Tags: jqlang/jq
Tags
Merge pull request from GHSA-686w-5m7m-54vc decNumberToString calls for a buffer that can hold a string of digits+14 characters, not a buffer of size digits+14. We need to allocate an extra byte for the NUL byte. -10E-1000010001, for example, will be stringified as -1.0E-1000010000 and decNumberToString will currently write an extra NUL byte after the allocated buffer in the heap. Originally reported by @SEU-SSL on GitHub. Ref: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 Fixes GHSA-686w-5m7m-54vc
Restore JV_PRINT_COLOUR as an alias JV_PRINT_COLOUR was part of the public libjq headers and was removed as part of 2d05b54. While JV_PRINT_COLOR is definitely the preferred spelling this side of the pond, we shouldn't just remove otherwise exposed enum values.
PreviousNext