navigine/jq
1
0 Fork 0
mirror of https://github.com/jqlang/jq.git synced 2026-10-26 20:16:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,965 Commits 19 Branches 19 Tags
80fc7a169d3a3942a07f587abc4346d119fc525d
Commit Graph
1 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Yu-Fu Fu 7122866869 Guard deep structural equality and comparison recursion (#3539) 
jv_equal and jv_cmp overflows the C stack on deeply nested
input. Cap recursion at 10000 with -1 / INT_MIN sentinels;
operators that compose user expressions surface this as
"Equality check too deep" / "Comparison too deep".

Fixes CVE-2026-47770.
 2026-05-22 20:07:16 +09:00