Ejemplo
sigs.k8s.io/yaml v1.4.0: Preserve 64-bit integer precision and decode untyped YAML numbers in sigs.k8s.io/yaml using JSONOpt UseNumber
Muestra verificada para golang sigs.k8s.io/yaml v1.4.0: Preserve 64-bit integer precision and decode untyped YAML numbers in sigs.k8s.io/yaml using JSONOpt…
sha256:b26c17ad7a69e13b5a7bcb2b075acafb7bf6062ad327a7370e9eea24f586f98e
Esta red ofrece una sola cosa: una muestra que compila. La ejecutó en un sandbox y guardó el recibo firmado. No califica ni garantiza nada: si el mismo código compila donde estás no es algo que haya medido.
Cuántas claves de firma distintas presentaron un recibo de contrato aprobado. Una es solo el autor; más de una significa que alguien más también lo compiló. Una clave se genera sola y no tiene identidad registrada detrás, así que cuenta claves, no personas.
MIT-0
Evidencia de ejecución
El entorno declarado y las ejecuciones firmadas se muestran por separado, para que veas exactamente qué ejecutó esta muestra y dónde.
- Base de evidencia
- Contrato firmado aprobado
- Recibos de verificación
- 3
- Claves de firma que lo compilaron
- 3
Entorno declarado
go linux x64 go go gomod
Entornos de las ejecuciones de verificación
| Entorno | Contrato | Etapas | Ejecución |
|---|---|---|---|
| go 1.26 · linux alpine/x64 · docker ed25519:d91480838ac982c9 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · golang@1 |
2026-08-16 |
| go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · golang@1 |
2026-08-18 |
| go 1.26 · linux alpine/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · golang@1golang:1.26-alpine@sha256:28d89ee9cc0f… |
2026-09-08 |
Caso
HOW- Objetivo
- Preserve 64-bit integer precision and decode untyped YAML numbers in sigs.k8s.io/yaml using JSONOpt UseNumber
- Paquetes
- Símbolos
-
- sigs.k8s.io/yaml.Unmarshal
- sigs.k8s.io/yaml.JSONOpt
- Entorno
- go
- Creado
- 2026-08-16T13:22:35Z
Contrato
- assert default Unmarshal silently truncates integers above 2^53 into float64 whereas JSONOpt UseNumber preserves exact int64 values as json.Number
- assert types implementing yaml.Unmarshaler are ignored while json.Unmarshaler and encoding.TextUnmarshaler are executed
- assert YAML numbers and booleans are coerced to strings when target struct fields are string type
- assert unmarshaling into map[interface{}]interface{} fails with JSON unmarshal error unlike standard YAML decoders
Archivos
- NOTES.md
- csx.json
- go.mod
- go.sum
- yaml_config_test.go
Código fuente
# Notes: sigs.k8s.io/yaml JSONOpt Configuration and Interface Traps
## Prior Solution Search
`search_known_solution` returned candidate sample sha256:03d14e2883c81e3c8dd5a947bbd6bf84b0c7682b5e2b5e0adf9b88c3287d4652 which covers JSON struct tag precedence and duplicate key rejection under UnmarshalStrict.
This sample addresses a different set of traps:
1. Untyped 64-bit integer precision loss (> 2^53) during standard `Unmarshal` and its remedy using the `JSONOpt` `UseNumber` decoder option.
2. Silent omission of the standard `yaml.Unmarshaler` interface (`UnmarshalYAML`) in favor of `json.Unmarshaler` and `encoding.TextUnmarshaler`.
3. Automatic string coercion for primitive numbers and booleans on struct fields.
4. Failure to decode into untyped `map[interface{}]interface{}`.
## How the wrong version fails
It fails silently with a green build: unmarshaling 64-bit integers > 2^53 into untyped maps silently truncates and corrupts numeric precision via float64 conversion, and implementing yaml.Unmarshaler is silently skipped without error.
{"case":{"believed":"sigs.k8s.io/yaml.Unmarshal preserves exact 64-bit integer values when decoding YAML into untyped maps or interface{} fields without explicit decoder options.","caseId":"case:sha256:b68086867fa6604e2c9bf8c24d71af0fdade250835f6ef51bfc10eb159bde46e","contract":["assert default Unmarshal silently truncates integers above 2^53 into float64 whereas JSONOpt UseNumber preserves exact int64 values as json.Number","assert types implementing yaml.Unmarshaler are ignored while json.Unmarshaler and encoding.TextUnmarshaler are executed","assert YAML numbers and booleans are coerced to strings when target struct fields are string type","assert unmarshaling into map[interface{}]interface{} fails with JSON unmarshal error unlike standard YAML decoders"],"goal":"Preserve 64-bit integer precision and decode untyped YAML numbers in sigs.k8s.io/yaml using JSONOpt UseNumber","kind":"HOW","packages":["pkg:golang/sigs.k8s.io/yaml@v1.4.0"],"schemaVersion":1,"symbols":["sigs.k8s.io/yaml.Unmarshal","sigs.k8s.io/yaml.JSONOpt"]},"contractCommand":["go","test","./..."],"environment":{"arch":"x64","ecosystem":"golang","executionContext":"go","language":"go","os":"linux","packageManager":"gomod","runtime":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/sigs.k8s.io/yaml@v1.4.0"],"schemaVersion":1,"symbols":["sigs.k8s.io/yaml.Unmarshal","sigs.k8s.io/yaml.JSONOpt"],"verifierAdapter":"golang@1"}
module testyaml
go 1.26.5
require sigs.k8s.io/yaml v1.4.0
github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
package testyaml
import (
"encoding/json"
"fmt"
"strings"
"testing"
k8syaml "sigs.k8s.io/yaml"
)
// SnowflakeID > 2^53 (9007199254740992) where float64 loses precision.
const testInt64Value int64 = 9007199254740993
type YamlCustomObject struct {
Value string `json:"value"`
Called bool `json:"-"`
}
func (y *YamlCustomObject) UnmarshalYAML(unmarshal func(interface{}) error) error {
y.Called = true
var raw struct {
Value string `yaml:"value"`
}
if err := unmarshal(&raw); err != nil {
return err
}
y.Value = "custom_yaml:" + raw.Value
return nil
}
type JsonUnmarshalerType struct {
Called bool
Value string
}
func (j *JsonUnmarshalerType) UnmarshalJSON(data []byte) error {
j.Called = true
var raw struct {
Value string `json:"value"`
}
if err := json.Unmarshal(data, &raw); err != nil {
return err
}
j.Value = "json:" + raw.Value
return nil
}
type TextUnmarshalerType struct {
Called bool
Value string
}
func (t *TextUnmarshalerType) UnmarshalText(text []byte) error {
t.Called = true
t.Value = "text:" + string(text)
return nil
}
type CoercionConfig struct {
Port string `json:"port"`
Enabled string `json:"enabled"`
Score string `json:"score"`
}
func TestUntypedLargeIntegerPrecisionAndUseNumber(t *testing.T) {
// A naive model assumes sigs.k8s.io/yaml preserves exact integer values
// when decoding untyped YAML numbers into map[string]any or any.
// In reality, sigs.k8s.io/yaml unmarshals through encoding/json, which
// decodes untyped numbers as float64, causing silent loss of precision
// for 64-bit integers > 2^53 (9007199254740992).
yamlInput := []byte(fmt.Sprintf("id: %d\n", testInt64Value))
// Case 1: Default Unmarshal without options
var defaultMap map[string]any
if err := k8syaml.Unmarshal(yamlInput, &defaultMap); err != nil {
t.Fatalf("unexpected unmarshal error: %v", err)
}
val, ok := defaultMap["id"]
if !ok {
t.Fatal("expected 'id' key in unmarshaled map")
}
floatVal, isFloat := val.(float64)
if !isFloat {
t.Fatalf("expected default unmarshaled number to be float64, got %T", val)
}
// 9007199254740993 rounds to 9007199254740992 in float64
if int64(floatVal) == testInt64Value {
t.Fatalf("expected float64 to lose precision for %d, but got exact match", testInt64Value)
}
if int64(floatVal) != 9007199254740992 {
t.Fatalf("expected corrupted float64 value 9007199254740992, got %d", int64(floatVal))
}
// Case 2: Unmarshal with JSONOpt UseNumber setting
useNumberOpt := func(d *json.Decoder) *json.Decoder {
d.UseNumber()
return d
}
var optMap map[string]any
if err := k8syaml.Unmarshal(yamlInput, &optMap, useNumberOpt); err != nil {
t.Fatalf("unexpected unmarshal error with UseNumber: %v", err)
}
numVal, isNumber := optMap["id"].(json.Number)
if !isNumber {
t.Fatalf("expected json.Number when UseNumber option is provided, got %T", optMap["id"])
}
parsedInt64, err := numVal.Int64()
if err != nil {
t.Fatalf("failed to parse json.Number as int64: %v", err)
}
if parsedInt64 != testInt64Value {
t.Fatalf("expected preserved int64 %d, got %d", testInt64Value, parsedInt64)
}
}
func TestUnmarshalerInterfacePrecedence(t *testing.T) {
// A naive developer expects UnmarshalYAML to be called by a YAML unmarshaler.
// However, sigs.k8s.io/yaml converts YAML to JSON first and calls json.Unmarshal,
// so yaml.Unmarshaler is completely ignored while json.Unmarshaler and
// encoding.TextUnmarshaler are executed.
type Container struct {
YamlCustom YamlCustomObject `json:"yaml_custom"`
JsonCustom JsonUnmarshalerType `json:"json_custom"`
TextCustom TextUnmarshalerType `json:"text_custom"`
}
yamlInput := []byte("yaml_custom:\n value: hello\njson_custom:\n value: world\ntext_custom: textval\n")
var c Container
if err := k8syaml.Unmarshal(yamlInput, &c); err != nil {
t.Fatalf("unmarshal error: %v", err)
}
// yaml.Unmarshaler is NOT called; default JSON unmarshaling was used
if c.YamlCustom.Called {
t.Fatal("expected YamlCustomObject.UnmarshalYAML to NOT be called by sigs.k8s.io/yaml")
}
if c.YamlCustom.Value != "hello" {
t.Fatalf("expected raw json unmarshaled value 'hello', got %q", c.YamlCustom.Value)
}
// json.Unmarshaler IS called
if !c.JsonCustom.Called {
t.Fatal("expected JsonUnmarshalerType.UnmarshalJSON to be called")
}
if c.JsonCustom.Value != "json:world" {
t.Fatalf("expected 'json:world', got %q", c.JsonCustom.Value)
}
// encoding.TextUnmarshaler IS called
if !c.TextCustom.Called {
t.Fatal("expected TextUnmarshalerType.UnmarshalText to be called")
}
if c.TextCustom.Value != "text:textval" {
t.Fatalf("expected 'text:textval', got %q", c.TextCustom.Value)
}
}
func TestSilentPrimitiveToStringCoercion(t *testing.T) {
// Unlike standard JSON/YAML unmarshalers that return type errors when unmarshaling
// primitives into string fields, sigs.k8s.io/yaml automatically coerces numbers
// and booleans into strings when the destination struct field is a string.
yamlInput := []byte("port: 8080\nenabled: true\nscore: 98.5\n")
var cfg CoercionConfig
if err := k8syaml.Unmarshal(yamlInput, &cfg); err != nil {
t.Fatalf("unexpected unmarshal error: %v", err)
}
if cfg.Port != "8080" {
t.Fatalf("expected coerced string '8080', got %q", cfg.Port)
}
if cfg.Enabled != "true" {
t.Fatalf("expected coerced string 'true', got %q", cfg.Enabled)
}
if cfg.Score != "98.5" {
t.Fatalf("expected coerced string '98.5', got %q", cfg.Score)
}
}
func TestMapInterfaceInterfaceRejected(t *testing.T) {
// Standard yaml decoders (yaml.v2 / yaml.v3) decode maps into map[interface{}]interface{}.
// sigs.k8s.io/yaml fails because encoding/json cannot unmarshal JSON objects into map[interface{}]interface{}.
yamlInput := []byte("host: server.example.com\n")
var m map[interface{}]interface{}
err := k8syaml.Unmarshal(yamlInput, &m)
if err == nil {
t.Fatal("expected Unmarshal into map[interface{}]interface{} to fail")
}
if !strings.Contains(err.Error(), "map[interface {}]interface {}") {
t.Fatalf("expected map[interface{}]interface{} error, got: %v", err)
}
}