itchyny c6e041699d Fix heap buffer overflow when formatting an empty string ...

The `jv_string_empty` did not properly null-terminate the string data,
which could lead to a heap buffer overflow. The test case of
GHSA-p7rr-28xf-3m5w (`0[""*0]`) was fixed by the commit dc849e9bb7,
but another case (`0[[]|implode]`) was still vulnerable. This commit
ensures string data is properly null-terminated, and fixes CVE-2025-48060.

2025-05-31 11:46:40 +09:00

..

modules

Bind libraries backward for consistent shadowing

2019-02-26 21:57:08 -06:00

torture

…

base64.test

Fix calloc error on @base64d format (ref #3280) (#3286)

2025-03-06 04:30:46 +09:00

base64test

Add @base64d for decoding base64 #47

2017-02-12 16:03:59 -05:00

jq_fuzz_compile.c

jq_fuzz_compile: dump disassembly

2023-11-30 14:40:36 +01:00

jq_fuzz_execute.cpp

jq_fuzz_execute.cpp: fix false assert

2023-12-03 17:54:25 +01:00

jq_fuzz_fixed.cpp

jq_fuzz_fixed: fix test cases that use string interpolation

2023-12-10 15:22:03 +01:00

jq_fuzz_load_file.c

Update jq_fuzz_load_file.c: Add missing include unistd.h (#3085)

2024-03-29 10:13:25 +01:00

jq_fuzz_parse_extended.c

jq_fuzz_parse_extended.c: don't jv_free() twice

2023-11-28 20:51:07 +01:00

jq_fuzz_parse_stream.c

Extend fuzzing set up

2023-11-28 20:36:59 +01:00

jq_fuzz_parse.c

Add first fuzzer for integration with OSS-Fuzz.

2023-07-10 13:57:38 -05:00

jq-f-test.sh

…

jq.test

Fix heap buffer overflow when formatting an empty string

2025-05-31 11:46:40 +09:00

jqtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

local.supp

Save literal value of the parsed number to preserve it for the output

2019-10-22 14:11:04 -04:00

man.test

Add trimstr/1 function (#3319)

2025-05-21 18:46:04 +09:00

manonig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

manonigtest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

mantest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

no-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00

onig.supp

…

onig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

onigtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

optional.test

Define _BSD_SOURCE in builtin.c for OpenBSD support (#3278)

2025-03-04 21:39:52 +09:00

optionaltest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

setup

Disable Valgrind by default during testing (#3269)

2025-03-04 22:12:25 +09:00

shtest

Fix behavior of --slurp --stream when input has no trailing newline character (#3279)

2025-05-22 08:04:05 +09:00

uri.test

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

uritest

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

utf8-truncate.jq

Handle cut-off UTF-8 sequences when reading files

2017-01-27 21:04:26 -05:00

utf8test

Change backticks to the more legible $()

2018-02-20 15:54:21 -05:00

yes-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00