Martin Matuska
27cbc78271
Release 3.8.9
2026-07-28 11:14:47 +02:00
Martin Matuska
7219b0134d
Release 3.8.8
2026-06-23 11:11:31 +02:00
Martin Matuška
56f3f5fa0a
Merge pull request #3171 from libarchive/dependabot/github_actions/all-actions-2217aebe03
...
CI: Bump actions/checkout from 6.0.3 to 7.0.0 in the all-actions group
(cherry picked from commit 2b9cacf6e8 )
2026-06-23 11:08:08 +02:00
Martin Matuška
22a288834e
Merge pull request #3172 from stoeckmann/lafe_fnmatch
...
libarchive_fe: Import FreeBSD's fnmatch
(cherry picked from commit 9819bc9370 )
2026-06-23 11:08:04 +02:00
Martin Matuška
be3df30fd2
Merge pull request #2918 from aale24/fix-test-format-newc-race
...
Fix test_format_newc timestamp race condition
(cherry picked from commit ba387256e0 )
2026-06-23 11:06:58 +02:00
Martin Matuška
2fc792ba8f
Merge pull request #3159 from stoeckmann/ckd_size
...
Use checked size_t arithmetic
(cherry picked from commit 2498165482 )
2026-06-23 11:06:46 +02:00
Martin Matuška
35e4a6edc3
Merge pull request #3157 from libarchive/dependabot/github_actions/all-actions-0a5d8bb8fa
...
CI: Bump the all-actions group across 1 directory with 5 updates
(cherry picked from commit ead081b704 )
2026-06-23 11:06:34 +02:00
Martin Matuška
a61b1fe618
Merge pull request #3150 from DHowett/ci/windows-package-dependencies
...
build: windows: get all CI dependencies from a package manager
(cherry picked from commit fc0530d502 )
2026-06-23 11:06:30 +02:00
Martin Matuška
e90bccd387
Merge pull request #3144 from stoeckmann/cab_truncation
...
cab: Improve truncation detection
(cherry picked from commit 26f68fcc6d )
2026-06-23 11:06:14 +02:00
Martin Matuška
fb76871b3f
Merge pull request #3134 from stoeckmann/archive_integer
...
Introduce `archive_integer.h` for checked arithmetic
(cherry picked from commit f6dea9e94b )
2026-06-23 11:06:08 +02:00
Martin Matuška
c11e709cf4
Merge pull request #2967 from bgilbert/deflate
...
Fix `test_write_filter_gzip` on Ubuntu s390x
(cherry picked from commit 983e1edcdd )
2026-06-23 11:01:41 +02:00
Martin Matuška
160540487d
Merge pull request #3131 from stoeckmann/rpm_fsm
...
rpm: Refactor filter
(cherry picked from commit 65eaff4835 )
2026-06-23 11:01:36 +02:00
Martin Matuška
aa622bfdf4
Merge pull request #3128 from stoeckmann/into_fd
...
Improve `archive_read_data_into_fd` with sparse files
(cherry picked from commit 5f8f651fae )
2026-06-23 11:01:31 +02:00
Martin Matuška
a07fbdb415
Merge pull request #3121 from stoeckmann/rar5_bytes_remaining
...
rar5: fix signed integer underflow in bytes_remaining
(cherry picked from commit d9279e464c )
2026-06-23 11:01:25 +02:00
Martin Matuška
b64ebd5ae7
Merge pull request #3120 from stoeckmann/archive_endian
...
Extend `archive_endian.h` usage
(cherry picked from commit b3da16bbf2 )
2026-06-23 11:01:15 +02:00
Martin Matuška
6e9aa8a57e
Merge pull request #3098 from stoeckmann/filter_read_ahead
...
filters: Simplify `__archive_read_filter_ahead` use
(cherry picked from commit a116558eb4 )
2026-06-23 11:01:09 +02:00
Martin Matuška
5b50da71a4
Merge pull request #3119 from stoeckmann/7zip_u32_oflow
...
7zip: Fix range check in get_pe_sfx_offset
(cherry picked from commit f7ec3a2505 )
2026-06-23 11:01:05 +02:00
Martin Matuška
17464ecdb9
Merge pull request #3115 from stoeckmann/gzip_writer_mem
...
gzip: Fix OOB in writer with huge filename
(cherry picked from commit 792c87d5bd )
2026-06-23 11:00:58 +02:00
Martin Matuška
390dd137a4
Merge pull request #3114 from stoeckmann/open_oob
...
Fix OOB in `archive_read_open_filenames_w` on some systems
(cherry picked from commit 7957d6d3b0 )
2026-06-23 11:00:53 +02:00
Martin Matuška
e150c2f417
Merge pull request #3113 from stoeckmann/fflags_strcpy
...
7zip/rar5: Simplify file attribute handling
(cherry picked from commit 5ce5112087 )
2026-06-23 11:00:43 +02:00
Martin Matuška
c93ad88df8
Merge pull request #3108 from stoeckmann/windows_legacy
...
Reduce Windows legacy support
(cherry picked from commit 5c516433ee )
2026-06-23 11:00:39 +02:00
Martin Matuška
6a129f58e9
Merge pull request #3045 from datauwu/iso9660-joliet-patch
...
iso9660: bound duplicate identifier extension placement
(cherry picked from commit 1b080e9c2a )
2026-06-23 10:58:31 +02:00
Martin Matuška
e91dffdc92
Merge pull request #3073 from stoeckmann/lz4_zstd_32
...
lz4/zstd: Fix 32 bit platform endless loop and OOB access during bidding
(cherry picked from commit 6ac02f9521 )
2026-06-23 10:58:26 +02:00
Martin Matuška
71f6b7c1d8
Merge pull request #3091 from yPin9/fix/rar5-consume-remaining
...
rar5: skip unconsumed block bytes before ARCHIVE_RETRY
(cherry picked from commit 9b5c25087e )
2026-06-23 10:58:18 +02:00
Martin Matuška
b4ff77b25e
Merge pull request #3103 from stoeckmann/uu_32_oob
...
uu: Extend range checks to avoid 32 bit OOB
(cherry picked from commit 85ea76b373 )
2026-06-23 10:58:13 +02:00
Martin Matuška
f8588d3447
Merge pull request #2837 from mmatuska/ci-firecracker
...
CI: add FreeBSD 15 build via firecracker VM to GitHub Actions
(cherry picked from commit 93065aac92 )
2026-06-23 10:58:07 +02:00
Martin Matuška
d98369b4e1
Merge pull request #3089 from mostynb/remove_cirrus_ci
...
Remove Cirrus CI setup, it is shutting down in a few days
(cherry picked from commit ebfa344055 )
2026-06-23 10:57:00 +02:00
Martin Matuška
c52da38579
Merge pull request #3093 from stoeckmann/lz4_skip
...
lz4: Improve truncated input stream detection
(cherry picked from commit 66026841b2 )
2026-06-23 10:56:56 +02:00
Martin Matuška
0332996f6f
Merge pull request #3095 from stoeckmann/afio_header
...
cpio: Improve afio header detection
(cherry picked from commit 36d69b3ec8 )
2026-06-23 10:56:53 +02:00
Martin Matuška
2fe2828581
Merge pull request #3096 from stoeckmann/filters_comments
...
filters: Update comments
(cherry picked from commit fcbbce329c )
2026-06-23 10:56:48 +02:00
Martin Matuška
2e97ccd3e5
Merge pull request #3097 from stoeckmann/typos
...
Fix typos in comments and error message
(cherry picked from commit 05eff7d2da )
2026-06-23 10:56:44 +02:00
Martin Matuška
e5acfbd88e
Merge pull request #3099 from stoeckmann/7zip_seek
...
7zip: Extend support for filtered input
(cherry picked from commit 0ebc440d8e )
2026-06-23 10:56:40 +02:00
Martin Matuška
706e2b6783
Merge pull request #3100 from stoeckmann/lz4_xxh32
...
lz4: Check `XXH32_init` result
(cherry picked from commit bb0d9dfd39 )
2026-06-23 10:56:35 +02:00
Martin Matuška
5658b6bba9
Merge pull request #2985 from stoeckmann/7zip_sfx
...
7zip: Harden SFX parser
(cherry picked from commit 740be68fc0 )
2026-06-23 10:17:08 +02:00
Martin Matuška
f1632df055
Merge pull request #2988 from kientzle/kientzle-acl-to-text
...
[archive_acl] Fix buffer overrun and wrong output for NULL-name ACL entries
(cherry picked from commit cf9bc89194 )
2026-06-23 10:16:43 +02:00
Martin Matuška
c883e895ba
Merge pull request #2961 from bgilbert/malformed
...
Add malformed CAB test to Autotools
(cherry picked from commit 2860b2a792 )
2026-06-23 10:00:56 +02:00
Martin Matuška
1c85a09812
Merge pull request #2962 from dag-erling/des/optreset
...
unzip: Remove dead code
test_main: Staticize some variables
(cherry picked from commit fc76727081 )
2026-06-23 10:00:52 +02:00
Martin Matuska
ded82291ab
Release 3.8.7
2026-04-13 11:00:33 +02:00
Martin Matuska
3a9249b4ee
Release 3.8.6
2026-03-10 09:37:45 +01:00
Martin Matuska
dd897a78c6
Release 3.8.5
2026-01-05 10:49:24 +01:00
Martin Matuška
1835ca5f03
Merge pull request #2781 from AZero13/ints
...
Remove unneeded int cast
(cherry picked from commit 3cd503b75a )
2026-01-05 10:44:15 +01:00
Martin Matuška
1decf414b0
Merge pull request #2836 from ngie-eign/add-freebsd-15-cirrus-ci
...
Expand the test matrix to include 15.x images/ZFS
(cherry picked from commit 02eba33825 )
2026-01-05 10:43:57 +01:00
Martin Matuška
c8ea1e5da2
Merge pull request #2813 from AZero13/memcpy
...
We copy from p, not p + module_len
(cherry picked from commit b2d68e2f1a )
2025-12-26 10:23:58 +01:00
Martin Matuška
2805282a16
Merge pull request #2796 from vcoxvco/fix_unninit
...
libarchive/archive_util.c: Uninitialized variable
(cherry picked from commit 1cd0b9179c )
2025-12-25 10:21:28 +01:00
Martin Matuška
bec0337316
Merge pull request #2816 from AZero13/strdup
...
Error check strdup for path name
(cherry picked from commit 095609e89b )
2025-12-25 10:21:22 +01:00
Martin Matuška
2d0d2311d3
Merge pull request #2814 from AZero13/gname
...
uname_override checks gname_override when it should check uname_override
(cherry picked from commit 5c84afd664 )
2025-12-25 10:21:17 +01:00
Martin Matuška
8216512c8e
Merge pull request #2789 from libarchive/dependabot/github_actions/all-actions-50b857948b
...
CI: Bump the all-actions group across 1 directory with 3 updates
(cherry picked from commit f366e98107 )
2025-12-25 10:21:12 +01:00
Martin Matuška
8eda7c5277
Merge pull request #2815 from AZero13/=
...
Use >=, not =>
(cherry picked from commit c4597a73f3 )
2025-12-25 10:21:06 +01:00
Martin Matuška
2b8c75323d
Merge pull request #2819 from GabrielBarrantes/work/typos
...
Improve wording
(cherry picked from commit 8042630d4f )
2025-12-25 09:59:46 +01:00
Martin Matuška
ab14459373
Merge pull request #2820 from skypher/oss-fuzz-expansion
...
Expand OSS-Fuzz integration: 1 → 25 fuzz targets
(cherry picked from commit 214ee3edc7 )
2025-12-25 09:59:41 +01:00
Martin Matuška
e108f0dfab
Merge pull request #2809 from mmatuska/fix/2787
...
tar: fix off-bounds read resulting from #2787 (3150539ed )
(cherry picked from commit a7f3b56af6 )
2025-12-25 09:59:10 +01:00
Martin Matuska
d114ceee6d
Release 3.8.4
2025-12-01 13:39:19 +01:00
Martin Matuška
7d94cdaf66
Merge pull request #2800 from mmatuska/fix/freebsdci
...
CI: use gmake in Cirrus FreeBSD build
(cherry picked from commit 728b43c0c1 )
2025-12-01 13:32:53 +01:00
Martin Matuška
2ded466c2a
Merge pull request #2797 from mmatuska/fix/treefuncs
...
Partially revert "Merge pull request #2679 from AZero13/error"
(cherry picked from commit a819cc2829 )
2025-11-28 11:47:47 +01:00
Martin Matuska
1368b08875
Release 3.8.3
2025-11-17 20:39:55 +01:00
Martin Matuška
476369f600
Merge pull request #2771 from mostynb/lz4_with_leading_skippable_frames
...
Support both lz4 and zstd data with leading skippable frames
(cherry picked from commit ce7b3f1c15 )
2025-11-17 20:34:26 +01:00
Martin Matuška
d59cf5aa65
Merge pull request #2751 from KlaraSystems/des/zip_magic_numbers
...
Avoid magic numbers in zip support code
(cherry picked from commit dbacda991c )
2025-11-17 20:34:22 +01:00
Martin Matuška
ec3bcb46e0
Merge pull request #2752 from KlaraSystems/des/safe-writes-umask
...
Set umask before testing safe writes
(cherry picked from commit 2caee6a37e )
2025-11-17 20:34:17 +01:00
Martin Matuška
f1ad45f513
Merge pull request #2755 from mmatuska/fix/cirrusci
...
CI: update FreeBSD 14 build environment
(cherry picked from commit d5bd2dfafe )
2025-11-17 20:34:00 +01:00
Martin Matuska
7f53fce04e
Release 3.8.2
2025-10-15 23:36:59 +02:00
Martin Matuška
200ae00a12
Merge pull request #2722 from dependabot
...
CI: Bump the all-actions group across 1 directory with 3 updates
(cherry picked from commit 46fe318edd )
2025-10-11 22:13:37 +02:00
Martin Matuška
a6d47272af
Merge pull request #2735 from kientzle/kientzle-err.h-conflict
...
Rename err.h to avoid conflict with system header
(cherry picked from commit ab5cb61f49 )
2025-09-23 22:59:50 +02:00
Martin Matuška
dc6ea847e1
Merge pull request #2731 from mmatuska/fix/macosci
...
CI: add workaround for cmake installed from local/pinned tab on GH/MacOS
(cherry picked from commit 38debf6be1 )
2025-09-23 22:59:45 +02:00
Martin Matuška
ec91352d64
Merge pull request #2732 from mmatuska/fix/safe-dir-over-reg-win
...
win: add complementary safe writes fix for Windows to 27588eba5 (#2477 )
(cherry picked from commit e1dea559c7 )
2025-09-23 22:59:40 +02:00
Martin Matuška
1b5e6d4aed
Merge pull request #2670 from benoit-pierre/pr/fix_zip_writing_with_zstd_compression_method
...
zip: fix writing with ZSTD compression
(cherry picked from commit 589659ed7f )
2025-09-23 22:59:30 +02:00
Martin Matuška
927dd43020
Merge pull request #2477 from jrtc27/safe-dir-over-reg
...
Fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES
(cherry picked from commit 52db141ece )
2025-09-23 22:59:25 +02:00
Martin Matuška
8055fbd321
Merge pull request #2686 from stoeckmann/lseek_win_regression
...
Fix Windows off_t handling
(cherry picked from commit 3b1100f9a9 )
2025-09-23 22:59:21 +02:00
Martin Matuška
044dd73668
Merge pull request #2710 from meecash/CVE-2025-25724-check_strftime_result
...
Fix CVE-2025-25724 by checking the result of the strftime
(cherry picked from commit 6bd863f612 )
2025-09-23 22:59:15 +02:00
Martin Matuška
44681dd67f
Merge pull request #2723 from KlaraSystems/des/couldnt-visit
...
archive_read_disk_posix: Don't pass -1 to a function expecting errno
(cherry picked from commit bf50fe0538 )
2025-09-23 22:58:19 +02:00
Martin Matuška
ab5ae538f6
Merge pull request #2716 from antekone/bug/GH-2714/infinite-loop/1
...
RAR5 reader: early fail when file declares data for a dir entry
(cherry picked from commit 2db13f7422 )
2025-09-23 22:58:12 +02:00
Martin Matuška
12c8b3f895
Merge pull request #2713 from antekone/bug/GH-2711/crash-when-rr/1
...
RAR5 reader: fix multiple issues in extra field parsing function
(cherry picked from commit 93f9e93d73 )
2025-09-23 22:58:07 +02:00
Martin Matuška
5797a13c1f
Merge pull request #2700 from mostynb/avoid_libxml2_deprecation_warnings
...
xar: avoid libxml2 deprecation warnings
(cherry picked from commit 12ffcef28c )
2025-09-23 22:58:01 +02:00
Martin Matuška
2aaa3389d1
Merge pull request #2659 from stoeckmann/chld
...
Improve filter process handling
(cherry picked from commit 6effe2ec6b )
2025-09-10 10:15:45 +02:00
Martin Matuška
0d32537a91
Merge pull request #2669 from benoit-pierre/pr/minor_test_related_tweaks
...
minor test related tweaks
(cherry picked from commit 251f7e839c )
2025-09-10 10:15:07 +02:00
Martin Matuška
7278794021
Merge pull request #2663 from stoeckmann/filename_errpath
...
open_filename: Free memory on error paths
(cherry picked from commit 47bdf82489 )
2025-09-10 10:14:59 +02:00
Martin Matuška
0fadc61d5b
Merge pull request #2665 from stoeckmann/read_data_sparse
...
archive_read_data: Handle sparse holes at end of file correctly
(cherry picked from commit c3be70e071 )
2025-09-10 10:14:46 +02:00
Martin Matuška
f0020dcb21
Merge pull request #2668 from stoeckmann/7z_oob
...
7zip: Fix out of boundary access
(cherry picked from commit 9bdc5b82f7 )
2025-09-10 10:14:34 +02:00
Martin Matuska
9525f90ca4
Release 3.8.1
2025-06-01 21:26:44 +02:00
Martin Matuška
7a0b0caea1
Merge pull request #2627 from heirecka/do-not-hard-code-pkg-config
...
Use PKG_CONFIG instead of hard-coded pkg-config
(cherry picked from commit 70978468e9 )
2025-05-31 21:40:54 +02:00
Martin Matuška
bc2fcdafce
Merge pull request #2643 from stoeckmann/tar_pax_sparse
...
tar: Handle extra bytes after sparse entries
(cherry picked from commit c7b7bd7c0e )
2025-05-31 21:32:50 +02:00
Martin Matuska
70ff28fcf0
Release 3.8.0
2025-05-20 10:35:52 +02:00
Martin Matuska
3128f04f58
7z: fix another out-of-bounds read in 7z SFX archive detection
...
When looping over program header entries (e_shnum)
we need to increment sec_tbl_offset by e_shentsize
and not by fixed values.
Fixes OSS-Fuzz issue 418349489
2025-05-18 03:07:49 +02:00
Martin Matuska
1667b31d0b
7z: fix out-of-bounds read in 7z self extracting archive detection
...
Fixes OSS-Fuzz issue 416832167
2025-05-14 16:18:19 +02:00
Martin Matuska
043b6feeef
Fix tests added in #2284 ( #2387 )
2024-10-23 18:47:32 +02:00
Martin Matuska
206df6192c
Revert "add --mac-metadata test for --format zip - see #2041 ( #2045 )"
...
This reverts commit ea56096020 .
2024-10-23 18:45:23 +02:00
Martin Matuska
915c9f83a4
Libarchive 3.8.0dev
2024-09-13 23:13:01 +02:00
Martin Matuska
12ecf8418a
Release 3.7.5
2024-09-13 22:20:55 +02:00
Martin Matuska
83e8b0ea8c
tests: setenv LANG to en_US.UTF-8 in bsdunzip test_I.c
2024-04-30 11:28:09 +02:00
Martin Matuska
9951b9cd25
Libarchive 3.7.5dev
2024-04-26 12:07:47 +02:00
Martin Matuska
313aa1fa10
Release 3.7.4
2024-04-26 11:22:15 +02:00
Martin Matuska
284ba9539a
CI: add "CI" prefix to dependabot commit messages
2024-04-23 16:32:16 +02:00
Martin Matuska and Mostyn Bramley-Moore
ab27905ae7
zstd: Implement core detection on Windows
...
Fixes #2071
Co-authored-by: Mostyn Bramley-Moore <mostyn@antipode.se >
2024-04-23 15:24:31 +02:00
Martin Matuska
a69a4537a6
CI: add libxml2 to MacOS test build
2024-04-23 11:51:53 +02:00
Martin Matuska
91ba8ceacf
unzip: explicitly set en_US.UTF-8 locale in test_I.c
2024-04-23 07:45:50 +02:00
Martin Matuska
d43c39247f
tests: fix null format string error in test_compat_lzip.c
2024-04-17 09:16:10 +02:00
Martin Matuska
b3be94ba4f
Libarchive 3.7.4dev
2024-04-08 12:17:17 +02:00
Martin Matuska
4fcc02d906
Release 3.7.3
2024-04-08 00:11:03 +02:00
Martin Matuska
62c8caf661
Revert "zip: update AppleDouble support for directories ( #2100 )"
...
This reverts commit 390d83012f .
PR reopened back for review.
2024-04-03 11:15:22 +02:00
Martin Matuska
04512b5b89
ci: use liblzma 1.5.5 in MSVC build until fix from upstream ( #2105 )
...
Signed-off-by: Duncan Horn
2024-04-01 19:44:24 +02:00
Martin Matuska
2b12cb429c
cmake: look for libxml2 only if HAVE_ICONV is set ( #2105 )
...
Signed-off-by: Duncan Horn
2024-04-01 19:43:52 +02:00