itchyny a09a4dfd55 Reject NaN with payload while parsing JSON ...

This commit drops support for parsing NaN with payload in JSON like
`NaN123` and fixes CVE-2024-53427. Other JSON extensions like `NaN` and
`Infinity` are still supported. Fixes #3023, fixes #3196, fixes #3246.

2025-03-05 07:43:54 +09:00

..

modules

Bind libraries backward for consistent shadowing

2019-02-26 21:57:08 -06:00

torture

Add Streaming parser (--stream)

2014-12-26 23:05:56 -06:00

base64.test

Avoid zero-length calloc (#3280)

2025-03-04 22:33:51 +09:00

base64test

Add @base64d for decoding base64 #47

2017-02-12 16:03:59 -05:00

jq_fuzz_compile.c

jq_fuzz_compile: dump disassembly

2023-11-30 14:40:36 +01:00

jq_fuzz_execute.cpp

jq_fuzz_execute.cpp: fix false assert

2023-12-03 17:54:25 +01:00

jq_fuzz_fixed.cpp

jq_fuzz_fixed: fix test cases that use string interpolation

2023-12-10 15:22:03 +01:00

jq_fuzz_load_file.c

Update jq_fuzz_load_file.c: Add missing include unistd.h (#3085)

2024-03-29 10:13:25 +01:00

jq_fuzz_parse_extended.c

jq_fuzz_parse_extended.c: don't jv_free() twice

2023-11-28 20:51:07 +01:00

jq_fuzz_parse_stream.c

Extend fuzzing set up

2023-11-28 20:36:59 +01:00

jq_fuzz_parse.c

Add first fuzzer for integration with OSS-Fuzz.

2023-07-10 13:57:38 -05:00

jq-f-test.sh

Make it easier to use jq with shebangs (fix #1044)

2015-12-14 22:08:17 -08:00

jq.test

Reject NaN with payload while parsing JSON

2025-03-05 07:43:54 +09:00

jqtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

local.supp

Save literal value of the parsed number to preserve it for the output

2019-10-22 14:11:04 -04:00

man.test

fix: preserve numerical precision on unary negation (#3242)

2025-02-06 07:50:21 +09:00

manonig.test

docs: mention the behavior of scan using regex with capturing groups (#3240)

2025-01-28 11:41:17 +09:00

manonigtest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

mantest

Split man.test to make tests pass without oniguruma (#2722)

2023-07-18 08:17:21 +09:00

no-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00

onig.supp

Added regex support as per issue #164.

2014-06-18 21:02:47 -05:00

onig.test

Non-matched optional capture group should be null and offset -1 (#3238)

2025-02-04 19:18:58 +01:00

onigtest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

optional.test

Define _BSD_SOURCE in builtin.c for OpenBSD support (#3278)

2025-03-04 21:39:52 +09:00

optionaltest

Make it possible to run tests with set -x

2016-01-17 12:45:01 -06:00

setup

Disable Valgrind by default during testing (#3269)

2025-03-04 22:12:25 +09:00

shtest

Reject NaN with payload while parsing JSON

2025-03-05 07:43:54 +09:00

uri.test

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

uritest

feat: uri decode function (#3161)

2024-08-22 08:07:24 +09:00

utf8-truncate.jq

Handle cut-off UTF-8 sequences when reading files

2017-01-27 21:04:26 -05:00

utf8test

Change backticks to the more legible $()

2018-02-20 15:54:21 -05:00

yes-main-program.jq

Require a main program (fix #2785)

2023-08-01 23:06:01 -05:00