github-mirror/libarchive
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,810 Commits 6 Branches 59 Tags
1368b08875351df8aa268237b882c8f4ceb0882d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Matuska 1368b08875 Release 3.8.3 2025-11-17 20:39:55 +01:00
Martin Matuška 476369f600 Merge pull request #2771 from mostynb/lz4_with_leading_skippable_frames 
Support both lz4 and zstd data with leading skippable frames

(cherry picked from commit ce7b3f1c15)
 2025-11-17 20:34:26 +01:00
Martin Matuška d59cf5aa65 Merge pull request #2751 from KlaraSystems/des/zip_magic_numbers 
Avoid magic numbers in zip support code

(cherry picked from commit dbacda991c)
 2025-11-17 20:34:22 +01:00
Martin Matuška ec3bcb46e0 Merge pull request #2752 from KlaraSystems/des/safe-writes-umask 
Set umask before testing safe writes

(cherry picked from commit 2caee6a37e)
 2025-11-17 20:34:17 +01:00
Martin Matuška f1ad45f513 Merge pull request #2755 from mmatuska/fix/cirrusci 
CI: update FreeBSD 14 build environment
(cherry picked from commit d5bd2dfafe)
 2025-11-17 20:34:00 +01:00
Martin Matuska 7f53fce04e Release 3.8.2 2025-10-15 23:36:59 +02:00
Martin Matuška 200ae00a12 Merge pull request #2722 from dependabot 
CI: Bump the all-actions group across 1 directory with 3 updates

(cherry picked from commit 46fe318edd)
 2025-10-11 22:13:37 +02:00
Martin Matuška a6d47272af Merge pull request #2735 from kientzle/kientzle-err.h-conflict 
Rename err.h to avoid conflict with system header

(cherry picked from commit ab5cb61f49)
 2025-09-23 22:59:50 +02:00
Martin Matuška dc6ea847e1 Merge pull request #2731 from mmatuska/fix/macosci 
CI: add workaround for cmake installed from local/pinned tab on GH/MacOS
(cherry picked from commit 38debf6be1)
 2025-09-23 22:59:45 +02:00
Martin Matuška ec91352d64 Merge pull request #2732 from mmatuska/fix/safe-dir-over-reg-win 
win: add complementary safe writes fix for Windows to 27588eba5 (#2477)
(cherry picked from commit e1dea559c7)
 2025-09-23 22:59:40 +02:00
Martin Matuška 1b5e6d4aed Merge pull request #2670 from benoit-pierre/pr/fix_zip_writing_with_zstd_compression_method 
zip: fix writing with ZSTD compression
(cherry picked from commit 589659ed7f)
 2025-09-23 22:59:30 +02:00
Martin Matuška 927dd43020 Merge pull request #2477 from jrtc27/safe-dir-over-reg 
Fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES

(cherry picked from commit 52db141ece)
 2025-09-23 22:59:25 +02:00
Martin Matuška 8055fbd321 Merge pull request #2686 from stoeckmann/lseek_win_regression 
Fix Windows off_t handling

(cherry picked from commit 3b1100f9a9)
 2025-09-23 22:59:21 +02:00
Martin Matuška 044dd73668 Merge pull request #2710 from meecash/CVE-2025-25724-check_strftime_result 
Fix CVE-2025-25724 by checking the result of the strftime

(cherry picked from commit 6bd863f612)
 2025-09-23 22:59:15 +02:00
Martin Matuška 44681dd67f Merge pull request #2723 from KlaraSystems/des/couldnt-visit 
archive_read_disk_posix: Don't pass -1 to a function expecting errno

(cherry picked from commit bf50fe0538)
 2025-09-23 22:58:19 +02:00
Martin Matuška ab5ae538f6 Merge pull request #2716 from antekone/bug/GH-2714/infinite-loop/1 
RAR5 reader: early fail when file declares data for a dir entry

(cherry picked from commit 2db13f7422)
 2025-09-23 22:58:12 +02:00
Martin Matuška 12c8b3f895 Merge pull request #2713 from antekone/bug/GH-2711/crash-when-rr/1 
RAR5 reader: fix multiple issues in extra field parsing function

(cherry picked from commit 93f9e93d73)
 2025-09-23 22:58:07 +02:00
Martin Matuška 5797a13c1f Merge pull request #2700 from mostynb/avoid_libxml2_deprecation_warnings 
xar: avoid libxml2 deprecation warnings
(cherry picked from commit 12ffcef28c)
 2025-09-23 22:58:01 +02:00
Martin Matuška 2aaa3389d1 Merge pull request #2659 from stoeckmann/chld 
Improve filter process handling

(cherry picked from commit 6effe2ec6b)
 2025-09-10 10:15:45 +02:00
Martin Matuška 0d32537a91 Merge pull request #2669 from benoit-pierre/pr/minor_test_related_tweaks 
minor test related tweaks

(cherry picked from commit 251f7e839c)
 2025-09-10 10:15:07 +02:00
Martin Matuška 7278794021 Merge pull request #2663 from stoeckmann/filename_errpath 
open_filename: Free memory on error paths

(cherry picked from commit 47bdf82489)
 2025-09-10 10:14:59 +02:00
Martin Matuška 0fadc61d5b Merge pull request #2665 from stoeckmann/read_data_sparse 
archive_read_data: Handle sparse holes at end of file correctly

(cherry picked from commit c3be70e071)
 2025-09-10 10:14:46 +02:00
Martin Matuška f0020dcb21 Merge pull request #2668 from stoeckmann/7z_oob 
7zip: Fix out of boundary access
(cherry picked from commit 9bdc5b82f7)
 2025-09-10 10:14:34 +02:00
Martin Matuska 9525f90ca4 Release 3.8.1 2025-06-01 21:26:44 +02:00
Martin Matuška 7a0b0caea1 Merge pull request #2627 from heirecka/do-not-hard-code-pkg-config 
Use PKG_CONFIG instead of hard-coded pkg-config

(cherry picked from commit 70978468e9)
 2025-05-31 21:40:54 +02:00
Martin Matuška bc2fcdafce Merge pull request #2643 from stoeckmann/tar_pax_sparse 
tar: Handle extra bytes after sparse entries
(cherry picked from commit c7b7bd7c0e)
 2025-05-31 21:32:50 +02:00
Martin Matuska 70ff28fcf0 Release 3.8.0 2025-05-20 10:35:52 +02:00
Martin Matuska 3128f04f58 7z: fix another out-of-bounds read in 7z SFX archive detection 
When looping over program header entries (e_shnum)
we need to increment sec_tbl_offset by e_shentsize
and not by fixed values.

Fixes OSS-Fuzz issue 418349489
 2025-05-18 03:07:49 +02:00
Martin Matuska 1667b31d0b 7z: fix out-of-bounds read in 7z self extracting archive detection 
Fixes OSS-Fuzz issue 416832167
 2025-05-14 16:18:19 +02:00
Martin Matuska 043b6feeef Fix tests added in #2284 (#2387) 2024-10-23 18:47:32 +02:00
Martin Matuska 206df6192c Revert "add --mac-metadata test for --format zip - see #2041 (#2045)" 
This reverts commit ea56096020.
 2024-10-23 18:45:23 +02:00
Martin Matuska 915c9f83a4 Libarchive 3.8.0dev 2024-09-13 23:13:01 +02:00
Martin Matuska 12ecf8418a Release 3.7.5 2024-09-13 22:20:55 +02:00
Martin Matuska 83e8b0ea8c tests: setenv LANG to en_US.UTF-8 in bsdunzip test_I.c 2024-04-30 11:28:09 +02:00
Martin Matuska 9951b9cd25 Libarchive 3.7.5dev 2024-04-26 12:07:47 +02:00
Martin Matuska 313aa1fa10 Release 3.7.4 2024-04-26 11:22:15 +02:00
Martin Matuska 284ba9539a CI: add "CI" prefix to dependabot commit messages 2024-04-23 16:32:16 +02:00
Martin MatuskaandMostyn Bramley-Moore ab27905ae7 zstd: Implement core detection on Windows 
Fixes #2071

Co-authored-by: Mostyn Bramley-Moore <mostyn@antipode.se>
 2024-04-23 15:24:31 +02:00
Martin Matuska a69a4537a6 CI: add libxml2 to MacOS test build 2024-04-23 11:51:53 +02:00
Martin Matuska 91ba8ceacf unzip: explicitly set en_US.UTF-8 locale in test_I.c 2024-04-23 07:45:50 +02:00
Martin Matuska d43c39247f tests: fix null format string error in test_compat_lzip.c 2024-04-17 09:16:10 +02:00
Martin Matuska b3be94ba4f Libarchive 3.7.4dev 2024-04-08 12:17:17 +02:00
Martin Matuska 4fcc02d906 Release 3.7.3 2024-04-08 00:11:03 +02:00
Martin Matuska 62c8caf661 Revert "zip: update AppleDouble support for directories (#2100)" 
This reverts commit 390d83012f.
PR reopened back for review.
 2024-04-03 11:15:22 +02:00
Martin Matuska 04512b5b89 ci: use liblzma 1.5.5 in MSVC build until fix from upstream (#2105) 
Signed-off-by: Duncan Horn
 2024-04-01 19:44:24 +02:00
Martin Matuska 2b12cb429c cmake: look for libxml2 only if HAVE_ICONV is set (#2105) 
Signed-off-by: Duncan Horn
 2024-04-01 19:43:52 +02:00
Martin Matuska 2f4f9a7e4f CI: install mingw and set correct path 2023-12-10 01:01:28 +01:00
Martin Matuska 3bd918d92f tests: fix zstd long option test for 32-bit architectures 
Fixes #1968
 2023-09-12 08:56:20 +02:00
Martin Matuska c8711937f4 Libarchive 3.7.3dev 2023-09-12 00:50:11 +02:00
Martin Matuska 6468cd1f5c Release 3.7.2 2023-09-12 00:01:01 +02:00
Martin Matuska 98f9063f22 CI: update Windows zlib build dependency to 1.3 2023-09-11 22:06:36 +02:00
Martin Matuska 04be21ea4d uudecode filter: free name if already allocated before allocating 2023-08-24 01:15:43 +02:00
Martin Matuska f6775eebcb uudecode filter: add missing check for failed malloc 2023-08-23 09:05:35 +02:00
Martin Matuska 1b4e0d0f9d pax writer: fix multiple security vulnerabilities 
Security vulnerabilities:
1. Heap overflow in url_encode() in archive_write_set_format_pax.c
2. NULL dereference in archive_write_pax_header_xattrs()
3. Another NULL dereference in archive_write_pax_header_xattrs()
4. NULL dereference in archive_write_pax_header_xattr()

The vulnerabilities can be triggered when writing pax archives
with extended attributes (SCHILY or LIBARCHIVE) by feeding attribute
names longer than INT_MAX or attribute names that fail to be encoded
properly.

Reported-by: Bahaa Naamneh of Crosspoint Labs
 2023-08-18 10:14:25 +02:00
Martin Matuska 05c86f9c75 CI: update Windows build dependencies 
Update zlib to 1.2.13, xz to 1.4.4 and zstd to 1.5.5
 2023-08-15 09:56:09 +02:00
Martin Matuska 5c5a9f2b76 unzip: correctly handle arguments following an -x after zipfile 2023-08-04 00:19:29 +02:00
Martin Matuska 574f6594ce build: add missing HAVE_STRUCT_STATFS to build/cmake/config.h.in 
Fixes #1937
 2023-08-04 00:18:10 +02:00
Martin Matuska dff77a6783 unzip: correctly define bsdunzip_optind 2023-07-31 13:29:25 +02:00
Martin Matuska 27ca5119f7 unzip: use libarchive-style getopt() implementation 2023-07-31 11:59:39 +02:00
Martin Matuska a8578c0b61 unzip: support --version argument 2023-07-31 02:21:42 +02:00
Martin Matuska 46063a5009 cat: fix references and variable names in cmdline.c 2023-07-30 23:27:45 +02:00
Martin Matuska 0e1e2b926a Libarchive 3.7.2dev 2023-07-29 19:30:12 +02:00
Martin Matuska 0c21691b17 Release 3.7.1 2023-07-29 18:59:32 +02:00
Martin Matuska ee312cfd05 cpio: multiple fixes in list_item_verbose() 
Do not call strftime() with NULL timeptr
Adjust uids and gids buffers as cpio_i64toa() may return up to 22 bytes

Fixes #1934
Fixes #1935
 2023-07-25 15:20:51 +02:00
Martin Matuska 3cfae35f26 unzip: fix include order in la_getline.c 2023-07-25 14:13:03 +02:00
Martin Matuska 35e3f857f9 build: update config_freebsd.h 2023-07-24 13:43:57 +02:00
Martin Matuska 5397c4ed5c unzip: add NetBSD implementation of getline() if not supported 
Fixes #1933
 2023-07-24 13:43:48 +02:00
Martin Matuska 78687746c5 unzip: remove optreset from bsdunzip_platform.h 2023-07-24 13:35:33 +02:00
Martin Matuska b55d25506a unzip: fix build without utimensat() or futimens() 
Fixes #1919
 2023-07-19 09:10:36 +02:00
Martin Matuska 852611e3d9 unzip: use libeal port of sys/queue.h if not available 
Fixes #1920
 2023-07-18 16:56:52 +02:00
Martin Matuska 89712ffa6e unzip: use lchmod() and optreset only if available (fix Android build) 
Fixes #1921
 2023-07-18 15:42:14 +02:00
Martin Matuska a122717ffc Libarchive 3.7.1dev 2023-07-18 09:29:44 +02:00
Martin Matuska ee45796171 Release 3.7.0 2023-07-18 08:30:36 +02:00
Martin Matuska ab8a7738e0 CI: use two make jobs for Cirrus CI FreeBSD builds 2023-07-17 11:51:27 +02:00
Martin Matuska ea9271267d bsdunzip_test: fix link against ACL libs in cmake 2023-07-17 11:24:57 +02:00
Martin Matuska 6e444a9fb9 pax writer: depend ustar_max_mtime on size of time_t 2023-07-16 01:34:51 +02:00
Martin Matuska e6c9c0411c CI: use macos-13 in GitHub Actions 2023-07-15 01:35:26 +02:00
Martin Matuska a8b28a0684 build: add mising test archives to Makefile.am 2023-07-15 01:18:26 +02:00
Martin Matuska 607e95bca6 build: fix dist-build in Makefile.am 2023-07-14 20:59:36 +02:00
Martin Matuska c15d0021e2 CI: update apt cache on Ubuntu before build 2023-07-14 20:53:39 +02:00
Martin Matuska 386412e24e unzip: disable build on Windows 
Bsdunzip has not been ported to Windows yet.
Add header checks for fcntl.h and sys/queue.h
Add function check for fcntl()
 2023-07-14 20:49:31 +02:00
Martin Matuska e3f093af7c CI: ignore directory traversals test nr. 4 on MacOS 2023-07-14 14:44:20 +02:00
Martin Matuska b3f659a78c unzip: fix mtime number error from last commit 2023-07-14 12:39:25 +02:00
Martin Matuska 0615587a45 unzip: fix multi-platform handling of stat mtime 2023-07-14 12:36:03 +02:00
Martin Matuska 96b689a304 CI: fix debug build with cmake 2023-07-14 11:04:51 +02:00
Martin Matuska d3d16ec25d build: fix cmake build with OpenSSL 2023-07-14 11:01:58 +02:00
Martin Matuska 26b641ddb2 tests: fix exit on failed realloc in libarchive/test/test_fuzz.c 2023-07-14 09:53:13 +02:00
Martin Matuska 27b23ce00b unzip: fix EXTRA_VERSION macro in unzip/test/test.h 2023-07-14 09:52:24 +02:00
Martin Matuska d5ca0d1153 build: fix cmake build with Mbed TLS 2023-07-14 09:51:28 +02:00
Martin Matuska 996cf87add Fix call to setenv() in unzip/bsdunzip.c 2023-07-14 08:52:06 +02:00
Martin Matuska 28176a904f Fix missing endif in libarchive/archive_random.c 2023-07-14 08:50:06 +02:00
Martin Matuska 3da2fb7ee2 Libarchive 3.6.3dev 2022-12-09 16:13:56 +01:00
Martin Matuska ba80276ccc Release 3.6.2 2022-12-09 14:28:16 +01:00
Martin Matuska 4dc5962910 archive_hmac: use EVP_MAC_*() in OpenSSL 3.0 
HMAC_*() functions have been deprecated since OpenSSL 3.0
 2022-12-09 14:26:20 +01:00
Martin Matuska 9add75fa40 CI: update Ubuntu to 22.04 and MacOS to 12 2022-12-09 13:04:45 +01:00
Martin Matuska e2f7c1dcb9 archive_read_support_format_tar: avoid always-true comparsion 
Reported by: GitHub CodeQL
Code Scanning Alert: 125
 2022-12-08 16:30:10 +01:00
Martin Matuska 09b2d329bf test_sparse_basic: avoid always-true comparsion 
Reported by: CodeQL
Code Scanning Alert: 126
 2022-12-08 16:27:00 +01:00
Martin Matuska 0eac3985f0 test_main.c: omit always-true comparsion 
Reported by: CodeQL
Code Scanning Alert: 127
 2022-12-08 16:26:37 +01:00
Martin Matuska 31d08b5009 test_read_format_rar5: correctly use verify_data() 
Reported by: CodeQL
Code Scanning Alert: 129
 2022-12-08 16:10:46 +01:00
Martin Matuska b86647a85d mtree reader: check __archive_rb_tree_find_node() for NULL return 
Reported by: GitHub CodeQL
Code Scanning Alert: 190
 2022-12-08 16:07:07 +01:00