itchyny f58787c418 Detect circular module imports to prevent stack overflow ...

jq used to recurse without bound on mutual or self-referential
`import` declarations, exhausting the stack. Track each library's
load state with a `loading` flag set before its dependencies are
processed; a recursive reference to an in-progress library now
reports "circular import of X".

Fixes CVE-2026-44777.

2026-05-11 20:41:38 +09:00

..

modules

Detect circular module imports to prevent stack overflow

2026-05-11 20:41:38 +09:00

torture

…

base64.test

Improve error message truncation with closing delimiters (#3478)

2026-02-25 08:14:23 +09:00

base64test

Add @base64d for decoding base64 #47

2017-02-12 16:03:59 -05:00

jq_fuzz_compile.c

jq_fuzz_compile: dump disassembly

2023-11-30 14:40:36 +01:00

jq_fuzz_execute.cpp

jq_fuzz_execute: limit oniguruma depth to 1024 (#3377)

2025-10-05 12:50:42 +09:00

jq_fuzz_fixed.cpp

jq_fuzz_fixed: fix test cases that use string interpolation

2023-12-10 15:22:03 +01:00

jq_fuzz_load_file.c

Update jq_fuzz_load_file.c: Add missing include unistd.h (#3085)

2024-03-29 10:13:25 +01:00

jq_fuzz_parse_extended.c

jq_fuzz_parse_extended.c: don't jv_free() twice

2023-11-28 20:51:07 +01:00

jq_fuzz_parse_stream.c

fix jq_fuzz_parse_stream: use iterative parser API for streaming mode (#3499)

2026-03-11 11:49:14 +09:00

jq_fuzz_parse.c

Add first fuzzer for integration with OSS-Fuzz.

2023-07-10 13:57:38 -05:00

jq-f-test.sh

…

jq.test

Limit recursive object merge depth to prevent stack overflow

2026-05-05 22:44:02 +09:00

jqtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

local.supp

Save literal value of the parsed number to preserve it for the output

2019-10-22 14:11:04 -04:00

man.test

Add trimstr/1 function (#3319)

2025-05-21 18:46:04 +09:00

manonig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

manonigtest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

mantest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

no-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00

onig.supp

…

onig.test

Refactor splits/2 using foreach syntax (remove private filter _nwise) (#3260)

2025-05-18 08:27:44 +09:00

onigtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

optional.test

Fix portability of strptime especially for Windows (#3342)

2025-06-14 08:00:55 +09:00

optionaltest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

setup

Disable Valgrind by default during testing (#3269)

2025-03-04 22:12:25 +09:00

shtest

Detect circular module imports to prevent stack overflow

2026-05-11 20:41:38 +09:00

uri.test

Refactor @uri and @urid and fix multi-byte UTF-8 corruption (#3495)

2026-03-05 08:28:09 +09:00

uritest

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

utf8test

Fix slurping raw input not to corrupt multi-byte characters (fix #3389) (#3421)

2025-10-31 15:16:29 +09:00

yes-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00