

Fix use-after-free in args2obj() array argument path (#3498)

2026-03-09 17:30:08 +09:00

jq.h

libjq: extern C for C++

2023-11-28 22:50:25 +01:00

jv_alloc.c

Fix warning: a function definition without a prototype is deprecated (#3259)

2025-05-07 21:25:32 +09:00

jv_alloc.h

Avoid zero-length calloc (#3280)

2025-03-04 22:33:51 +09:00

jv_aux.c

Fix infinite loop and undefined behavior in del(.[nan]) (#3490)

2026-03-02 21:58:28 +09:00

jv_dtoa_tsd.c

Use jv_mem_alloc to allocate dtoa_context in tsd_dtoa_context_get (#3356)

2025-06-30 07:27:24 +09:00

jv_dtoa_tsd.h

Fix warning: a function definition without a prototype is deprecated (#3259)

2025-05-07 21:25:32 +09:00

jv_dtoa.c

Fix whitespace in number parsing (#3195)

2025-05-29 04:11:00 +09:00

jv_dtoa.h

…

jv_file.c

Fix memory leaks and double frees (#3487)

2026-03-01 06:15:58 +09:00

jv_parse.c

Pre-allocate tokenbuf for string parser (#3485)

2026-02-28 15:45:16 +01:00

jv_print.c

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

jv_private.h

Rename jv_type_private.h to jv_private.h, move jvp_number_is_nan there

2023-08-13 14:16:02 +02:00

jv_thread.h

Cross compile for Linux, MacOS and Windows on CI (#2665)

2023-07-10 08:05:25 +09:00

jv_unicode.c

Add trim/0, ltrim/0 and rtrim/0 that trims leading and trailing whitespace (#3056)

2024-03-20 11:04:17 +01:00

jv_unicode.h

Add trim/0, ltrim/0 and rtrim/0 that trims leading and trailing whitespace (#3056)

2024-03-20 11:04:17 +01:00

jv_utf8_tables.h

…

jv.c

Fix memory leaks and double frees (#3487)

2026-03-01 06:15:58 +09:00

jv.h

Improve performance of repeating strings (#3272)

2025-03-04 22:13:55 +09:00

lexer.c

Support CRLF line breaks in filters (#3274)

2025-03-04 22:11:40 +09:00

lexer.h

Support CRLF line breaks in filters (#3274)

2025-03-04 22:11:40 +09:00

lexer.l

Support CRLF line breaks in filters (#3274)

2025-03-04 22:11:40 +09:00

libm.h

Remove non-standard pow10 filter in favor of exp10 (#3059)

2024-03-20 18:23:08 +09:00

linker.c

Fix crash when importing a module with errors twice (#3497)

2026-03-06 15:32:29 +09:00

linker.h

…

locfile.c

Fix syntax error assertion failure (fix #3348) (#3350)

2025-06-17 15:25:46 +09:00

locfile.h

…

main.c

Fix memory leaks and double frees (#3487)

2026-03-01 06:15:58 +09:00

opcode_list.h

Add ERRORK opcode to trigger constant errors

2023-08-04 11:47:34 -05:00

parser.c

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

parser.h

Constant fold all kinds of constants

2023-08-04 11:47:34 -05:00

parser.y

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

util.c

Fix slurping raw input not to corrupt multi-byte characters (fix #3389) (#3421)

2025-10-31 15:16:29 +09:00

util.h

Add strptime fallback not only for Windows

2024-04-18 01:38:29 +02:00