Commit graph

  • 6be3a20f72
    Merge a04d5611f6 into 7d2917b47f serunis 2026-08-25 10:52:18 +00:00
  • a04d5611f6 minizip: use wmain for Unicode command-line arguments Sanguk Park 2026-08-23 18:46:39 +09:00
  • 3e14c775c2 minizip: fix non-ASCII filename handling on Windows Sanguk Park 2026-07-22 23:55:57 +09:00
  • 7f1c4b727f Fall back to system code page for non-utf8 filenames when extracting Sanguk Park 2026-07-22 23:53:06 +09:00
  • 5859056939 Add utf8 validation and system default encoding helpers Sanguk Park 2026-07-22 23:52:45 +09:00
  • 250fb38825
    Merge dbf4aaf6f3 into 7d2917b47f tbeu 2026-08-24 10:45:52 -07:00
  • 95b2f50be2
    Merge e5bae3ca49 into 7d2917b47f tbeu 2026-08-24 10:44:37 -07:00
  • ed21e93296
    Merge f419d5fde7 into 7d2917b47f tbeu 2026-08-24 10:44:22 -07:00
  • a389a243a0
    Merge a56c3fc330 into 7d2917b47f Sidhartha kumar 2026-08-23 23:07:55 +09:00
  • 7d2917b47f
    Fix dangling pointer in mz_zip_set_comment() to prevent double-free/UAF (#1031) develop krleejihyeong 2026-08-23 12:53:20 +09:00
  • 13fee4ade0
    Simplify logic for setting comment in mz_zip. Nathan Moin Vaziri 2026-08-22 20:39:28 -07:00
  • 6872bc23ca
    Fix comment leak in mz_zip_read_cd() (#1032) krleejihyeong 2026-08-23 12:33:34 +09:00
  • e232b0033d Trim explanatory comment per maintainer feedback krleejihyeong 2026-08-23 02:39:42 +09:00
  • 66e1ea978e Trim explanatory comments per maintainer feedback krleejihyeong 2026-08-23 02:39:04 +09:00
  • f589f7e608 Validate comment length as size_t; document pointer lifetime krleejihyeong 2026-08-22 22:54:25 +09:00
  • d25480603e Allocate and copy replacement comment before freeing the old one krleejihyeong 2026-08-22 22:23:54 +09:00
  • 6d763c0ff5 Clear stale comment when archive has no comment krleejihyeong 2026-08-22 22:20:16 +09:00
  • 82f168b671 Fix comment leak in mz_zip_read_cd() krleejihyeong 2026-08-22 22:08:37 +09:00
  • 89441627eb Fix dangling pointer in mz_zip_set_comment() to prevent double-free/UAF krleejihyeong 2026-08-22 22:01:32 +09:00
  • dc8531deb7
    ppmd: fix memory leak (#1030) 2026-08-07 07:47:01 +03:00
  • 4908357bc1 fix indentation ahm3dgg 2026-08-07 00:41:50 +03:00
  • 86626aa774 mz_strm_ppmd: fix memory leak ahm3dgg 2026-08-02 07:58:28 +03:00
  • 0bc12cea19 build(deps): bump actions/setup-python from 6 to 7 dependabot[bot] 2026-08-01 00:32:42 +00:00
  • 4587bf361a build(deps): bump github/codeql-action from 4 to 4.37.3 dependabot[bot] 2026-08-01 00:33:56 +00:00
  • 176390c68a
    build(deps): bump github/codeql-action from 4 to 4.37.3 dependabot[bot] 2026-08-01 00:33:56 +00:00
  • f8fcab2757
    build(deps): bump actions/setup-python from 6 to 7 dependabot[bot] 2026-08-01 00:32:42 +00:00
  • e4df949ab2 Add MZ_ENCODING_CODEPAGE_949 definition for Korean code page Sanguk Park 2026-07-22 23:51:53 +09:00
  • a56c3fc330 Close NULL destination symlink traversal gap Alearner12 2026-07-21 22:09:35 +05:30
  • 1ead9229fe Reduce extraction hardening to directory symlink check Alearner12 2026-07-21 21:46:04 +05:30
  • 868e84163e Harden symlink target path bounds and root handling Alearner12 2026-07-15 19:37:00 +05:30
  • 933b492b4c Harden partial real-path resolution Alearner12 2026-07-15 19:34:40 +05:30
  • 00e49f303a Address extraction hardening review findings Alearner12 2026-07-15 19:14:42 +05:30
  • b2f6ce52e4 Harden extraction against destination symlink traversal Alearner12 2026-07-15 18:42:58 +05:30
  • 6eab58f20b crypt: macos: fix: mz_crypt_aes_{encrypt,decrypt}_final with NULL in buf Sergey Markelov 2026-07-14 08:39:00 +05:00
  • 2579a261dd crypt: macos: fix: mz_crypt_aes_{encrypt,decrypt}_final with NULL in buf Sergey Markelov 2026-07-14 08:39:00 +05:00
  • d805b1b079 fix: warning: format specifies type 'unsigned long' but the argument has type 'time_t' Brad Smith 2026-07-12 20:44:43 -04:00
  • 13ce514808 fix: warning: format specifies type 'unsigned long' but the argument has type 'time_t' Brad Smith 2026-07-12 20:44:43 -04:00
  • 04c976d369 #597 Allow recover flag to read zips with >65535 entries missing zip64 EOCD tbeu 2026-07-04 00:18:36 +02:00
  • f419d5fde7 #840 Restore stream position after reading data descriptor in read close tbeu 2026-07-03 23:58:48 +02:00
  • bc0f499697 #597 Allow recover flag to read zips with >65535 entries missing zip64 EOCD tbeu 2026-07-04 00:18:36 +02:00
  • b59f684429 #998 Add MZ_ICU option for string encoding conversion tbeu 2026-07-04 10:30:29 +02:00
  • 4e3ede8885 #998 Add MZ_ICU option for string encoding conversion tbeu 2026-07-04 10:30:29 +02:00
  • cde8b2f81b #997 Fix resource leaks tbeu 2026-07-04 08:58:11 +02:00
  • 4cf889142a #794 Update after review tbeu 2026-07-04 12:47:01 +02:00
  • 144ca10012 #794 Support custom memory allocation functions like zlib-ng tbeu 2026-07-04 10:03:57 +02:00
  • dbf4aaf6f3 #475 Add MZ_EXPORT to public API symbols and hide internal symbols tbeu 2026-07-04 09:14:53 +02:00
  • 3a35c63148 #997 Fix resource leaks tbeu 2026-07-04 08:58:11 +02:00
  • e5bae3ca49 #744 Widen mz_stream_mem size types and mz_stream_copy len to int64_t tbeu 2026-07-03 22:54:05 +02:00
  • 6920763572
    cmake: option MZ_PBKDF2: export mz_crypt_pbkdf2 Sergey Markelov 2026-07-02 10:47:22 +05:00
  • dfa766eb53 Update to use upstream 7zip version 26.02 pmas 2026-07-01 12:42:39 +01:00
  • 2f58523fcb Fixed code rabbit requested bugs; Didnt change guard every int64_t length before memory set because this check is alredy baked inside mem_set function piggie 2026-07-01 18:20:43 +05:00
  • 86a5537bc3 Fixed major bugs and one critical in mz_zip_rw piggie 2026-07-01 17:17:32 +05:00
  • 70cc7f230e Fixed critical bugs piggie 2026-07-01 17:12:16 +05:00
  • b57ccf7800 Update to use upstream 7zip version 26.02 pmas 2026-07-01 12:42:39 +01:00
  • 5219c0fe72 fixed from to_write to total_written piggie 2026-07-01 16:28:36 +05:00
  • 04a4f6c812 Made requested bug fixed; Added boundaries checks; Added support inside functions for 64 bit; Used chunk read/write method; Added aditional bugfixes piggie 2026-07-01 16:00:13 +05:00
  • 2ac3cd2555 build(deps): bump actions/checkout from 6 to 7 dependabot[bot] 2026-07-01 00:32:44 +00:00
  • 3e598214eb build(deps): bump actions/cache from 5 to 6 dependabot[bot] 2026-07-01 00:32:50 +00:00
  • e8c1d2d0af build(deps): bump codecov/codecov-action from 6 to 7 dependabot[bot] 2026-07-01 00:32:47 +00:00
  • cc2a609863
    build(deps): bump actions/cache from 5 to 6 dependabot[bot] 2026-07-01 00:32:50 +00:00
  • 2ce4b3acb3
    build(deps): bump codecov/codecov-action from 6 to 7 dependabot[bot] 2026-07-01 00:32:47 +00:00
  • e38fb654ba
    build(deps): bump actions/checkout from 6 to 7 dependabot[bot] 2026-07-01 00:32:44 +00:00
  • fc7fd63d46 Finished implementation for strm_mem; Changed interface accordingly; Changed other funcs to use this signature; Code compiles and passes al the tests piggie 2026-06-30 23:20:37 +05:00
  • bf7aa90bcd Update to use upstream 7zip version 26.01 Paul Marquess 2026-05-01 13:43:27 +01:00
  • 7b2387161c
    Version 4.2.2. 4.2.2 master Nathan Moin Vaziri 2026-06-30 09:44:28 -07:00
  • dee016db77 Oh thats why you need to think before you act; mz_stream_mem_write returns size written and error code as return values(return codes are negative) thats why you need for return value to be signed; rewrote everything to use int64_t added SIZE_MAX check for malloc; returned original check in mem_read piggie 2026-06-30 21:40:27 +05:00
  • 1bc5c69413 Changed mz_stream_mem_read to use size_t; changed boundareis check to be suitable for size_t piggie 2026-06-30 21:19:37 +05:00
  • 051bf8c38e Changed position, grow_size, size, limit inside mz_stream_mem to size_t; Fixed overflow buf in memcpy, now it uses lower value between new size and mem->limit piggie 2026-06-30 21:03:35 +05:00
  • 131d59ba39 fix: reject symlink targets that escape extraction dir Nathan Moin Vaziri 2026-06-29 14:38:48 -07:00
  • 8be864eaa8
    fix: reject symlink targets that escape extraction dir Nathan Moin Vaziri 2026-06-29 14:38:48 -07:00
  • 181642d2f8 test: improve: validate cipher bytes after encryption Sergei 2026-06-25 21:38:10 -07:00
  • 3cdea0609c
    test: improve: validate cipher bytes after encryption Sergei 2026-06-25 21:38:10 -07:00
  • dbdb1059d0 fix: mz_crypt_aes_set_*_key for GCM on OpenSSL Sergei 2026-06-24 22:28:03 -07:00
  • 35919ba1ad
    fix: mz_crypt_aes_set_*_key for GCM on OpenSSL Sergei 2026-06-24 22:28:03 -07:00
  • 20fb0e3fdf
    test: always compile the codec-gated test sources Nathan Moin Vaziri 2026-06-24 10:26:57 -07:00
  • e6f15b4ae9
    test: build stream compression tests only with compression Nathan Moin Vaziri 2026-06-24 10:13:07 -07:00
  • 8c5f95cde7
    test: don't run alternative data stream test on non-Windows platforms Nathan Moin Vaziri 2026-06-24 09:58:34 -07:00
  • ff303ab67d docs: update memory stream test link Ren yiwei 2026-06-13 17:14:20 +08:00
  • 71b51859cb docs: update memory stream test link Ren yiwei 2026-06-13 17:14:20 +08:00
  • d69cb0a539 fix: warning: '=': narrowing conversion, possible loss of data Sergei 2026-05-15 20:50:29 -07:00
  • 7e98489f4e
    fix: warning: '=': narrowing conversion, possible loss of data Sergei 2026-05-15 20:50:29 -07:00
  • 5f9be99667 Update to use upstream 7zip version 26.01 Paul Marquess 2026-05-01 13:43:27 +01:00
  • 947848cb1a build(deps): bump actions/upload-artifact from 6 to 7 dependabot[bot] 2026-05-01 00:48:16 +00:00
  • 55c760e5b1 build(deps): bump actions/download-artifact from 7 to 8 dependabot[bot] 2026-05-01 00:48:11 +00:00
  • fb9a1039c3
    build(deps): bump actions/upload-artifact from 6 to 7 dependabot[bot] 2026-05-01 00:48:16 +00:00
  • e5c3565488
    build(deps): bump actions/download-artifact from 7 to 8 dependabot[bot] 2026-05-01 00:48:11 +00:00
  • 26b4619120
    Version 4.2.1. 4.2.1 Nathan Moin Vaziri 2026-04-27 12:23:18 -07:00
  • d195f3722e cmake: pick zstd and zlib-ng targets per BUILD_SHARED_LIBS Nathan Moin Vaziri 2026-04-27 11:10:01 -07:00
  • 28d0c49fa8
    cmake: pick zstd and zlib-ng targets per BUILD_SHARED_LIBS Nathan Moin Vaziri 2026-04-27 11:10:01 -07:00
  • ea91a3c01b
    Version 4.2.0. 4.2.0 Nathan Moin Vaziri 2026-04-26 18:54:36 -07:00
  • a6300c3b29 compat: add unzGetCurrentFileZStreamPos64 (#848) Nathan Moin Vaziri 2026-04-26 18:47:40 -07:00
  • d1dc0d957c
    compat: add unzGetCurrentFileZStreamPos64 (#848) Nathan Moin Vaziri 2026-04-26 18:47:40 -07:00
  • 6b9defc73c mz_os: split file and link attribute getters (#797) Nathan Moin Vaziri 2026-04-26 18:21:36 -07:00
  • 1807ff31ea
    mz_os: split file and link attribute getters (#797) Nathan Moin Vaziri 2026-04-26 18:21:36 -07:00
  • 3f23ed7a11 minizip: place erase temp on same filesystem when TMPDIR differs Nathan Moin Vaziri 2026-04-25 01:01:34 -07:00
  • 1161adeb83
    minizip: place erase temp on same filesystem when TMPDIR differs Nathan Moin Vaziri 2026-04-25 01:01:34 -07:00
  • ece5b06dcf test: skip AES-GCM test when build doesn't support it Nathan Moin Vaziri 2026-04-25 01:22:49 -07:00
  • 291b39f5f2
    test: skip AES-GCM test when build doesn't support it Nathan Moin Vaziri 2026-04-25 01:22:49 -07:00
  • 483f0568b0 mz_os: skip symlink check at or above destination dir Nathan Moin Vaziri 2026-04-25 00:46:46 -07:00
  • 8ec500fd38 cmake: rename MINIZIP_PUBLIC_LIB variable Nathan Moin Vaziri 2026-04-25 00:45:22 -07:00