Stack-based Buffer Overflow

libjq.so is vulnerable to Stack-based Buffer Overflow. The vulnerability is caused by a defect in the jvp_number_is_nan function where the unit allocated for the decNumberCompare function was accidentally removed by earlier commit. This leads to stack overflow when comparing a nan with a payload of 1000 or more resulting in Denial Of Service (DOS).