6 Commits

Author	SHA1	Message	Date
Jan Dubois	1b549962b2	Fix panic on negative slice indices that underflow after adjustment ... sliceArrayOperator adjusts negative indices by adding Content length, but does not clamp the result. When the absolute value of a negative index exceeds Content length (e.g. .[-99999:3] on a 3-element array), the adjusted index remains negative and causes an out-of-bounds access in the Content slice loop. Extract the adjust-and-clamp logic into clampSliceIndex and use it for both index positions. Reproducer (panics before this fix, returns full array after): echo '[a, b, c]' | yq '.[-99999:3]' Found by OSS-Fuzz via the lima project's FuzzEvaluateExpression target. https://issues.oss-fuzz.com/issues/438776028 Signed-off-by: Jan Dubois <jan@jandubois.com> Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-05 22:35:04 -07:00
Copilot	7d8d3ab902	Replace gopkg.in/op/go-logging.v1 with log/slog (#2635) ... * Initial plan * Replace gopkg.in/op/go-logging.v1 with log/slog Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com> Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/aa9c12f4-21b9-4633-9868-6b56585b247f --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>	2026-03-26 20:41:54 +11:00
Mike Farah	13d1bbb45f	Generic ast (#1829) ... Remove dependency on yaml.Node for internal AST representation. Yaml decoder is now just another decoder.	2023-10-18 12:11:53 +11:00
Mike Farah	3b84c03131	Fixed bug in splice operator #1511	2023-01-13 13:45:19 +11:00
Mike Farah	04847502bf	Can use expressions in slice #1419	2022-11-10 18:03:18 +11:00
Mike Farah	d99614f55a	Slice array (#1403)	2022-10-29 18:15:21 +11:00