Commit Graph
100 Commits
Author SHA1 Message Date
Martin Matuska 27cbc78271 Release 3.8.9 2026-07-28 11:14:47 +02:00
Martin Matuska 7219b0134d Release 3.8.8 2026-06-23 11:11:31 +02:00
Martin Matuška 56f3f5fa0a Merge pull request #3171 from libarchive/dependabot/github_actions/all-actions-2217aebe03
CI: Bump actions/checkout from 6.0.3 to 7.0.0 in the all-actions group
(cherry picked from commit 2b9cacf6e8)
2026-06-23 11:08:08 +02:00
Martin Matuška 22a288834e Merge pull request #3172 from stoeckmann/lafe_fnmatch
libarchive_fe: Import FreeBSD's fnmatch

(cherry picked from commit 9819bc9370)
2026-06-23 11:08:04 +02:00
Martin Matuška be3df30fd2 Merge pull request #2918 from aale24/fix-test-format-newc-race
Fix test_format_newc timestamp race condition

(cherry picked from commit ba387256e0)
2026-06-23 11:06:58 +02:00
Martin Matuška 2fc792ba8f Merge pull request #3159 from stoeckmann/ckd_size
Use checked size_t arithmetic

(cherry picked from commit 2498165482)
2026-06-23 11:06:46 +02:00
Martin Matuška 35e4a6edc3 Merge pull request #3157 from libarchive/dependabot/github_actions/all-actions-0a5d8bb8fa
CI: Bump the all-actions group across 1 directory with 5 updates
(cherry picked from commit ead081b704)
2026-06-23 11:06:34 +02:00
Martin Matuška a61b1fe618 Merge pull request #3150 from DHowett/ci/windows-package-dependencies
build: windows: get all CI dependencies from a package manager
(cherry picked from commit fc0530d502)
2026-06-23 11:06:30 +02:00
Martin Matuška e90bccd387 Merge pull request #3144 from stoeckmann/cab_truncation
cab: Improve truncation detection
(cherry picked from commit 26f68fcc6d)
2026-06-23 11:06:14 +02:00
Martin Matuška fb76871b3f Merge pull request #3134 from stoeckmann/archive_integer
Introduce `archive_integer.h` for checked arithmetic

(cherry picked from commit f6dea9e94b)
2026-06-23 11:06:08 +02:00
Martin Matuška c11e709cf4 Merge pull request #2967 from bgilbert/deflate
Fix `test_write_filter_gzip` on Ubuntu s390x

(cherry picked from commit 983e1edcdd)
2026-06-23 11:01:41 +02:00
Martin Matuška 160540487d Merge pull request #3131 from stoeckmann/rpm_fsm
rpm: Refactor filter
(cherry picked from commit 65eaff4835)
2026-06-23 11:01:36 +02:00
Martin Matuška aa622bfdf4 Merge pull request #3128 from stoeckmann/into_fd
Improve `archive_read_data_into_fd` with sparse files

(cherry picked from commit 5f8f651fae)
2026-06-23 11:01:31 +02:00
Martin Matuška a07fbdb415 Merge pull request #3121 from stoeckmann/rar5_bytes_remaining
rar5: fix signed integer underflow in bytes_remaining
(cherry picked from commit d9279e464c)
2026-06-23 11:01:25 +02:00
Martin Matuška b64ebd5ae7 Merge pull request #3120 from stoeckmann/archive_endian
Extend `archive_endian.h` usage

(cherry picked from commit b3da16bbf2)
2026-06-23 11:01:15 +02:00
Martin Matuška 6e9aa8a57e Merge pull request #3098 from stoeckmann/filter_read_ahead
filters: Simplify `__archive_read_filter_ahead` use
(cherry picked from commit a116558eb4)
2026-06-23 11:01:09 +02:00
Martin Matuška 5b50da71a4 Merge pull request #3119 from stoeckmann/7zip_u32_oflow
7zip: Fix range check in get_pe_sfx_offset
(cherry picked from commit f7ec3a2505)
2026-06-23 11:01:05 +02:00
Martin Matuška 17464ecdb9 Merge pull request #3115 from stoeckmann/gzip_writer_mem
gzip: Fix OOB in writer with huge filename
(cherry picked from commit 792c87d5bd)
2026-06-23 11:00:58 +02:00
Martin Matuška 390dd137a4 Merge pull request #3114 from stoeckmann/open_oob
Fix OOB in `archive_read_open_filenames_w` on some systems

(cherry picked from commit 7957d6d3b0)
2026-06-23 11:00:53 +02:00
Martin Matuška e150c2f417 Merge pull request #3113 from stoeckmann/fflags_strcpy
7zip/rar5: Simplify file attribute handling

(cherry picked from commit 5ce5112087)
2026-06-23 11:00:43 +02:00
Martin Matuška c93ad88df8 Merge pull request #3108 from stoeckmann/windows_legacy
Reduce Windows legacy support

(cherry picked from commit 5c516433ee)
2026-06-23 11:00:39 +02:00
Martin Matuška 6a129f58e9 Merge pull request #3045 from datauwu/iso9660-joliet-patch
iso9660: bound duplicate identifier extension placement
(cherry picked from commit 1b080e9c2a)
2026-06-23 10:58:31 +02:00
Martin Matuška e91dffdc92 Merge pull request #3073 from stoeckmann/lz4_zstd_32
lz4/zstd: Fix 32 bit platform endless loop and OOB access during bidding

(cherry picked from commit 6ac02f9521)
2026-06-23 10:58:26 +02:00
Martin Matuška 71f6b7c1d8 Merge pull request #3091 from yPin9/fix/rar5-consume-remaining
rar5: skip unconsumed block bytes before ARCHIVE_RETRY
(cherry picked from commit 9b5c25087e)
2026-06-23 10:58:18 +02:00
Martin Matuška b4ff77b25e Merge pull request #3103 from stoeckmann/uu_32_oob
uu: Extend range checks to avoid 32 bit OOB
(cherry picked from commit 85ea76b373)
2026-06-23 10:58:13 +02:00
Martin Matuška f8588d3447 Merge pull request #2837 from mmatuska/ci-firecracker
CI: add FreeBSD 15 build via firecracker VM to GitHub Actions
(cherry picked from commit 93065aac92)
2026-06-23 10:58:07 +02:00
Martin Matuška d98369b4e1 Merge pull request #3089 from mostynb/remove_cirrus_ci
Remove Cirrus CI setup, it is shutting down in a few days

(cherry picked from commit ebfa344055)
2026-06-23 10:57:00 +02:00
Martin Matuška c52da38579 Merge pull request #3093 from stoeckmann/lz4_skip
lz4: Improve truncated input stream detection
(cherry picked from commit 66026841b2)
2026-06-23 10:56:56 +02:00
Martin Matuška 0332996f6f Merge pull request #3095 from stoeckmann/afio_header
cpio: Improve afio header detection
(cherry picked from commit 36d69b3ec8)
2026-06-23 10:56:53 +02:00
Martin Matuška 2fe2828581 Merge pull request #3096 from stoeckmann/filters_comments
filters: Update comments
(cherry picked from commit fcbbce329c)
2026-06-23 10:56:48 +02:00
Martin Matuška 2e97ccd3e5 Merge pull request #3097 from stoeckmann/typos
Fix typos in comments and error message

(cherry picked from commit 05eff7d2da)
2026-06-23 10:56:44 +02:00
Martin Matuška e5acfbd88e Merge pull request #3099 from stoeckmann/7zip_seek
7zip: Extend support for filtered input
(cherry picked from commit 0ebc440d8e)
2026-06-23 10:56:40 +02:00
Martin Matuška 706e2b6783 Merge pull request #3100 from stoeckmann/lz4_xxh32
lz4: Check `XXH32_init` result
(cherry picked from commit bb0d9dfd39)
2026-06-23 10:56:35 +02:00
Martin Matuška 5658b6bba9 Merge pull request #2985 from stoeckmann/7zip_sfx
7zip: Harden SFX parser
(cherry picked from commit 740be68fc0)
2026-06-23 10:17:08 +02:00
Martin Matuška f1632df055 Merge pull request #2988 from kientzle/kientzle-acl-to-text
[archive_acl] Fix buffer overrun and wrong output for NULL-name ACL entries

(cherry picked from commit cf9bc89194)
2026-06-23 10:16:43 +02:00
Martin Matuška c883e895ba Merge pull request #2961 from bgilbert/malformed
Add malformed CAB test to Autotools

(cherry picked from commit 2860b2a792)
2026-06-23 10:00:56 +02:00
Martin Matuška 1c85a09812 Merge pull request #2962 from dag-erling/des/optreset
unzip: Remove dead code
test_main: Staticize some variables

(cherry picked from commit fc76727081)
2026-06-23 10:00:52 +02:00
Martin Matuska ded82291ab Release 3.8.7 2026-04-13 11:00:33 +02:00
Martin Matuska 3a9249b4ee Release 3.8.6 2026-03-10 09:37:45 +01:00
Martin Matuska dd897a78c6 Release 3.8.5 2026-01-05 10:49:24 +01:00
Martin Matuška 1835ca5f03 Merge pull request #2781 from AZero13/ints
Remove unneeded int cast

(cherry picked from commit 3cd503b75a)
2026-01-05 10:44:15 +01:00
Martin Matuška 1decf414b0 Merge pull request #2836 from ngie-eign/add-freebsd-15-cirrus-ci
Expand the test matrix to include 15.x images/ZFS

(cherry picked from commit 02eba33825)
2026-01-05 10:43:57 +01:00
Martin Matuška c8ea1e5da2 Merge pull request #2813 from AZero13/memcpy
We copy from p, not p + module_len

(cherry picked from commit b2d68e2f1a)
2025-12-26 10:23:58 +01:00
Martin Matuška 2805282a16 Merge pull request #2796 from vcoxvco/fix_unninit
libarchive/archive_util.c: Uninitialized variable

(cherry picked from commit 1cd0b9179c)
2025-12-25 10:21:28 +01:00
Martin Matuška bec0337316 Merge pull request #2816 from AZero13/strdup
Error check strdup for path name

(cherry picked from commit 095609e89b)
2025-12-25 10:21:22 +01:00
Martin Matuška 2d0d2311d3 Merge pull request #2814 from AZero13/gname
uname_override checks gname_override when it should check uname_override

(cherry picked from commit 5c84afd664)
2025-12-25 10:21:17 +01:00
Martin Matuška 8216512c8e Merge pull request #2789 from libarchive/dependabot/github_actions/all-actions-50b857948b
CI: Bump the all-actions group across 1 directory with 3 updates
(cherry picked from commit f366e98107)
2025-12-25 10:21:12 +01:00
Martin Matuška 8eda7c5277 Merge pull request #2815 from AZero13/=
Use >=, not =>

(cherry picked from commit c4597a73f3)
2025-12-25 10:21:06 +01:00
Martin Matuška 2b8c75323d Merge pull request #2819 from GabrielBarrantes/work/typos
Improve wording

(cherry picked from commit 8042630d4f)
2025-12-25 09:59:46 +01:00
Martin Matuška ab14459373 Merge pull request #2820 from skypher/oss-fuzz-expansion
Expand OSS-Fuzz integration: 1 → 25 fuzz targets

(cherry picked from commit 214ee3edc7)
2025-12-25 09:59:41 +01:00
Martin Matuška e108f0dfab Merge pull request #2809 from mmatuska/fix/2787
tar: fix off-bounds read resulting from #2787 (3150539ed)
(cherry picked from commit a7f3b56af6)
2025-12-25 09:59:10 +01:00
Martin Matuska d114ceee6d Release 3.8.4 2025-12-01 13:39:19 +01:00
Martin Matuška 7d94cdaf66 Merge pull request #2800 from mmatuska/fix/freebsdci
CI: use gmake in Cirrus FreeBSD build
(cherry picked from commit 728b43c0c1)
2025-12-01 13:32:53 +01:00
Martin Matuška 2ded466c2a Merge pull request #2797 from mmatuska/fix/treefuncs
Partially revert "Merge pull request #2679 from AZero13/error"

(cherry picked from commit a819cc2829)
2025-11-28 11:47:47 +01:00
Martin Matuska 1368b08875 Release 3.8.3 2025-11-17 20:39:55 +01:00
Martin Matuška 476369f600 Merge pull request #2771 from mostynb/lz4_with_leading_skippable_frames
Support both lz4 and zstd data with leading skippable frames

(cherry picked from commit ce7b3f1c15)
2025-11-17 20:34:26 +01:00
Martin Matuška d59cf5aa65 Merge pull request #2751 from KlaraSystems/des/zip_magic_numbers
Avoid magic numbers in zip support code

(cherry picked from commit dbacda991c)
2025-11-17 20:34:22 +01:00
Martin Matuška ec3bcb46e0 Merge pull request #2752 from KlaraSystems/des/safe-writes-umask
Set umask before testing safe writes

(cherry picked from commit 2caee6a37e)
2025-11-17 20:34:17 +01:00
Martin Matuška f1ad45f513 Merge pull request #2755 from mmatuska/fix/cirrusci
CI: update FreeBSD 14 build environment
(cherry picked from commit d5bd2dfafe)
2025-11-17 20:34:00 +01:00
Martin Matuska 7f53fce04e Release 3.8.2 2025-10-15 23:36:59 +02:00
Martin Matuška 200ae00a12 Merge pull request #2722 from dependabot
CI: Bump the all-actions group across 1 directory with 3 updates

(cherry picked from commit 46fe318edd)
2025-10-11 22:13:37 +02:00
Martin Matuška a6d47272af Merge pull request #2735 from kientzle/kientzle-err.h-conflict
Rename err.h to avoid conflict with system header

(cherry picked from commit ab5cb61f49)
2025-09-23 22:59:50 +02:00
Martin Matuška dc6ea847e1 Merge pull request #2731 from mmatuska/fix/macosci
CI: add workaround for cmake installed from local/pinned tab on GH/MacOS
(cherry picked from commit 38debf6be1)
2025-09-23 22:59:45 +02:00
Martin Matuška ec91352d64 Merge pull request #2732 from mmatuska/fix/safe-dir-over-reg-win
win: add complementary safe writes fix for Windows to 27588eba5 (#2477)
(cherry picked from commit e1dea559c7)
2025-09-23 22:59:40 +02:00
Martin Matuška 1b5e6d4aed Merge pull request #2670 from benoit-pierre/pr/fix_zip_writing_with_zstd_compression_method
zip: fix writing with ZSTD compression
(cherry picked from commit 589659ed7f)
2025-09-23 22:59:30 +02:00
Martin Matuška 927dd43020 Merge pull request #2477 from jrtc27/safe-dir-over-reg
Fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES

(cherry picked from commit 52db141ece)
2025-09-23 22:59:25 +02:00
Martin Matuška 8055fbd321 Merge pull request #2686 from stoeckmann/lseek_win_regression
Fix Windows off_t handling

(cherry picked from commit 3b1100f9a9)
2025-09-23 22:59:21 +02:00
Martin Matuška 044dd73668 Merge pull request #2710 from meecash/CVE-2025-25724-check_strftime_result
Fix CVE-2025-25724 by checking the result of the strftime

(cherry picked from commit 6bd863f612)
2025-09-23 22:59:15 +02:00
Martin Matuška 44681dd67f Merge pull request #2723 from KlaraSystems/des/couldnt-visit
archive_read_disk_posix: Don't pass -1 to a function expecting errno

(cherry picked from commit bf50fe0538)
2025-09-23 22:58:19 +02:00
Martin Matuška ab5ae538f6 Merge pull request #2716 from antekone/bug/GH-2714/infinite-loop/1
RAR5 reader: early fail when file declares data for a dir entry

(cherry picked from commit 2db13f7422)
2025-09-23 22:58:12 +02:00
Martin Matuška 12c8b3f895 Merge pull request #2713 from antekone/bug/GH-2711/crash-when-rr/1
RAR5 reader: fix multiple issues in extra field parsing function

(cherry picked from commit 93f9e93d73)
2025-09-23 22:58:07 +02:00
Martin Matuška 5797a13c1f Merge pull request #2700 from mostynb/avoid_libxml2_deprecation_warnings
xar: avoid libxml2 deprecation warnings
(cherry picked from commit 12ffcef28c)
2025-09-23 22:58:01 +02:00
Martin Matuška 2aaa3389d1 Merge pull request #2659 from stoeckmann/chld
Improve filter process handling

(cherry picked from commit 6effe2ec6b)
2025-09-10 10:15:45 +02:00
Martin Matuška 0d32537a91 Merge pull request #2669 from benoit-pierre/pr/minor_test_related_tweaks
minor test related tweaks

(cherry picked from commit 251f7e839c)
2025-09-10 10:15:07 +02:00
Martin Matuška 7278794021 Merge pull request #2663 from stoeckmann/filename_errpath
open_filename: Free memory on error paths

(cherry picked from commit 47bdf82489)
2025-09-10 10:14:59 +02:00
Martin Matuška 0fadc61d5b Merge pull request #2665 from stoeckmann/read_data_sparse
archive_read_data: Handle sparse holes at end of file correctly

(cherry picked from commit c3be70e071)
2025-09-10 10:14:46 +02:00
Martin Matuška f0020dcb21 Merge pull request #2668 from stoeckmann/7z_oob
7zip: Fix out of boundary access
(cherry picked from commit 9bdc5b82f7)
2025-09-10 10:14:34 +02:00
Martin Matuska 9525f90ca4 Release 3.8.1 2025-06-01 21:26:44 +02:00
Martin Matuška 7a0b0caea1 Merge pull request #2627 from heirecka/do-not-hard-code-pkg-config
Use PKG_CONFIG instead of hard-coded pkg-config

(cherry picked from commit 70978468e9)
2025-05-31 21:40:54 +02:00
Martin Matuška bc2fcdafce Merge pull request #2643 from stoeckmann/tar_pax_sparse
tar: Handle extra bytes after sparse entries
(cherry picked from commit c7b7bd7c0e)
2025-05-31 21:32:50 +02:00
Martin Matuska 70ff28fcf0 Release 3.8.0 2025-05-20 10:35:52 +02:00
Martin Matuska 3128f04f58 7z: fix another out-of-bounds read in 7z SFX archive detection
When looping over program header entries (e_shnum)
we need to increment sec_tbl_offset by e_shentsize
and not by fixed values.

Fixes OSS-Fuzz issue 418349489
2025-05-18 03:07:49 +02:00
Martin Matuska 1667b31d0b 7z: fix out-of-bounds read in 7z self extracting archive detection
Fixes OSS-Fuzz issue 416832167
2025-05-14 16:18:19 +02:00
Martin Matuska 043b6feeef Fix tests added in #2284 (#2387) 2024-10-23 18:47:32 +02:00
Martin Matuska 206df6192c Revert "add --mac-metadata test for --format zip - see #2041 (#2045)"
This reverts commit ea56096020.
2024-10-23 18:45:23 +02:00
Martin Matuska 915c9f83a4 Libarchive 3.8.0dev 2024-09-13 23:13:01 +02:00
Martin Matuska 12ecf8418a Release 3.7.5 2024-09-13 22:20:55 +02:00
Martin Matuska 83e8b0ea8c tests: setenv LANG to en_US.UTF-8 in bsdunzip test_I.c 2024-04-30 11:28:09 +02:00
Martin Matuska 9951b9cd25 Libarchive 3.7.5dev 2024-04-26 12:07:47 +02:00
Martin Matuska 313aa1fa10 Release 3.7.4 2024-04-26 11:22:15 +02:00
Martin Matuska 284ba9539a CI: add "CI" prefix to dependabot commit messages 2024-04-23 16:32:16 +02:00
Martin MatuskaandMostyn Bramley-Moore ab27905ae7 zstd: Implement core detection on Windows
Fixes #2071

Co-authored-by: Mostyn Bramley-Moore <mostyn@antipode.se>
2024-04-23 15:24:31 +02:00
Martin Matuska a69a4537a6 CI: add libxml2 to MacOS test build 2024-04-23 11:51:53 +02:00
Martin Matuska 91ba8ceacf unzip: explicitly set en_US.UTF-8 locale in test_I.c 2024-04-23 07:45:50 +02:00
Martin Matuska d43c39247f tests: fix null format string error in test_compat_lzip.c 2024-04-17 09:16:10 +02:00
Martin Matuska b3be94ba4f Libarchive 3.7.4dev 2024-04-08 12:17:17 +02:00
Martin Matuska 4fcc02d906 Release 3.7.3 2024-04-08 00:11:03 +02:00
Martin Matuska 62c8caf661 Revert "zip: update AppleDouble support for directories (#2100)"
This reverts commit 390d83012f.
PR reopened back for review.
2024-04-03 11:15:22 +02:00
Martin Matuska 04512b5b89 ci: use liblzma 1.5.5 in MSVC build until fix from upstream (#2105)
Signed-off-by: Duncan Horn
2024-04-01 19:44:24 +02:00
Martin Matuska 2b12cb429c cmake: look for libxml2 only if HAVE_ICONV is set (#2105)
Signed-off-by: Duncan Horn
2024-04-01 19:43:52 +02:00