navigine/jq
1
0 Fork 0
mirror of https://github.com/jqlang/jq.git synced 2026-10-30 10:06:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Reject NaN with payload while parsing JSON

Browse Source 
This commit drops support for parsing NaN with payload in JSON like
`NaN123` and fixes CVE-2024-53427. Other JSON extensions like `NaN` and
`Infinity` are still supported. Fixes #3023, fixes #3196, fixes #3246.
This commit is contained in:
itchyny committed 2025-03-05 07:43:54 +09:00
1 parent a8ce2ff09a
commit a09a4dfd55
3 files changed
+15 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tests/jq.test
+10 -4
View File
@@ -2110,11 +2110,17 @@ tojson | fromjson
{"a":nan}
{"a":null}
# also "nan with payload" #2985
if have_decnum then fromjson else nan end | isnan
"nan1234"
# NaN with payload is not parsed
.[] | try (fromjson | isnan) catch .
["NaN","-NaN","NaN1","NaN10","NaN100","NaN1000","NaN10000","NaN100000"]
true
true
"Invalid numeric literal at EOF at line 1, column 4 (while parsing 'NaN1')"
"Invalid numeric literal at EOF at line 1, column 5 (while parsing 'NaN10')"
"Invalid numeric literal at EOF at line 1, column 6 (while parsing 'NaN100')"
"Invalid numeric literal at EOF at line 1, column 7 (while parsing 'NaN1000')"
"Invalid numeric literal at EOF at line 1, column 8 (while parsing 'NaN10000')"
"Invalid numeric literal at EOF at line 1, column 9 (while parsing 'NaN100000')"
# calling input/0, or debug/0 in a test doesn't crash jq