Guard deep structural equality and comparison recursion (#3539)
jv_equal and jv_cmp overflows the C stack on deeply nested input. Cap recursion at 10000 with -1 / INT_MIN sentinels; operators that compose user expressions surface this as "Equality check too deep" / "Comparison too deep". Fixes CVE-2026-47770.
Y
Yu-Fu Fu committed
7122866869960b55cea3646bc91334ef55787831
Parent: f58787c
Committed by GitHub <noreply@github.com>
on 5/22/2026, 11:07:16 AM