6 Commits

Author	SHA1	Message	Date
Jan Dubois	80139ae1cc	Fix panic on negative slice indices that underflow after adjustment (#2646) ... sliceArrayOperator adjusts negative indices by adding Content length, but does not clamp the result. When the absolute value of a negative index exceeds Content length (e.g. .[-99999:3] on a 3-element array), the adjusted index remains negative and causes an out-of-bounds access in the Content slice loop. Extract the adjust-and-clamp logic into clampSliceIndex and use it for both index positions. Reproducer (panics before this fix, returns full array after): echo '[a, b, c]' | yq '.[-99999:3]' Found by OSS-Fuzz via the lima project's FuzzEvaluateExpression target. https://issues.oss-fuzz.com/issues/438776028 Signed-off-by: Jan Dubois <jan@jandubois.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-06 18:27:02 +10:00
Copilot	7d8d3ab902	Replace gopkg.in/op/go-logging.v1 with log/slog (#2635) ... * Initial plan * Replace gopkg.in/op/go-logging.v1 with log/slog Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com> Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/aa9c12f4-21b9-4633-9868-6b56585b247f --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>	2026-03-26 20:41:54 +11:00
Mike Farah	13d1bbb45f	Generic ast (#1829) ... Remove dependency on yaml.Node for internal AST representation. Yaml decoder is now just another decoder.	2023-10-18 12:11:53 +11:00
Mike Farah	3b84c03131	Fixed bug in splice operator #1511	2023-01-13 13:45:19 +11:00
Mike Farah	04847502bf	Can use expressions in slice #1419	2022-11-10 18:03:18 +11:00
Mike Farah	d99614f55a	Slice array (#1403)	2022-10-29 18:15:21 +11:00