github-mirror/libarchive
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,720 Commits 6 Branches 59 Tags
70ff28fcf04ec129a1d064f96e49aa57fcc90e37
Commit Graph
81 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Matuska 70ff28fcf0 Release 3.8.0 2025-05-20 10:35:52 +02:00
Martin Matuska 3128f04f58 7z: fix another out-of-bounds read in 7z SFX archive detection 
When looping over program header entries (e_shnum)
we need to increment sec_tbl_offset by e_shentsize
and not by fixed values.

Fixes OSS-Fuzz issue 418349489
 2025-05-18 03:07:49 +02:00
Martin Matuska 1667b31d0b 7z: fix out-of-bounds read in 7z self extracting archive detection 
Fixes OSS-Fuzz issue 416832167
 2025-05-14 16:18:19 +02:00
Martin Matuska 043b6feeef Fix tests added in #2284 (#2387) 2024-10-23 18:47:32 +02:00
Martin Matuska 206df6192c Revert "add --mac-metadata test for --format zip - see #2041 (#2045)" 
This reverts commit ea56096020.
 2024-10-23 18:45:23 +02:00
Martin Matuska 915c9f83a4 Libarchive 3.8.0dev 2024-09-13 23:13:01 +02:00
Martin Matuska 12ecf8418a Release 3.7.5 2024-09-13 22:20:55 +02:00
Martin Matuska 83e8b0ea8c tests: setenv LANG to en_US.UTF-8 in bsdunzip test_I.c 2024-04-30 11:28:09 +02:00
Martin Matuska 9951b9cd25 Libarchive 3.7.5dev 2024-04-26 12:07:47 +02:00
Martin Matuska 313aa1fa10 Release 3.7.4 2024-04-26 11:22:15 +02:00
Martin Matuska 284ba9539a CI: add "CI" prefix to dependabot commit messages 2024-04-23 16:32:16 +02:00
Martin MatuskaandMostyn Bramley-Moore ab27905ae7 zstd: Implement core detection on Windows 
Fixes #2071

Co-authored-by: Mostyn Bramley-Moore <mostyn@antipode.se>
 2024-04-23 15:24:31 +02:00
Martin Matuska a69a4537a6 CI: add libxml2 to MacOS test build 2024-04-23 11:51:53 +02:00
Martin Matuska 91ba8ceacf unzip: explicitly set en_US.UTF-8 locale in test_I.c 2024-04-23 07:45:50 +02:00
Martin Matuska d43c39247f tests: fix null format string error in test_compat_lzip.c 2024-04-17 09:16:10 +02:00
Martin Matuska b3be94ba4f Libarchive 3.7.4dev 2024-04-08 12:17:17 +02:00
Martin Matuska 4fcc02d906 Release 3.7.3 2024-04-08 00:11:03 +02:00
Martin Matuska 62c8caf661 Revert "zip: update AppleDouble support for directories (#2100)" 
This reverts commit 390d83012f.
PR reopened back for review.
 2024-04-03 11:15:22 +02:00
Martin Matuska 04512b5b89 ci: use liblzma 1.5.5 in MSVC build until fix from upstream (#2105) 
Signed-off-by: Duncan Horn
 2024-04-01 19:44:24 +02:00
Martin Matuska 2b12cb429c cmake: look for libxml2 only if HAVE_ICONV is set (#2105) 
Signed-off-by: Duncan Horn
 2024-04-01 19:43:52 +02:00
Martin Matuska 2f4f9a7e4f CI: install mingw and set correct path 2023-12-10 01:01:28 +01:00
Martin Matuska 3bd918d92f tests: fix zstd long option test for 32-bit architectures 
Fixes #1968
 2023-09-12 08:56:20 +02:00
Martin Matuska c8711937f4 Libarchive 3.7.3dev 2023-09-12 00:50:11 +02:00
Martin Matuska 6468cd1f5c Release 3.7.2 2023-09-12 00:01:01 +02:00
Martin Matuska 98f9063f22 CI: update Windows zlib build dependency to 1.3 2023-09-11 22:06:36 +02:00
Martin Matuska 04be21ea4d uudecode filter: free name if already allocated before allocating 2023-08-24 01:15:43 +02:00
Martin Matuska f6775eebcb uudecode filter: add missing check for failed malloc 2023-08-23 09:05:35 +02:00
Martin Matuska 1b4e0d0f9d pax writer: fix multiple security vulnerabilities 
Security vulnerabilities:
1. Heap overflow in url_encode() in archive_write_set_format_pax.c
2. NULL dereference in archive_write_pax_header_xattrs()
3. Another NULL dereference in archive_write_pax_header_xattrs()
4. NULL dereference in archive_write_pax_header_xattr()

The vulnerabilities can be triggered when writing pax archives
with extended attributes (SCHILY or LIBARCHIVE) by feeding attribute
names longer than INT_MAX or attribute names that fail to be encoded
properly.

Reported-by: Bahaa Naamneh of Crosspoint Labs
 2023-08-18 10:14:25 +02:00
Martin Matuska 05c86f9c75 CI: update Windows build dependencies 
Update zlib to 1.2.13, xz to 1.4.4 and zstd to 1.5.5
 2023-08-15 09:56:09 +02:00
Martin Matuska 5c5a9f2b76 unzip: correctly handle arguments following an -x after zipfile 2023-08-04 00:19:29 +02:00
Martin Matuska 574f6594ce build: add missing HAVE_STRUCT_STATFS to build/cmake/config.h.in 
Fixes #1937
 2023-08-04 00:18:10 +02:00
Martin Matuska dff77a6783 unzip: correctly define bsdunzip_optind 2023-07-31 13:29:25 +02:00
Martin Matuska 27ca5119f7 unzip: use libarchive-style getopt() implementation 2023-07-31 11:59:39 +02:00
Martin Matuska a8578c0b61 unzip: support --version argument 2023-07-31 02:21:42 +02:00
Martin Matuska 46063a5009 cat: fix references and variable names in cmdline.c 2023-07-30 23:27:45 +02:00
Martin Matuska 0e1e2b926a Libarchive 3.7.2dev 2023-07-29 19:30:12 +02:00
Martin Matuska 0c21691b17 Release 3.7.1 2023-07-29 18:59:32 +02:00
Martin Matuska ee312cfd05 cpio: multiple fixes in list_item_verbose() 
Do not call strftime() with NULL timeptr
Adjust uids and gids buffers as cpio_i64toa() may return up to 22 bytes

Fixes #1934
Fixes #1935
 2023-07-25 15:20:51 +02:00
Martin Matuska 3cfae35f26 unzip: fix include order in la_getline.c 2023-07-25 14:13:03 +02:00
Martin Matuska 35e3f857f9 build: update config_freebsd.h 2023-07-24 13:43:57 +02:00
Martin Matuska 5397c4ed5c unzip: add NetBSD implementation of getline() if not supported 
Fixes #1933
 2023-07-24 13:43:48 +02:00
Martin Matuska 78687746c5 unzip: remove optreset from bsdunzip_platform.h 2023-07-24 13:35:33 +02:00
Martin Matuska b55d25506a unzip: fix build without utimensat() or futimens() 
Fixes #1919
 2023-07-19 09:10:36 +02:00
Martin Matuska 852611e3d9 unzip: use libeal port of sys/queue.h if not available 
Fixes #1920
 2023-07-18 16:56:52 +02:00
Martin Matuska 89712ffa6e unzip: use lchmod() and optreset only if available (fix Android build) 
Fixes #1921
 2023-07-18 15:42:14 +02:00
Martin Matuska a122717ffc Libarchive 3.7.1dev 2023-07-18 09:29:44 +02:00
Martin Matuska ee45796171 Release 3.7.0 2023-07-18 08:30:36 +02:00
Martin Matuska ab8a7738e0 CI: use two make jobs for Cirrus CI FreeBSD builds 2023-07-17 11:51:27 +02:00
Martin Matuska ea9271267d bsdunzip_test: fix link against ACL libs in cmake 2023-07-17 11:24:57 +02:00
Martin Matuska 6e444a9fb9 pax writer: depend ustar_max_mtime on size of time_t 2023-07-16 01:34:51 +02:00
Martin Matuska e6c9c0411c CI: use macos-13 in GitHub Actions 2023-07-15 01:35:26 +02:00
Martin Matuska a8b28a0684 build: add mising test archives to Makefile.am 2023-07-15 01:18:26 +02:00
Martin Matuska 607e95bca6 build: fix dist-build in Makefile.am 2023-07-14 20:59:36 +02:00
Martin Matuska c15d0021e2 CI: update apt cache on Ubuntu before build 2023-07-14 20:53:39 +02:00
Martin Matuska 386412e24e unzip: disable build on Windows 
Bsdunzip has not been ported to Windows yet.
Add header checks for fcntl.h and sys/queue.h
Add function check for fcntl()
 2023-07-14 20:49:31 +02:00
Martin Matuska e3f093af7c CI: ignore directory traversals test nr. 4 on MacOS 2023-07-14 14:44:20 +02:00
Martin Matuska b3f659a78c unzip: fix mtime number error from last commit 2023-07-14 12:39:25 +02:00
Martin Matuska 0615587a45 unzip: fix multi-platform handling of stat mtime 2023-07-14 12:36:03 +02:00
Martin Matuska 96b689a304 CI: fix debug build with cmake 2023-07-14 11:04:51 +02:00
Martin Matuska d3d16ec25d build: fix cmake build with OpenSSL 2023-07-14 11:01:58 +02:00
Martin Matuska 26b641ddb2 tests: fix exit on failed realloc in libarchive/test/test_fuzz.c 2023-07-14 09:53:13 +02:00
Martin Matuska 27b23ce00b unzip: fix EXTRA_VERSION macro in unzip/test/test.h 2023-07-14 09:52:24 +02:00
Martin Matuska d5ca0d1153 build: fix cmake build with Mbed TLS 2023-07-14 09:51:28 +02:00
Martin Matuska 996cf87add Fix call to setenv() in unzip/bsdunzip.c 2023-07-14 08:52:06 +02:00
Martin Matuska 28176a904f Fix missing endif in libarchive/archive_random.c 2023-07-14 08:50:06 +02:00
Martin Matuska 3da2fb7ee2 Libarchive 3.6.3dev 2022-12-09 16:13:56 +01:00
Martin Matuska ba80276ccc Release 3.6.2 2022-12-09 14:28:16 +01:00
Martin Matuska 4dc5962910 archive_hmac: use EVP_MAC_*() in OpenSSL 3.0 
HMAC_*() functions have been deprecated since OpenSSL 3.0
 2022-12-09 14:26:20 +01:00
Martin Matuska 9add75fa40 CI: update Ubuntu to 22.04 and MacOS to 12 2022-12-09 13:04:45 +01:00
Martin Matuska e2f7c1dcb9 archive_read_support_format_tar: avoid always-true comparsion 
Reported by: GitHub CodeQL
Code Scanning Alert: 125
 2022-12-08 16:30:10 +01:00
Martin Matuska 09b2d329bf test_sparse_basic: avoid always-true comparsion 
Reported by: CodeQL
Code Scanning Alert: 126
 2022-12-08 16:27:00 +01:00
Martin Matuska 0eac3985f0 test_main.c: omit always-true comparsion 
Reported by: CodeQL
Code Scanning Alert: 127
 2022-12-08 16:26:37 +01:00
Martin Matuska 31d08b5009 test_read_format_rar5: correctly use verify_data() 
Reported by: CodeQL
Code Scanning Alert: 129
 2022-12-08 16:10:46 +01:00
Martin Matuska b86647a85d mtree reader: check __archive_rb_tree_find_node() for NULL return 
Reported by: GitHub CodeQL
Code Scanning Alert: 190
 2022-12-08 16:07:07 +01:00
Martin Matuska 92d2835fed archive_read_disk_posix: fail if unable to alocate memory in tree_push() 
Reported by: GitHub CodeQL
Code Scanning Alert: 189
 2022-12-08 16:05:53 +01:00
Martin Matuska 186116ce9a various: fix unitialized local variables 
Reported by: GitHub CodeQL
Code scanning alerts: 214, 215, 216
 2022-12-08 15:08:14 +01:00
Martin Matuska 0d7cc9a041 tests: silence localtime() CodeQL warnings 
Use localtime_r() or _localtime64_s() if available
 2022-12-08 00:24:33 +01:00
Martin Matuska 673d82c57c tests: silence more CodeQL warnings in test_utils/test_main.c 
Catch one more uncatched strcpy() and strcat()
 2022-12-08 00:04:54 +01:00
Martin Matuska 43e1fe8e30 tests: silence some CodeQL warnings in test_utils/test_main.c 
Use fchmod() instead of chmod() if available
Use strncpy() and strncat() instead of strcpy() and strcat()
 2022-12-07 16:11:56 +01:00
Martin Matuska 46627c05ad tests: silence CodeQL warning in tar/test_option_b 
Use strncpy() and strncat() instead of strcpy() and strcat()
 2022-12-07 16:01:26 +01:00
Martin Matuska 82e5c297d1 cab reader: cast to int when subtracting unsigned integers 
Found by: GitHub CodeQL
 2022-12-07 15:52:54 +01:00