Commit Graph
100 Commits
Author SHA1 Message Date
Martin Matuska ded82291ab Release 3.8.7 2026-04-13 11:00:33 +02:00
Martin Matuska 3a9249b4ee Release 3.8.6 2026-03-10 09:37:45 +01:00
Martin Matuska dd897a78c6 Release 3.8.5 2026-01-05 10:49:24 +01:00
Martin Matuška 1835ca5f03 Merge pull request #2781 from AZero13/ints
Remove unneeded int cast

(cherry picked from commit 3cd503b75a)
2026-01-05 10:44:15 +01:00
Martin Matuška 1decf414b0 Merge pull request #2836 from ngie-eign/add-freebsd-15-cirrus-ci
Expand the test matrix to include 15.x images/ZFS

(cherry picked from commit 02eba33825)
2026-01-05 10:43:57 +01:00
Martin Matuška c8ea1e5da2 Merge pull request #2813 from AZero13/memcpy
We copy from p, not p + module_len

(cherry picked from commit b2d68e2f1a)
2025-12-26 10:23:58 +01:00
Martin Matuška 2805282a16 Merge pull request #2796 from vcoxvco/fix_unninit
libarchive/archive_util.c: Uninitialized variable

(cherry picked from commit 1cd0b9179c)
2025-12-25 10:21:28 +01:00
Martin Matuška bec0337316 Merge pull request #2816 from AZero13/strdup
Error check strdup for path name

(cherry picked from commit 095609e89b)
2025-12-25 10:21:22 +01:00
Martin Matuška 2d0d2311d3 Merge pull request #2814 from AZero13/gname
uname_override checks gname_override when it should check uname_override

(cherry picked from commit 5c84afd664)
2025-12-25 10:21:17 +01:00
Martin Matuška 8216512c8e Merge pull request #2789 from libarchive/dependabot/github_actions/all-actions-50b857948b
CI: Bump the all-actions group across 1 directory with 3 updates
(cherry picked from commit f366e98107)
2025-12-25 10:21:12 +01:00
Martin Matuška 8eda7c5277 Merge pull request #2815 from AZero13/=
Use >=, not =>

(cherry picked from commit c4597a73f3)
2025-12-25 10:21:06 +01:00
Martin Matuška 2b8c75323d Merge pull request #2819 from GabrielBarrantes/work/typos
Improve wording

(cherry picked from commit 8042630d4f)
2025-12-25 09:59:46 +01:00
Martin Matuška ab14459373 Merge pull request #2820 from skypher/oss-fuzz-expansion
Expand OSS-Fuzz integration: 1 → 25 fuzz targets

(cherry picked from commit 214ee3edc7)
2025-12-25 09:59:41 +01:00
Martin Matuška e108f0dfab Merge pull request #2809 from mmatuska/fix/2787
tar: fix off-bounds read resulting from #2787 (3150539ed)
(cherry picked from commit a7f3b56af6)
2025-12-25 09:59:10 +01:00
Martin Matuska d114ceee6d Release 3.8.4 2025-12-01 13:39:19 +01:00
Martin Matuška 7d94cdaf66 Merge pull request #2800 from mmatuska/fix/freebsdci
CI: use gmake in Cirrus FreeBSD build
(cherry picked from commit 728b43c0c1)
2025-12-01 13:32:53 +01:00
Martin Matuška 2ded466c2a Merge pull request #2797 from mmatuska/fix/treefuncs
Partially revert "Merge pull request #2679 from AZero13/error"

(cherry picked from commit a819cc2829)
2025-11-28 11:47:47 +01:00
Martin Matuska 1368b08875 Release 3.8.3 2025-11-17 20:39:55 +01:00
Martin Matuška 476369f600 Merge pull request #2771 from mostynb/lz4_with_leading_skippable_frames
Support both lz4 and zstd data with leading skippable frames

(cherry picked from commit ce7b3f1c15)
2025-11-17 20:34:26 +01:00
Martin Matuška d59cf5aa65 Merge pull request #2751 from KlaraSystems/des/zip_magic_numbers
Avoid magic numbers in zip support code

(cherry picked from commit dbacda991c)
2025-11-17 20:34:22 +01:00
Martin Matuška ec3bcb46e0 Merge pull request #2752 from KlaraSystems/des/safe-writes-umask
Set umask before testing safe writes

(cherry picked from commit 2caee6a37e)
2025-11-17 20:34:17 +01:00
Martin Matuška f1ad45f513 Merge pull request #2755 from mmatuska/fix/cirrusci
CI: update FreeBSD 14 build environment
(cherry picked from commit d5bd2dfafe)
2025-11-17 20:34:00 +01:00
Martin Matuska 7f53fce04e Release 3.8.2 2025-10-15 23:36:59 +02:00
Martin Matuška 200ae00a12 Merge pull request #2722 from dependabot
CI: Bump the all-actions group across 1 directory with 3 updates

(cherry picked from commit 46fe318edd)
2025-10-11 22:13:37 +02:00
Martin Matuška a6d47272af Merge pull request #2735 from kientzle/kientzle-err.h-conflict
Rename err.h to avoid conflict with system header

(cherry picked from commit ab5cb61f49)
2025-09-23 22:59:50 +02:00
Martin Matuška dc6ea847e1 Merge pull request #2731 from mmatuska/fix/macosci
CI: add workaround for cmake installed from local/pinned tab on GH/MacOS
(cherry picked from commit 38debf6be1)
2025-09-23 22:59:45 +02:00
Martin Matuška ec91352d64 Merge pull request #2732 from mmatuska/fix/safe-dir-over-reg-win
win: add complementary safe writes fix for Windows to 27588eba5 (#2477)
(cherry picked from commit e1dea559c7)
2025-09-23 22:59:40 +02:00
Martin Matuška 1b5e6d4aed Merge pull request #2670 from benoit-pierre/pr/fix_zip_writing_with_zstd_compression_method
zip: fix writing with ZSTD compression
(cherry picked from commit 589659ed7f)
2025-09-23 22:59:30 +02:00
Martin Matuška 927dd43020 Merge pull request #2477 from jrtc27/safe-dir-over-reg
Fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES

(cherry picked from commit 52db141ece)
2025-09-23 22:59:25 +02:00
Martin Matuška 8055fbd321 Merge pull request #2686 from stoeckmann/lseek_win_regression
Fix Windows off_t handling

(cherry picked from commit 3b1100f9a9)
2025-09-23 22:59:21 +02:00
Martin Matuška 044dd73668 Merge pull request #2710 from meecash/CVE-2025-25724-check_strftime_result
Fix CVE-2025-25724 by checking the result of the strftime

(cherry picked from commit 6bd863f612)
2025-09-23 22:59:15 +02:00
Martin Matuška 44681dd67f Merge pull request #2723 from KlaraSystems/des/couldnt-visit
archive_read_disk_posix: Don't pass -1 to a function expecting errno

(cherry picked from commit bf50fe0538)
2025-09-23 22:58:19 +02:00
Martin Matuška ab5ae538f6 Merge pull request #2716 from antekone/bug/GH-2714/infinite-loop/1
RAR5 reader: early fail when file declares data for a dir entry

(cherry picked from commit 2db13f7422)
2025-09-23 22:58:12 +02:00
Martin Matuška 12c8b3f895 Merge pull request #2713 from antekone/bug/GH-2711/crash-when-rr/1
RAR5 reader: fix multiple issues in extra field parsing function

(cherry picked from commit 93f9e93d73)
2025-09-23 22:58:07 +02:00
Martin Matuška 5797a13c1f Merge pull request #2700 from mostynb/avoid_libxml2_deprecation_warnings
xar: avoid libxml2 deprecation warnings
(cherry picked from commit 12ffcef28c)
2025-09-23 22:58:01 +02:00
Martin Matuška 2aaa3389d1 Merge pull request #2659 from stoeckmann/chld
Improve filter process handling

(cherry picked from commit 6effe2ec6b)
2025-09-10 10:15:45 +02:00
Martin Matuška 0d32537a91 Merge pull request #2669 from benoit-pierre/pr/minor_test_related_tweaks
minor test related tweaks

(cherry picked from commit 251f7e839c)
2025-09-10 10:15:07 +02:00
Martin Matuška 7278794021 Merge pull request #2663 from stoeckmann/filename_errpath
open_filename: Free memory on error paths

(cherry picked from commit 47bdf82489)
2025-09-10 10:14:59 +02:00
Martin Matuška 0fadc61d5b Merge pull request #2665 from stoeckmann/read_data_sparse
archive_read_data: Handle sparse holes at end of file correctly

(cherry picked from commit c3be70e071)
2025-09-10 10:14:46 +02:00
Martin Matuška f0020dcb21 Merge pull request #2668 from stoeckmann/7z_oob
7zip: Fix out of boundary access
(cherry picked from commit 9bdc5b82f7)
2025-09-10 10:14:34 +02:00
Martin Matuska 9525f90ca4 Release 3.8.1 2025-06-01 21:26:44 +02:00
Martin Matuška 7a0b0caea1 Merge pull request #2627 from heirecka/do-not-hard-code-pkg-config
Use PKG_CONFIG instead of hard-coded pkg-config

(cherry picked from commit 70978468e9)
2025-05-31 21:40:54 +02:00
Martin Matuška bc2fcdafce Merge pull request #2643 from stoeckmann/tar_pax_sparse
tar: Handle extra bytes after sparse entries
(cherry picked from commit c7b7bd7c0e)
2025-05-31 21:32:50 +02:00
Martin Matuska 70ff28fcf0 Release 3.8.0 2025-05-20 10:35:52 +02:00
Martin Matuska 3128f04f58 7z: fix another out-of-bounds read in 7z SFX archive detection
When looping over program header entries (e_shnum)
we need to increment sec_tbl_offset by e_shentsize
and not by fixed values.

Fixes OSS-Fuzz issue 418349489
2025-05-18 03:07:49 +02:00
Martin Matuska 1667b31d0b 7z: fix out-of-bounds read in 7z self extracting archive detection
Fixes OSS-Fuzz issue 416832167
2025-05-14 16:18:19 +02:00
Martin Matuska 043b6feeef Fix tests added in #2284 (#2387) 2024-10-23 18:47:32 +02:00
Martin Matuska 206df6192c Revert "add --mac-metadata test for --format zip - see #2041 (#2045)"
This reverts commit ea56096020.
2024-10-23 18:45:23 +02:00
Martin Matuska 915c9f83a4 Libarchive 3.8.0dev 2024-09-13 23:13:01 +02:00
Martin Matuska 12ecf8418a Release 3.7.5 2024-09-13 22:20:55 +02:00
Martin Matuska 83e8b0ea8c tests: setenv LANG to en_US.UTF-8 in bsdunzip test_I.c 2024-04-30 11:28:09 +02:00
Martin Matuska 9951b9cd25 Libarchive 3.7.5dev 2024-04-26 12:07:47 +02:00
Martin Matuska 313aa1fa10 Release 3.7.4 2024-04-26 11:22:15 +02:00
Martin Matuska 284ba9539a CI: add "CI" prefix to dependabot commit messages 2024-04-23 16:32:16 +02:00
Martin MatuskaandMostyn Bramley-Moore ab27905ae7 zstd: Implement core detection on Windows
Fixes #2071

Co-authored-by: Mostyn Bramley-Moore <mostyn@antipode.se>
2024-04-23 15:24:31 +02:00
Martin Matuska a69a4537a6 CI: add libxml2 to MacOS test build 2024-04-23 11:51:53 +02:00
Martin Matuska 91ba8ceacf unzip: explicitly set en_US.UTF-8 locale in test_I.c 2024-04-23 07:45:50 +02:00
Martin Matuska d43c39247f tests: fix null format string error in test_compat_lzip.c 2024-04-17 09:16:10 +02:00
Martin Matuska b3be94ba4f Libarchive 3.7.4dev 2024-04-08 12:17:17 +02:00
Martin Matuska 4fcc02d906 Release 3.7.3 2024-04-08 00:11:03 +02:00
Martin Matuska 62c8caf661 Revert "zip: update AppleDouble support for directories (#2100)"
This reverts commit 390d83012f.
PR reopened back for review.
2024-04-03 11:15:22 +02:00
Martin Matuska 04512b5b89 ci: use liblzma 1.5.5 in MSVC build until fix from upstream (#2105)
Signed-off-by: Duncan Horn
2024-04-01 19:44:24 +02:00
Martin Matuska 2b12cb429c cmake: look for libxml2 only if HAVE_ICONV is set (#2105)
Signed-off-by: Duncan Horn
2024-04-01 19:43:52 +02:00
Martin Matuska 2f4f9a7e4f CI: install mingw and set correct path 2023-12-10 01:01:28 +01:00
Martin Matuska 3bd918d92f tests: fix zstd long option test for 32-bit architectures
Fixes #1968
2023-09-12 08:56:20 +02:00
Martin Matuska c8711937f4 Libarchive 3.7.3dev 2023-09-12 00:50:11 +02:00
Martin Matuska 6468cd1f5c Release 3.7.2 2023-09-12 00:01:01 +02:00
Martin Matuska 98f9063f22 CI: update Windows zlib build dependency to 1.3 2023-09-11 22:06:36 +02:00
Martin Matuska 04be21ea4d uudecode filter: free name if already allocated before allocating 2023-08-24 01:15:43 +02:00
Martin Matuska f6775eebcb uudecode filter: add missing check for failed malloc 2023-08-23 09:05:35 +02:00
Martin Matuska 1b4e0d0f9d pax writer: fix multiple security vulnerabilities
Security vulnerabilities:
1. Heap overflow in url_encode() in archive_write_set_format_pax.c
2. NULL dereference in archive_write_pax_header_xattrs()
3. Another NULL dereference in archive_write_pax_header_xattrs()
4. NULL dereference in archive_write_pax_header_xattr()

The vulnerabilities can be triggered when writing pax archives
with extended attributes (SCHILY or LIBARCHIVE) by feeding attribute
names longer than INT_MAX or attribute names that fail to be encoded
properly.

Reported-by: Bahaa Naamneh of Crosspoint Labs
2023-08-18 10:14:25 +02:00
Martin Matuska 05c86f9c75 CI: update Windows build dependencies
Update zlib to 1.2.13, xz to 1.4.4 and zstd to 1.5.5
2023-08-15 09:56:09 +02:00
Martin Matuska 5c5a9f2b76 unzip: correctly handle arguments following an -x after zipfile 2023-08-04 00:19:29 +02:00
Martin Matuska 574f6594ce build: add missing HAVE_STRUCT_STATFS to build/cmake/config.h.in
Fixes #1937
2023-08-04 00:18:10 +02:00
Martin Matuska dff77a6783 unzip: correctly define bsdunzip_optind 2023-07-31 13:29:25 +02:00
Martin Matuska 27ca5119f7 unzip: use libarchive-style getopt() implementation 2023-07-31 11:59:39 +02:00
Martin Matuska a8578c0b61 unzip: support --version argument 2023-07-31 02:21:42 +02:00
Martin Matuska 46063a5009 cat: fix references and variable names in cmdline.c 2023-07-30 23:27:45 +02:00
Martin Matuska 0e1e2b926a Libarchive 3.7.2dev 2023-07-29 19:30:12 +02:00
Martin Matuska 0c21691b17 Release 3.7.1 2023-07-29 18:59:32 +02:00
Martin Matuska ee312cfd05 cpio: multiple fixes in list_item_verbose()
Do not call strftime() with NULL timeptr
Adjust uids and gids buffers as cpio_i64toa() may return up to 22 bytes

Fixes #1934
Fixes #1935
2023-07-25 15:20:51 +02:00
Martin Matuska 3cfae35f26 unzip: fix include order in la_getline.c 2023-07-25 14:13:03 +02:00
Martin Matuska 35e3f857f9 build: update config_freebsd.h 2023-07-24 13:43:57 +02:00
Martin Matuska 5397c4ed5c unzip: add NetBSD implementation of getline() if not supported
Fixes #1933
2023-07-24 13:43:48 +02:00
Martin Matuska 78687746c5 unzip: remove optreset from bsdunzip_platform.h 2023-07-24 13:35:33 +02:00
Martin Matuska b55d25506a unzip: fix build without utimensat() or futimens()
Fixes #1919
2023-07-19 09:10:36 +02:00
Martin Matuska 852611e3d9 unzip: use libeal port of sys/queue.h if not available
Fixes #1920
2023-07-18 16:56:52 +02:00
Martin Matuska 89712ffa6e unzip: use lchmod() and optreset only if available (fix Android build)
Fixes #1921
2023-07-18 15:42:14 +02:00
Martin Matuska a122717ffc Libarchive 3.7.1dev 2023-07-18 09:29:44 +02:00
Martin Matuska ee45796171 Release 3.7.0 2023-07-18 08:30:36 +02:00
Martin Matuska ab8a7738e0 CI: use two make jobs for Cirrus CI FreeBSD builds 2023-07-17 11:51:27 +02:00
Martin Matuska ea9271267d bsdunzip_test: fix link against ACL libs in cmake 2023-07-17 11:24:57 +02:00
Martin Matuska 6e444a9fb9 pax writer: depend ustar_max_mtime on size of time_t 2023-07-16 01:34:51 +02:00
Martin Matuska e6c9c0411c CI: use macos-13 in GitHub Actions 2023-07-15 01:35:26 +02:00
Martin Matuska a8b28a0684 build: add mising test archives to Makefile.am 2023-07-15 01:18:26 +02:00
Martin Matuska 607e95bca6 build: fix dist-build in Makefile.am 2023-07-14 20:59:36 +02:00
Martin Matuska c15d0021e2 CI: update apt cache on Ubuntu before build 2023-07-14 20:53:39 +02:00
Martin Matuska 386412e24e unzip: disable build on Windows
Bsdunzip has not been ported to Windows yet.
Add header checks for fcntl.h and sys/queue.h
Add function check for fcntl()
2023-07-14 20:49:31 +02:00
Martin Matuska e3f093af7c CI: ignore directory traversals test nr. 4 on MacOS 2023-07-14 14:44:20 +02:00
Martin Matuska b3f659a78c unzip: fix mtime number error from last commit 2023-07-14 12:39:25 +02:00