io.jwt.decode_verify panics when given non-numeric exp or nbf

[charlieflowers]

Short description

When calling the builtin io.jwt.decode_verify, if you pass a token with the value null for exp, this causes an OPA panic.

Speculation: It appears that the panic happens because the builtin code is trying to assert that the expiration date in exp is not in the past. Since the value of exp is null, a crash occurs.

Here's the code where I think the problem likely occurs:

opa/topdown/tokens.go

Line 1065 in b2d92a3

// RFC7159 4.1.4 exp

• OPA version: Seen on 0.44 and 0.38. Likely others.
• Playground that fully illustrates the problem: https://play.openpolicyagent.org/p/Jbbw0eYwTJ
• The playground reports this error: runtime error: invalid memory address or nil pointer dereference (remember to uncomment the problematic rule)
• See the bottom of the issue for the full stack trace from OPA in server mode.

Steps To Reproduce

1. Go to the playground link above
2. Click on evaluate
3. Everything is fine
4. Uncomment the rule at the bottom which calls io.jwt.decode_verify on the JWT with null for exp
5. Click Evaluate
6. See an error in the OUTPUT panel of the playground: "runtime error: invalid memory address or nil pointer dereference"

Expected behavior

The decode_verify builtin should complete without panic and should evaluate to valid == false.

Additional context

This is actually an important footgun because when marshaling Go structs to JSON, in the presence of pointers, it is easy to accidentally send null for values. When these are passed to OPA, it's important to make sure policies respond in a safe manner.

Full stack trace from OPA in server mode (long)

2022/09/20 16:38:29 http: panic serving 127.0.0.1:58435: interface conversion: ast.Value is ast.Null, not ast.Number goroutine 117 [running]: net/http.(*conn).serve.func1() /Users/runner/hostedtoolcache/go/1.17.7/x64/src/net/http/server.go:1802 +0xb9 panic({0x549fd80, 0xc000b80960}) /Users/runner/hostedtoolcache/go/1.17.7/x64/src/runtime/panic.go:1047 +0x266 github.com/open-policy-agent/opa/topdown.builtinJWTDecodeVerify({{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, 0xc0038a4598}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/tokens.go:993 +0xde5 github.com/open-policy-agent/opa/topdown.builtinErrorWrapper.func1({{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, 0xc0038a4598}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/builtins.go:126 +0x79 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval({0xc00000cd20, 0x5fc3ba0, {{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, ...}, ...}, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1612 +0x283 github.com/open-policy-agent/opa/topdown.(*eval).evalCall(0xc00000cd20, {0xc005697050, 0x4, 0x0}, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:758 +0x665 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00000cd20, 0xc000699cf0) /Users/runner/work/opa/opa/topdown/eval.go:356 +0x335 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000cd20, 0xc00088d320) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00000cd20) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func1() /Users/runner/work/opa/opa/topdown/eval.go:351 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cd20, 0xc00565a6d8, 0xc00506c120, 0xc000b803f0, 0xc000b803f0, 0xc000b80630) /Users/runner/work/opa/opa/topdown/eval.go:921 +0x571 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x400e3bd, 0x61e536fb05563c80, 0x5749df0, 0x1, 0x57323f8, 0xc000b805d0) /Users/runner/work/opa/opa/topdown/eval.go:789 +0x1a5 github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00000cd20, {0xc000262180, 0x3, 0x3}, 0x3, 0xc000b803f0, 0xc00565a6d8, 0xc000b803f0, 0xc00506c120, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2787 +0x19a github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00000cd20, {0xc000262180, 0x3, 0x3}, 0x2, 0xc000b803f0, 0xc00565aed0, 0xc000b803f0, 0xc00506c120, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00000cd20, {0xc000262180, 0x3, 0x3}, 0x2, 0xc000b803f0, 0xc00565aed0, 0xc000b803f0, 0xc00506c120, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00000cd20, {0xc000262180, 0x3, 0x3}, 0x1, 0xc000b803f0, 0xc00565af00, 0xc000b803f0, 0xc00506c120, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00000cd20, {0xc000262180, 0x3, 0x3}, 0x1, 0xc000b803f0, 0xc00565af00, 0xc000b803f0, 0xc00506c120, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00000cd20, 0x5732bb8, 0xc00506c120, 0xc000b803f0, 0xc000b803f0, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:989 +0x3c5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cd20, 0xc00506c120, 0xc004f1bed8, 0xc000b803f0, 0xc000b803f0, 0xc000b80630) /Users/runner/work/opa/opa/topdown/eval.go:885 +0x1e6 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0xc004cd5680, 0xc0005a2480, 0x4010967, 0x28, 0x5545a80, 0xc004d7d901) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0xc004cd4890, 0xc004cd5940, 0xc004d0e3e0, 0xc004d3ab80) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00000cd20, 0xc000699ce0) /Users/runner/work/opa/opa/topdown/eval.go:349 +0x279 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000cd20, 0xc00088d320) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00000cd20) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func1() /Users/runner/work/opa/opa/topdown/eval.go:351 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cd20, 0xc005650fc0, 0xc00506c078, 0xc000b803f0, 0xc000b803f0, 0xc000b80600) /Users/runner/work/opa/opa/topdown/eval.go:921 +0x571 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x400e3bd, 0x61e536fb05563c80, 0x5749df0, 0x35a5960f05738401, 0x57323f8, 0xc000b4b200) /Users/runner/work/opa/opa/topdown/eval.go:789 +0x1a5 github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00000cd20, {0xc005086590, 0x2, 0x2}, 0x2, 0xc000b803f0, 0xc005650fc0, 0xc000b803f0, 0xc00506c078, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2787 +0x19a github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00000cd20, {0xc005086590, 0x2, 0x2}, 0x1, 0xc000b803f0, 0xc005651a40, 0xc000b803f0, 0xc00506c078, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00000cd20, {0xc005086590, 0x2, 0x2}, 0x1, 0xc000b803f0, 0xc005651a40, 0xc000b803f0, 0xc00506c078, 0xc000b803f0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00000cd20, 0x5732bb8, 0xc00506c078, 0xc000b803f0, 0xc000b803f0, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:989 +0x3c5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cd20, 0xc00506c078, 0xc004f1be48, 0xc000b803f0, 0xc000b803f0, 0xc000b80600) /Users/runner/work/opa/opa/topdown/eval.go:885 +0x1e6 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x4010614, 0xc0005a2ca0, 0x4010967, 0x28, 0x5545a80, 0x1000000055bb601) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0x180, 0x6a55108, 0x180, 0xc0002bed80) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00000cd20, 0xc000699cc0) /Users/runner/work/opa/opa/topdown/eval.go:349 +0x279 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000cd20, 0xc00088d320) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00000cd20) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func2() /Users/runner/work/opa/opa/topdown/eval.go:358 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cd20, 0xc004f1bd40, 0xc00565af00, 0xc000b803f0, 0xc000b803f0, 0xc000b80420) /Users/runner/work/opa/opa/topdown/eval.go:916 +0x4e2 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x7fb7160, 0x55cc0a0, 0x18, 0x6a55108, 0x18, 0xc0002bed80) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(...) /Users/runner/work/opa/opa/topdown/eval.go:762 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval.func1(0xc00565af00) /Users/runner/work/opa/opa/topdown/eval.go:1625 +0xcb github.com/open-policy-agent/opa/topdown.builtinOPARuntime({{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, 0xc0038a4598}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/runtime.go:36 +0x209 github.com/open-policy-agent/opa/topdown.builtinErrorWrapper.func1({{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, 0xc0038a4598}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/builtins.go:126 +0x79 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval({0xc00000cd20, 0x5fc45e0, {{0x572b8e0, 0xc000b4ae40}, {0x5739230, 0xc00089ac40}, {0x570faa0, 0xc0001928a0}, 0xc005651a88, {0x571f928, ...}, ...}, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1612 +0x283 github.com/open-policy-agent/opa/topdown.(*eval).evalCall(0xc00000cd20, {0xc005688690, 0x2, 0x0}, 0x1) /Users/runner/work/opa/opa/topdown/eval.go:758 +0x665 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00000cd20, 0xc0006986b0) /Users/runner/work/opa/opa/topdown/eval.go:356 +0x335 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000cd20, 0xc00088d320) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.evalValueRule({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc0040d2ec0, 0xc000b80270, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2641 +0x348 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.evalValue({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc0040d2ec0, 0xc000b80270, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2607 +0x1c8 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc0040d2ec0, 0xc000b80270, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2573 +0x245 github.com/open-policy-agent/opa/topdown.evalVirtual.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2164 +0x3e5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1959 +0x2fd github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x5, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x4, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x4, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x3, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x3, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x2, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x2, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x1, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000cb40, {0xc00506b080, 0x7, 0xc}, {0xc0040d2e80, 0x7, 0x7}, 0x1, 0xc000b80270, 0xc005651dd0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00000cb40, 0x5732bb8, 0xc005651dd0, 0xc000b80270, 0xc000b80270, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:958 +0x265 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000cb40, 0xc004f22378, 0xc005651dd0, 0xc000b80270, 0xc000b80270, 0xc000b802d0) /Users/runner/work/opa/opa/topdown/eval.go:874 +0x112 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0xc000354a98, 0xc0003549a0, 0x4010967, 0x30, 0x5556980, 0xc0004f4d01) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0xc0038a4690, 0xa, 0xc000354a98, 0x2) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00000cb40, 0xc000698600) /Users/runner/work/opa/opa/topdown/eval.go:365 +0x8cb github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000cb40, 0xc000b802a0) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.(*eval).evalNot(0xc00000c960, 0xc0006985a0) /Users/runner/work/opa/opa/topdown/eval.go:427 +0x375 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0x90, 0x55bbb72) /Users/runner/work/opa/opa/topdown/eval.go:340 +0x985 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00000c960, 0xc00088d200) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.evalAllRulesNoCache({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc0040d24c0, 0xc000b4be90, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2270 +0x374 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.evalAllRules({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc0040d24c0, 0xc000b4be90, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2252 +0x119 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc0040d24c0, 0xc000b4be90, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2194 +0x165 github.com/open-policy-agent/opa/topdown.evalVirtual.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2139 +0x5a5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1959 +0x2fd github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x5, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x4, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x4, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x3, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x3, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x2, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x2, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x1, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc000b2c640, 0x6, 0xa}, {0xc000b800f0, 0x6, 0x6}, 0x1, 0xc000b4be90, 0xc005651bf0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00000c780, 0x5732bb8, 0xc005651bf0, 0xc000b4be90, 0xc000b4be90, 0x203000) /Users/runner/work/opa/opa/topdown/eval.go:958 +0x265 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00000c780, 0xc005651c20, 0xc005651bf0, 0xc000b4be90, 0xc000b4be90, 0xc0008a0480) /Users/runner/work/opa/opa/topdown/eval.go:874 +0x112 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0xc000b2c640, 0x6, 0xa, 0x2, 0x2, 0x4412b85) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(...) /Users/runner/work/opa/opa/topdown/eval.go:762 github.com/open-policy-agent/opa/topdown.evalTree.leaves({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x5, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2080 +0x548 github.com/open-policy-agent/opa/topdown.evalTree.extent({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x5, 0xc000b4be90, 0xc0056517e8, ...}) /Users/runner/work/opa/opa/topdown/eval.go:2034 +0xe5 github.com/open-policy-agent/opa/topdown.evalTree.finish({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x5, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1929 +0x145 github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x5, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1906 +0x138 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x4, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x4, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x3, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x3, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x2, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x2, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x1, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00000c780, {0xc0040c5840, 0x5, 0x8}, {0xc000b80030, 0x5, 0x5}, 0x1, 0xc000b4be90, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 created by net/http.(*Server).Serve /Users/runner/hostedtoolcache/go/1.17.7/x64/src/net/http/server.go:3034 +0x4e8 {"client_addr":"127.0.0.1:58521","level":"info","msg":"Received request.","req_id":2,"req_method":"POST","req_path":"/v1/data/terminus/policies/services/jwtAuthentication2","time":"2022-09-20T16:38:48-04:00"} 2022/09/20 16:38:48 http: panic serving 127.0.0.1:58521: interface conversion: ast.Value is ast.Null, not ast.Number goroutine 29 [running]: net/http.(*conn).serve.func1() /Users/runner/hostedtoolcache/go/1.17.7/x64/src/net/http/server.go:1802 +0xb9 panic({0x549fd80, 0xc00064f530}) /Users/runner/hostedtoolcache/go/1.17.7/x64/src/runtime/panic.go:1047 +0x266 github.com/open-policy-agent/opa/topdown.builtinJWTDecodeVerify({{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, 0xc003a44250}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/tokens.go:993 +0xde5 github.com/open-policy-agent/opa/topdown.builtinErrorWrapper.func1({{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, 0xc003a44250}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/builtins.go:126 +0x79 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval({0xc00017e780, 0x5fc3ba0, {{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, ...}, ...}, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1612 +0x283 github.com/open-policy-agent/opa/topdown.(*eval).evalCall(0xc00017e780, {0xc005697050, 0x4, 0x4c2824548b484675}, 0x394c00fcfb4a058d) /Users/runner/work/opa/opa/topdown/eval.go:758 +0x665 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00017e780, 0xc00007c750) /Users/runner/work/opa/opa/topdown/eval.go:356 +0x335 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e780, 0xc00083a480) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00017e780) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func1() /Users/runner/work/opa/opa/topdown/eval.go:351 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e780, 0xc005649440, 0xc00506c120, 0xc00064efc0, 0xc00064efc0, 0xc00064f200) /Users/runner/work/opa/opa/topdown/eval.go:921 +0x571 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x400e3bd, 0x61e536fb05563c80, 0x5749df0, 0x3d75c6394c03eb01, 0x57323f8, 0xc00064f1a0) /Users/runner/work/opa/opa/topdown/eval.go:789 +0x1a5 github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00017e780, {0xc000262180, 0x3, 0x3}, 0x3, 0xc00064efc0, 0xc005649440, 0xc00064efc0, 0xc00506c120, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2787 +0x19a github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00017e780, {0xc000262180, 0x3, 0x3}, 0x2, 0xc00064efc0, 0xc005649db8, 0xc00064efc0, 0xc00506c120, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00017e780, {0xc000262180, 0x3, 0x3}, 0x2, 0xc00064efc0, 0xc005649db8, 0xc00064efc0, 0xc00506c120, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00017e780, {0xc000262180, 0x3, 0x3}, 0x1, 0xc00064efc0, 0xc005649e30, 0xc00064efc0, 0xc00506c120, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00017e780, {0xc000262180, 0x3, 0x3}, 0x1, 0xc00064efc0, 0xc005649e30, 0xc00064efc0, 0xc00506c120, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00017e780, 0x5732bb8, 0xc00506c120, 0xc00064efc0, 0xc00064efc0, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:989 +0x3c5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e780, 0xc00506c120, 0xc004f1bed8, 0xc00064efc0, 0xc00064efc0, 0xc00064f200) /Users/runner/work/opa/opa/topdown/eval.go:885 +0x1e6 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x115b9b60d8d4800, 0xc000b60480, 0x4010967, 0x28, 0x5545a80, 0x10528b48084a8b01) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0x12f850f000000, 0x48cb894cc0894c00, 0x48ffffe8f9e8d189, 0x118850fff85) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00017e780, 0xc00007c720) /Users/runner/work/opa/opa/topdown/eval.go:349 +0x279 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e780, 0xc00083a480) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00017e780) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func1() /Users/runner/work/opa/opa/topdown/eval.go:351 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e780, 0xc0056480f0, 0xc00506c078, 0xc00064efc0, 0xc00064efc0, 0xc00064f1d0) /Users/runner/work/opa/opa/topdown/eval.go:921 +0x571 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x400e3bd, 0x61e536fb05563c80, 0x5749df0, 0x35a5960f00000101, 0x57323f8, 0xc00064e840) /Users/runner/work/opa/opa/topdown/eval.go:789 +0x1a5 github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00017e780, {0xc005086590, 0x2, 0x2}, 0x2, 0xc00064efc0, 0xc0056480f0, 0xc00064efc0, 0xc00506c078, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2787 +0x19a github.com/open-policy-agent/opa/topdown.evalTerm.next({0xc00017e780, {0xc005086590, 0x2, 0x2}, 0x1, 0xc00064efc0, 0xc005648198, 0xc00064efc0, 0xc00506c078, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2814 +0xdd github.com/open-policy-agent/opa/topdown.evalTerm.eval({0xc00017e780, {0xc005086590, 0x2, 0x2}, 0x1, 0xc00064efc0, 0xc005648198, 0xc00064efc0, 0xc00506c078, 0xc00064efc0}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2797 +0xe5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00017e780, 0x5732bb8, 0xc00506c078, 0xc00064efc0, 0xc00064efc0, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:989 +0x3c5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e780, 0xc00506c078, 0xc004f1be48, 0xc00064efc0, 0xc00064efc0, 0xc00064f1d0) /Users/runner/work/opa/opa/topdown/eval.go:885 +0x1e6 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x4010614, 0xc000b60ca0, 0x4010967, 0x28, 0x5545a80, 0x1000000056ffb01) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0x180, 0x6a555b8, 0x180, 0x5fe2e40) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00017e780, 0xc00007c710) /Users/runner/work/opa/opa/topdown/eval.go:349 +0x279 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e780, 0xc00083a480) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).next(...) /Users/runner/work/opa/opa/topdown/eval.go:162 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr.func1(0xc00017e780) /Users/runner/work/opa/opa/topdown/eval.go:331 +0x29 github.com/open-policy-agent/opa/topdown.(*eval).evalStep.func2() /Users/runner/work/opa/opa/topdown/eval.go:358 +0x39 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e780, 0xc004f1bd40, 0xc005649e30, 0xc00064efc0, 0xc00064efc0, 0xc00064eff0) /Users/runner/work/opa/opa/topdown/eval.go:916 +0x4e2 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0x7fb7628, 0x55cc0a0, 0x18, 0x6a555b8, 0x18, 0x5fe2e40) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(...) /Users/runner/work/opa/opa/topdown/eval.go:762 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval.func1(0xc005649e30) /Users/runner/work/opa/opa/topdown/eval.go:1625 +0xcb github.com/open-policy-agent/opa/topdown.builtinOPARuntime({{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, 0xc003a44250}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/runtime.go:36 +0x209 github.com/open-policy-agent/opa/topdown.builtinErrorWrapper.func1({{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, 0xc003a44250}, 0xc00478e960, ...}, ...) /Users/runner/work/opa/opa/topdown/builtins.go:126 +0x79 github.com/open-policy-agent/opa/topdown.evalBuiltin.eval({0xc00017e780, 0x5fc45e0, {{0x572b8e0, 0xc00064e4e0}, {0x5739230, 0xc0008400a0}, {0x570faa0, 0xc0001928a0}, 0xc005648210, {0x571f928, ...}, ...}, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1612 +0x283 github.com/open-policy-agent/opa/topdown.(*eval).evalCall(0xc00017e780, {0xc005688690, 0x2, 0xfe}, 0xc000b61858) /Users/runner/work/opa/opa/topdown/eval.go:758 +0x665 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00017e780, 0xc00095fd50) /Users/runner/work/opa/opa/topdown/eval.go:356 +0x335 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e780, 0xc00083a480) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.evalValueRule({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc0040e6000, 0xc00064ee40, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2641 +0x348 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.evalValue({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc0040e6000, 0xc00064ee40, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2607 +0x1c8 github.com/open-policy-agent/opa/topdown.evalVirtualComplete.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc0040e6000, 0xc00064ee40, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2573 +0x245 github.com/open-policy-agent/opa/topdown.evalVirtual.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2164 +0x3e5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1959 +0x2fd github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x5, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x4, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x4, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x3, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x3, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x2, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x2, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x1, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e5a0, {0xc00506b080, 0x7, 0xc}, {0xc00062fc00, 0x7, 0x7}, 0x1, 0xc00064ee40, 0xc005648738, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00017e5a0, 0x5732bb8, 0xc005648738, 0xc00064ee40, 0xc00064ee40, 0x0) /Users/runner/work/opa/opa/topdown/eval.go:958 +0x265 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e5a0, 0xc004f22378, 0xc005648738, 0xc00064ee40, 0xc00064ee40, 0xc00064eea0) /Users/runner/work/opa/opa/topdown/eval.go:874 +0x112 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0xc000350a98, 0xc0003509a0, 0x4010967, 0x30, 0x5556980, 0xc0004f4d01) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(0xc003a44370, 0xa, 0xc000350a98, 0x2) /Users/runner/work/opa/opa/topdown/eval.go:762 +0x26 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0xc00017e5a0, 0xc00095fcf0) /Users/runner/work/opa/opa/topdown/eval.go:365 +0x8cb github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e5a0, 0xc00064ee70) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.(*eval).evalNot(0xc00017e3c0, 0xc00095fce0) /Users/runner/work/opa/opa/topdown/eval.go:427 +0x375 github.com/open-policy-agent/opa/topdown.(*eval).evalStep(0x90, 0x55bbb72) /Users/runner/work/opa/opa/topdown/eval.go:340 +0x985 github.com/open-policy-agent/opa/topdown.(*eval).evalExpr(0xc00017e3c0, 0xc00083a360) /Users/runner/work/opa/opa/topdown/eval.go:330 +0xec github.com/open-policy-agent/opa/topdown.(*eval).eval(...) /Users/runner/work/opa/opa/topdown/eval.go:292 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.evalAllRulesNoCache({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00062fac0, 0xc00064eab0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2270 +0x374 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.evalAllRules({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00062fac0, 0xc00064eab0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2252 +0x119 github.com/open-policy-agent/opa/topdown.evalVirtualPartial.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00062fac0, 0xc00064eab0, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2194 +0x165 github.com/open-policy-agent/opa/topdown.evalVirtual.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2139 +0x5a5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1959 +0x2fd github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x5, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x4, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x4, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x3, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x3, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x2, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x2, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x1, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc00083e0a0, 0x6, 0xa}, {0xc00064ecc0, 0x6, 0x6}, 0x1, 0xc00064eab0, 0xc005648498, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.(*eval).biunifyRef(0xc00017e1e0, 0x5732bb8, 0xc005648498, 0xc00064eab0, 0xc00064eab0, 0x203000) /Users/runner/work/opa/opa/topdown/eval.go:958 +0x265 github.com/open-policy-agent/opa/topdown.(*eval).biunifyValues(0xc00017e1e0, 0xc0056484c8, 0xc005648498, 0xc00064eab0, 0xc00064eab0, 0xc000745000) /Users/runner/work/opa/opa/topdown/eval.go:874 +0x112 github.com/open-policy-agent/opa/topdown.(*eval).biunify(0xc00083e0a0, 0x6, 0xa, 0x2, 0x2, 0xc) /Users/runner/work/opa/opa/topdown/eval.go:770 +0x4ec github.com/open-policy-agent/opa/topdown.(*eval).unify(...) /Users/runner/work/opa/opa/topdown/eval.go:762 github.com/open-policy-agent/opa/topdown.evalTree.leaves({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x5, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:2080 +0x548 github.com/open-policy-agent/opa/topdown.evalTree.extent({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x5, 0xc00064eab0, 0xc0056517e8, ...}) /Users/runner/work/opa/opa/topdown/eval.go:2034 +0xe5 github.com/open-policy-agent/opa/topdown.evalTree.finish({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x5, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1929 +0x145 github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x5, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1906 +0x138 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x4, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x4, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x3, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x3, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x2, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x2, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 github.com/open-policy-agent/opa/topdown.evalTree.next({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x1, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1965 +0x33f github.com/open-policy-agent/opa/topdown.evalTree.eval({0xc00017e1e0, {0xc0040c5840, 0x5, 0x8}, {0xc00064ec00, 0x5, 0x5}, 0x1, 0xc00064eab0, 0xc0056517e8, ...}, ...) /Users/runner/work/opa/opa/topdown/eval.go:1912 +0xc5 created by net/http.(*Server).Serve /Users/runner/hostedtoolcache/go/1.17.7/x64/src/net/http/server.go:3034 +0x4e8

[anderseknert]

Thanks for reporting that, Charlie 👍 We'll have it fixed ASAP.

[charlieflowers]

FYI, I'll work on this, likely over the weekend.

[charlieflowers]

PR: #5178