.fmf/version

@@ -0,0 +1 @@
+1

.gitignore

@@ -1 +1,2 @@
 SOURCES/jq-1.6.tar.gz
+/jq-1.6.tar.gz

.jq.metadata

@@ -1 +0,0 @@
-02959bca30672e0dfe678e7b36464c8fb08ec389 SOURCES/jq-1.6.tar.gz

0005-sast.patch

@@ -0,0 +1,52 @@
+diff -up jq-1.6/src/jq_test.c.orig jq-1.6/src/jq_test.c
+--- jq-1.6/src/jq_test.c.orig	2024-05-03 11:47:47.403617188 +0200
++++ jq-1.6/src/jq_test.c	2024-05-03 11:48:46.569675199 +0200
+@@ -16,6 +16,7 @@ static void run_jq_pthread_tests();
+ 
+ int jq_testsuite(jv libdirs, int verbose, int argc, char* argv[]) {
+   FILE *testdata = stdin;
++  const char *testdata_filename = NULL;
+   int skip = -1;
+   int take = -1;
+   jv_test();
+@@ -28,18 +29,24 @@ int jq_testsuite(jv libdirs, int verbose
+         take = atoi(argv[i+1]);
+         i++;
+       } else {
+-        testdata = fopen(argv[i], "r");
+-        if (!testdata) {
+-          perror("fopen");
+-          exit(1);
+-        }
++        testdata_filename = argv[i];
+       }
+     }
+   }
++  if (testdata_filename) {
++    testdata = fopen(testdata_filename, "r");
++    if (!testdata) {
++      perror("fopen");
++      exit(1);
++    }
++  }
+   run_jq_tests(libdirs, verbose, testdata, skip, take);
+ #ifdef HAVE_PTHREAD
+   run_jq_pthread_tests();
+ #endif
++  if (testdata_filename) {
++    fclose(testdata);
++  }
+   return 0;
+ }
+ 
+diff -up jq-1.6/src/locfile.c.orig jq-1.6/src/locfile.c
+--- jq-1.6/src/locfile.c.orig	2018-11-02 02:49:29.000000000 +0100
++++ jq-1.6/src/locfile.c	2024-05-03 11:15:46.562476303 +0200
+@@ -72,6 +72,7 @@ void locfile_locate(struct locfile* l, l
+   }
+ 
+   jv m1 = jv_string_vfmt(fmt, fmtargs);
++  va_end(fmtargs);
+   if (!jv_is_valid(m1)) {
+     jq_report_error(l->jq, m1);
+     return;

0006-CVE-2024-23337.patch

@@ -0,0 +1,238 @@
+diff -up jq-1.6/src/jv_aux.c.orig jq-1.6/src/jv_aux.c
+--- jq-1.6/src/jv_aux.c.orig	2025-06-30 18:14:49.211823479 +0200
++++ jq-1.6/src/jv_aux.c	2025-06-30 18:15:20.270512946 +0200
+@@ -162,18 +162,19 @@ jv jv_set(jv t, jv k, jv v) {
+         if (slice_len < insert_len) {
+           // array is growing
+           int shift = insert_len - slice_len;
+-          for (int i = array_len - 1; i >= end; i--) {
++          for (int i = array_len - 1; i >= end && jv_is_valid(t); i--) {
+             t = jv_array_set(t, i + shift, jv_array_get(jv_copy(t), i));
+           }
+         } else if (slice_len > insert_len) {
+           // array is shrinking
+           int shift = slice_len - insert_len;
+-          for (int i = end; i < array_len; i++) {
++          for (int i = end; i < array_len && jv_is_valid(t); i++) {
+             t = jv_array_set(t, i - shift, jv_array_get(jv_copy(t), i));
+           }
+-          t = jv_array_slice(t, 0, array_len - shift);
++          if (jv_is_valid(t))
++            t = jv_array_slice(t, 0, array_len - shift);
+         }
+-        for (int i=0; i < insert_len; i++) {
++        for (int i = 0; i < insert_len && jv_is_valid(t); i++) {
+           t = jv_array_set(t, start + i, jv_array_get(jv_copy(v), i));
+         }
+         jv_free(v);
+diff -up jq-1.6/src/jv.c.orig jq-1.6/src/jv.c
+--- jq-1.6/src/jv.c.orig	2025-06-30 18:14:49.221499541 +0200
++++ jq-1.6/src/jv.c	2025-06-30 18:17:11.071456789 +0200
+@@ -326,10 +326,10 @@ static double jvp_literal_number_to_doub
+ 
+   decNumber *p_dec_number = jvp_dec_number_ptr(j);
+   decNumberDoublePrecision dec_double;
+-  char literal[BIN64_DEC_PRECISION + DEC_NUMBER_STRING_GUARD + 1]; 
++  char literal[BIN64_DEC_PRECISION + DEC_NUMBER_STRING_GUARD + 1];
+ 
+   // reduce the number to the shortest possible form
+-  // while also making sure than no more than BIN64_DEC_PRECISION 
++  // while also making sure than no more than BIN64_DEC_PRECISION
+   // digits are used (dec_context_to_double)
+   decNumberReduce(&dec_double.number, p_dec_number, DEC_CONTEXT_TO_DOUBLE());
+ 
+@@ -368,7 +368,7 @@ static const char* jvp_literal_number_li
+ 
+     // Preserve the actual precision as we have parsed it
+     // don't do decNumberTrim(pdec);
+-    
++
+     decNumberToString(pdec, plit->literal_data);
+   }
+ 
+@@ -459,9 +459,9 @@ int jvp_number_cmp(jv a, jv b) {
+   assert(JVP_HAS_KIND(b, JV_KIND_NUMBER));
+ 
+   if(JVP_HAS_FLAGS(a, JVP_FLAGS_NUMBER_LITERAL) && JVP_HAS_FLAGS(b, JVP_FLAGS_NUMBER_LITERAL)) {
+-    decNumberSingle res; 
+-    decNumberCompare(&res.number, 
+-                     jvp_dec_number_ptr(a), 
++    decNumberSingle res;
++    decNumberCompare(&res.number,
++                     jvp_dec_number_ptr(a),
+                      jvp_dec_number_ptr(b),
+                      DEC_CONTEXT()
+                      );
+@@ -703,6 +703,11 @@ jv jv_array_set(jv j, int idx, jv val) {
+     jv_free(val);
+     return jv_invalid_with_msg(jv_string("Out of bounds negative array index"));
+   }
++  if (idx > (INT_MAX >> 2) - jvp_array_offset(j)) {
++    jv_free(j);
++    jv_free(val);
++    return jv_invalid_with_msg(jv_string("Array index too large"));
++  }
+   // copy/free of val,j coalesced
+   jv* slot = jvp_array_write(&j, idx);
+   jv_free(*slot);
+@@ -722,6 +727,7 @@ jv jv_array_concat(jv a, jv b) {
+   // FIXME: could be faster
+   jv_array_foreach(b, i, elem) {
+     a = jv_array_append(a, elem);
++    if (!jv_is_valid(a)) break;
+   }
+   jv_free(b);
+   return a;
+@@ -992,6 +998,7 @@ jv jv_string_indexes(jv j, jv k) {
+   p = jstr;
+   while ((p = _jq_memmem(p, (jstr + jlen) - p, idxstr, idxlen)) != NULL) {
+     a = jv_array_append(a, jv_number(p - jstr));
++    if (!jv_is_valid(a)) break;
+     p += idxlen;
+   }
+   jv_free(j);
+@@ -1013,14 +1020,17 @@ jv jv_string_split(jv j, jv sep) {
+ 
+   if (seplen == 0) {
+     int c;
+-    while ((jstr = jvp_utf8_next(jstr, jend, &c)))
++    while ((jstr = jvp_utf8_next(jstr, jend, &c))) {
+       a = jv_array_append(a, jv_string_append_codepoint(jv_string(""), c));
++      if (!jv_is_valid(a)) break;
++    }
+   } else {
+     for (p = jstr; p < jend; p = s + seplen) {
+       s = _jq_memmem(p, jend - p, sepstr, seplen);
+       if (s == NULL)
+         s = jend;
+       a = jv_array_append(a, jv_string_sized(p, s - p));
++      if (!jv_is_valid(a)) break;
+       // Add an empty string to denote that j ends on a sep
+       if (s + seplen == jend && seplen != 0)
+         a = jv_array_append(a, jv_string(""));
+@@ -1038,8 +1048,10 @@ jv jv_string_explode(jv j) {
+   const char* end = i + len;
+   jv a = jv_array_sized(len);
+   int c;
+-  while ((i = jvp_utf8_next(i, end, &c)))
++  while ((i = jvp_utf8_next(i, end, &c))) {
+     a = jv_array_append(a, jv_number(c));
++    if (!jv_is_valid(a)) break;
++  }
+   jv_free(j);
+   return a;
+ }
+@@ -1312,10 +1324,13 @@ static void jvp_object_free(jv o) {
+   }
+ }
+ 
+-static jv jvp_object_rehash(jv object) {
++static int jvp_object_rehash(jv *objectp) {
++  jv object = *objectp;
+   assert(JVP_HAS_KIND(object, JV_KIND_OBJECT));
+   assert(jvp_refcnt_unshared(object.u.ptr));
+   int size = jvp_object_size(object);
++  if (size > INT_MAX >> 2)
++    return 0;
+   jv new_object = jvp_object_new(size * 2);
+   for (int i=0; i<size; i++) {
+     struct object_slot* slot = jvp_object_get_slot(object, i);
+@@ -1328,7 +1343,8 @@ static jv jvp_object_rehash(jv object) {
+   }
+   // references are transported, just drop the old table
+   jv_mem_free(jvp_object_ptr(object));
+-  return new_object;
++  *objectp = new_object;
++  return 1;
+ }
+ 
+ static jv jvp_object_unshare(jv object) {
+@@ -1357,27 +1373,32 @@ static jv jvp_object_unshare(jv object)
+   return new_object;
+ }
+ 
+-static jv* jvp_object_write(jv* object, jv key) {
++static int jvp_object_write(jv* object, jv key, jv **valpp) {
+   *object = jvp_object_unshare(*object);
+   int* bucket = jvp_object_find_bucket(*object, key);
+   struct object_slot* slot = jvp_object_find_slot(*object, key, bucket);
+   if (slot) {
+     // already has the key
+     jvp_string_free(key);
+-    return &slot->value;
++    *valpp = &slot->value;
++    return 1;
+   }
+   slot = jvp_object_add_slot(*object, key, bucket);
+   if (slot) {
+     slot->value = jv_invalid();
+   } else {
+-    *object = jvp_object_rehash(*object);
++    if (!jvp_object_rehash(object)) {
++      *valpp = NULL;
++      return 0;
++    }
+     bucket = jvp_object_find_bucket(*object, key);
+     assert(!jvp_object_find_slot(*object, key, bucket));
+     slot = jvp_object_add_slot(*object, key, bucket);
+     assert(slot);
+     slot->value = jv_invalid();
+   }
+-  return &slot->value;
++  *valpp = &slot->value;
++  return 1;
+ }
+ 
+ static int jvp_object_delete(jv* object, jv key) {
+@@ -1478,7 +1499,11 @@ jv jv_object_set(jv object, jv key, jv v
+   assert(JVP_HAS_KIND(object, JV_KIND_OBJECT));
+   assert(JVP_HAS_KIND(key, JV_KIND_STRING));
+   // copy/free of object, key, value coalesced
+-  jv* slot = jvp_object_write(&object, key);
++  jv* slot;
++  if (!jvp_object_write(&object, key, &slot)) {
++    jv_free(object);
++    return jv_invalid_with_msg(jv_string("Object too big"));
++  }
+   jv_free(*slot);
+   *slot = value;
+   return object;
+@@ -1503,6 +1528,7 @@ jv jv_object_merge(jv a, jv b) {
+   assert(JVP_HAS_KIND(a, JV_KIND_OBJECT));
+   jv_object_foreach(b, k, v) {
+     a = jv_object_set(a, k, v);
++    if (!jv_is_valid(a)) break;
+   }
+   jv_free(b);
+   return a;
+@@ -1522,6 +1548,7 @@ jv jv_object_merge_recursive(jv a, jv b)
+       jv_free(elem);
+       a = jv_object_set(a, k, v);
+     }
++    if (!jv_is_valid(a)) break;
+   }
+   jv_free(b);
+   return a;
+@@ -1671,7 +1698,7 @@ int jv_contains(jv a, jv b) {
+     r = jvp_array_contains(a, b);
+   } else if (JVP_HAS_KIND(a, JV_KIND_STRING)) {
+     int b_len = jv_string_length_bytes(jv_copy(b));
+-    if (b_len != 0) {    
++    if (b_len != 0) {
+       r = _jq_memmem(jv_string_value(a), jv_string_length_bytes(jv_copy(a)),
+ 		     jv_string_value(b), b_len) != 0;
+     } else {
+diff -up jq-1.6/tests/jq.test.orig jq-1.6/tests/jq.test
+--- jq-1.6/tests/jq.test.orig	2025-06-30 18:14:49.214961567 +0200
++++ jq-1.6/tests/jq.test	2025-06-30 18:15:20.271792714 +0200
+@@ -186,6 +186,10 @@ null
+ [0,1,2]
+ [0,5,2]
+ 
++try (.[999999999] = 0) catch .
++null
++"Array index too large"
++
+ #
+ # Multiple outputs, iteration
+ #

0007-CVE-2025-48060.patch

@@ -0,0 +1,111 @@
+diff -up jq-1.6/src/builtin.c.orig jq-1.6/src/builtin.c
+--- jq-1.6/src/builtin.c.orig	2025-06-30 19:07:06.250825334 +0200
++++ jq-1.6/src/builtin.c	2025-06-30 19:08:51.635668449 +0200
+@@ -317,19 +317,10 @@ static jv f_multiply(jq_state *jq, jv in
+       str = b;
+       num = a;
+     }
+-    int n;
+-    size_t alen = jv_string_length_bytes(jv_copy(str));
+-    jv res = str;
+-
+-    for (n = jv_number_value(num) - 1; n > 0; n--)
+-      res = jv_string_append_buf(res, jv_string_value(str), alen);
+-
++    double d = jv_number_value(num);
+     jv_free(num);
+-    if (n < 0) {
+-      jv_free(str);
+-      return jv_null();
+-    }
+-    return res;
++    return jv_string_repeat(str,
++        d < 0 || isnan(d) ? -1 : d > INT_MAX ? INT_MAX : (int)d);
+   } else if (ak == JV_KIND_OBJECT && bk == JV_KIND_OBJECT) {
+     return jv_object_merge_recursive(a, b);
+   } else {
+diff -up jq-1.6/src/jv.c.orig jq-1.6/src/jv.c
+--- jq-1.6/src/jv.c.orig	2025-06-30 19:06:08.660648842 +0200
++++ jq-1.6/src/jv.c	2025-06-30 19:07:06.251424952 +0200
+@@ -828,6 +828,7 @@ static jv jvp_string_empty_new(uint32_t
+   jvp_string* s = jvp_string_alloc(length);
+   s->length_hashed = 0;
+   memset(s->data, 0, length);
++  s->data[length] = 0;
+   jv r = {JVP_FLAGS_STRING, 0, 0, 0, {&s->refcnt}};
+   return r;
+ }
+@@ -1006,6 +1007,32 @@ jv jv_string_indexes(jv j, jv k) {
+   return a;
+ }
+ 
++jv jv_string_repeat(jv j, int n) {
++  assert(JVP_HAS_KIND(j, JV_KIND_STRING));
++  if (n < 0) {
++    jv_free(j);
++    return jv_null();
++  }
++  int len = jv_string_length_bytes(jv_copy(j));
++  int64_t res_len = (int64_t)len * n;
++  if (res_len >= INT_MAX) {
++    jv_free(j);
++    return jv_invalid_with_msg(jv_string("Repeat string result too long"));
++  }
++  if (res_len == 0) {
++    jv_free(j);
++    return jv_string("");
++  }
++  jv res = jv_string_empty(res_len);
++  res = jvp_string_append(res, jv_string_value(j), len);
++  for (int curr = len, grow; curr < res_len; curr += grow) {
++    grow = MIN(res_len - curr, curr);
++    res = jvp_string_append(res, jv_string_value(res), grow);
++  }
++  jv_free(j);
++  return res;
++}
++
+ jv jv_string_split(jv j, jv sep) {
+   assert(JVP_HAS_KIND(j, JV_KIND_STRING));
+   assert(JVP_HAS_KIND(sep, JV_KIND_STRING));
+diff -up jq-1.6/src/jv.h.orig jq-1.6/src/jv.h
+--- jq-1.6/src/jv.h.orig	2025-06-30 19:06:08.614632776 +0200
++++ jq-1.6/src/jv.h	2025-06-30 19:07:06.251840524 +0200
+@@ -120,6 +120,7 @@ jv jv_string_fmt(const char*, ...) JV_PR
+ jv jv_string_append_codepoint(jv a, uint32_t c);
+ jv jv_string_append_buf(jv a, const char* buf, int len);
+ jv jv_string_append_str(jv a, const char* str);
++jv jv_string_repeat(jv j, int n);
+ jv jv_string_split(jv j, jv sep);
+ jv jv_string_explode(jv j);
+ jv jv_string_implode(jv j);
+diff -up jq-1.6/tests/jq.test.orig jq-1.6/tests/jq.test
+--- jq-1.6/tests/jq.test.orig	2025-06-30 19:06:08.661007480 +0200
++++ jq-1.6/tests/jq.test	2025-06-30 19:09:33.221816670 +0200
+@@ -1169,6 +1169,18 @@ indices(", ")
+ ["a", "ab", "abc"]
+ ["aaa", "ababab", "abcabcabc"]
+ 
++. * 100000 | [.[:10],.[-10:]]
++"abc"
++["abcabcabca","cabcabcabc"]
++
++. * 1000000000
++""
++""
++
++try (. * 1000000000) catch .
++"abc"
++"Repeat string result too long"
++
+ [.[] / ","]
+ ["a, bc, def, ghij, jklmn, a,b, c,d, e,f", "a,b,c,d, e,f,g,h"]
+ [["a"," bc"," def"," ghij"," jklmn"," a","b"," c","d"," e","f"],["a","b","c","d"," e","f","g","h"]]
+@@ -1560,3 +1572,7 @@ false
+ .x - 10
+ {"x":13911860366432393}
+ 13911860366432382
++
++try 0[implode] catch .
++[]
++"Cannot index number with string \"\""

gating.yaml

@@ -0,0 +1,6 @@
+--- !Policy
+product_versions:
+  - rhel-8
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

jq.spec

@@ -1,6 +1,6 @@
 Name:           jq
 Version:        1.6
-Release:        8%{?dist}
+Release:        11%{?dist}
 Summary:        Command-line JSON processor
 
 License:        MIT and ASL 2.0 and CC-BY and GPLv3
@@ -11,6 +11,9 @@ Patch1:         0001-iterration-problem-for-non-decimal-string.patch
 Patch2:         0002-add-mantest.patch
 Patch3:         0003-fix-pthread-segfault.patch
 Patch4:         0004-make-jq-fast.patch
+Patch5:         0005-sast.patch
+Patch6:         0006-CVE-2024-23337.patch
+Patch7:         0007-CVE-2025-48060.patch
 
 BuildRequires:  flex
 BuildRequires:  bison
@@ -99,6 +102,18 @@ make check
 
 
 %changelog
+* Mon Jun 30 2025 Tomas Halman <thalman@redhat.com> - 1.6-11
+- Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
+- Resolves: RHEL-92987
+
+* Mon Jun 30 2025 Tomas Halman <thalman@redhat.com> - 1.6-10
+- Fix CVE-2024-23337 jq has signed integer overflow in jv.c:jvp_array_write
+- Resolves: RHEL-92968
+
+* Fri May 3 2024  Tomas Halman <thalman@redhat.com> - 1.6-9
+- Fix SAST findings in jq 1.6
+- Resolves: RHEL-37827
+
 * Fri Oct 13 2023 Tomas Halman <thalman@redhat.com> - 1.6-8
 - Make jq 1.6 fast
 - Resolves: RHEL-5052

plans/all.fmf

@@ -0,0 +1,23 @@
+summary: Run gating tests
+discover:
+    how: fmf
+    dist-git-source: true
+    dist-git-type: centos
+prepare:
+  - how: install
+    package:
+      - dnf-plugins-core
+      - https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
+  - how: shell
+    script: /usr/bin/crb enable
+  - how: install
+    package:
+      - jq
+      - jq-devel
+      - gcc
+      - wget
+  - how: shell
+    script: dnf config-manager --disable epel*
+
+execute:
+    how: tmt

sources

@@ -0,0 +1 @@
+SHA512 (jq-1.6.tar.gz) = f5ae8be558ca2ff15324c378d623106b74bd0823be50835e23548584aa1eb24eb81f8f054693d5d3fe44f157d0735c5f0f40b9f21899ba068f2a11d1345ace19

tests/performance/jqspeed.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+export LC_ALL=C
+
+stress_jq() {
+    `which time` -p -f '%e\n' bash -c 'for i in `seq 1 1000` ; do echo '"'"'{"foo":"bar"}'"'"' | jq '"'"'has("bar")'"'"' > /dev/null ; done' 2>&1 | cut -d. -f1
+}
+
+FAIL=0
+TIME=`stress_jq`
+echo -n "Test jqspeed ... "
+if [ $TIME -gt 8 ] ; then
+    echo "failed"
+    FAIL=1
+else
+    echo "ok"
+fi
+
+echo "Runtime: ${TIME}s "
+exit $FAIL

tests/performance/main.fmf

@@ -0,0 +1,6 @@
+summary: Run jq performance/speed test
+require:
+  - jq
+  - which
+  - time
+test: ./jqspeed.sh

tests/provision.fmf

@@ -0,0 +1,5 @@
+---
+
+standard-inventory-qcow2:
+  qemu:
+    m: 2G

tests/segfault/jqsegfault.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+
+FAIL=0
+
+# Test for segfault in multithreaded environment
+gcc -o test_segfault test_segfault_with_multithreaded_env.c -lpthread -ljq && \
+./test_segfault
+RET=$?
+
+echo -n "Test jqsegfault ... "
+
+if [ $RET != 0 ]; then
+    echo "failed"
+    FAIL=1
+else
+    echo "ok"
+fi
+
+exit $FAIL

tests/segfault/main.fmf

@@ -0,0 +1,8 @@
+summary: Run segfault threads test
+require:
+  - wget
+  - dnf-utils
+  - gcc
+  - jq
+  - jq-devel
+test: ./jqsegfault.sh

tests/segfault/test_segfault_with_multithreaded_env.c

@@ -0,0 +1,90 @@
+#include <stdlib.h>
+#include <jq.h>
+#include <stdio.h>
+#include <string.h>
+#include <unistd.h>
+#include <pthread.h>
+
+int my_jq_parse(jq_state *jq, struct jv_parser *parser)
+{
+    int rv = 0;
+    jv value;
+
+    value = jv_parser_next(parser);
+    while (jv_is_valid(value)) {
+        jq_start(jq, value, 0);
+        jv result;
+
+        while (jv_is_valid(result = jq_next(jq))) {
+            jv dumped = jv_dump_string(result, 0);
+            const char *str = jv_string_value(dumped);
+            printf("dumped: %s\n", str);
+        }
+
+        jv_free(result);
+        value = jv_parser_next(parser);
+    }
+
+    if (jv_invalid_has_msg(jv_copy(value))) {
+        jv msg = jv_invalid_get_msg(value);
+        printf("invalid: %s\n", jv_string_value(msg));
+        jv_free(msg);
+        rv = 1;
+    } else {
+        jv_free(value);
+    }
+
+    return rv;
+}
+
+void *run(void *not_used) {
+    int rv;
+    jq_state *jq;
+    const char *prg = ".data";
+
+    jq = jq_init();
+    printf("jq_init jq: %p prg: %s\n", jq, prg);
+    if (jq_compile(jq, prg) == 0) {
+        jq_teardown(&jq);
+        return NULL;
+    }
+    printf("compiled\n");
+
+    struct jv_parser *parser = jv_parser_new(0);
+    const char *buf = "{ \"data\": 1 }";
+    jv_parser_set_buf(parser, buf, strlen(buf), 0);
+    rv = my_jq_parse(jq, parser);
+    if (rv != 0) {
+        printf("my_jq_parse failed!\n");
+    }
+
+    jv_parser_free(parser);
+    jq_teardown(&jq);
+    return NULL;
+}
+
+#define THREADS 2
+/* calling run() twice works fine */
+/* calling them in threads causes core-dump */
+int main (int argc, char *argv[])
+{
+    pthread_t threads[THREADS];
+    int createerror;
+    int a;
+
+     memset(&threads, 0, sizeof(threads));
+    for (a = 0; a < THREADS; ++a) {
+        // sleep(1); // < if you want to run threads sequentionally 
+        createerror = pthread_create(&threads[a], NULL, run, NULL);
+        if (createerror) {
+            printf("create thread error %d\n", a);
+        }
+    }
+    for(a = 0; a < THREADS; ++a) {
+        if (threads[a] != 0) {
+            pthread_join(threads[a], NULL);
+        }
+    }
+
+    return 0;
+}

tests/tests.yml

@@ -0,0 +1,27 @@
+---
+- hosts: localhost
+  roles:
+  - role: standard-test-source
+    tags:
+    - always
+
+  - role: standard-test-basic
+    tags:
+    - classic
+    required_packages:
+    - jq
+    - gcc
+    - wget
+    - jq-devel
+    - valgrind
+    - rubygem-rake
+    tests:
+    - upstream:
+        dir: upstream
+        run: ./jqtests.sh
+    - segfault:
+        dir: segfault
+        run: ./jqsegfault.sh
+    - performance:
+        dir: performance
+        run: ./jqspeed.sh

tests/upstream/jqtests.sh

@@ -0,0 +1,48 @@
+#!/bin/sh
+
+die () {
+    echo "$1" >&2
+    exit 1
+}
+
+# If source not found, download it with dnf
+if [ ! -d ./source ]; then
+    # Extract source from srpm
+    dnf download --source jq && \
+    rpm2cpio jq*.rpm|cpio -id && \
+    mkdir source && \
+    tar -zxf jq-*.tar.gz -C source --strip-components=1
+    if [ $? != 0 ]; then
+        echo "Failed to download upstream tests"
+        exit 1
+    fi
+fi
+
+pushd ./source || die "missing source directory"
+rm -f jq tests/*.log 2>/dev/null
+ln -s /usr/bin/jq || die "failed to link jq binary"
+
+FAIL=0
+
+# run the tests
+# List of tests is taken from Makefile
+TESTS="tests/optionaltest tests/mantest tests/jqtest tests/onigtest tests/shtest tests/utf8test tests/base64test"
+
+for t in $TESTS; do
+    echo -n "Test $t ... "
+    ./${t} >"${t}.log" 2>&1
+    RET=$?
+    if [ $RET = 0 ]; then
+        echo "ok"
+    else
+        echo "failed"
+        echo "-------------------- ${t}.log start -----------------------------"
+        cat "${t}.log"
+        echo "-------------------- ${t}.log end -----------------------------"
+        FAIL=1
+    fi
+done
+
+popd # exit SOURCE_DIR
+
+exit $FAIL

tests/upstream/main.fmf

@@ -0,0 +1,11 @@
+summary: Run jq gating tests
+require:
+  - wget
+  - dnf-utils
+  - gcc
+  - jq
+  - jq-devel
+  - valgrind
+  - diffutils
+test: ./jqtests.sh
+duration: 30m