|
1a31123c
|
2025-10-27T08:59:37
|
|
accept options host and target
|
|
d29b954d
|
2025-10-26T20:47:05
|
|
fix bashisms
|
|
51b7f2ab
|
2024-01-22T10:14:31
|
|
zlib 1.3.1
|
|
1a8db637
|
2024-01-22T05:54:21
|
|
Move the load flags before the object files in Makefile tests.
|
|
2e3d86c4
|
2018-03-26T18:19:39
|
|
Add target include directories to CMakeLists.txt.
This enables the addition of zlib to other projects.
|
|
c06dfecb
|
2024-01-21T09:24:10
|
|
Use Makefile compiler for minizip-test target.
|
|
88ec2467
|
2024-01-20T18:29:31
|
|
Remove -w compile option in configure test.
Not all C compilers have a -w option.
|
|
9404df5a
|
2020-05-22T14:35:01
|
|
Use updated zconf.h when building out of directory with configure.
|
|
84f0bafd
|
2024-01-19T15:26:17
|
|
Remove carriage returns from zlib.map.
|
|
7af6320a
|
2024-01-19T12:19:53
|
|
Fix a bug in ZLIB_DEBUG compiles in check_match().
This avoids trying to compare a match starting one byte before the
current window. Thanks to @zmodem (Hans) for discovering this.
|
|
7b632b48
|
2024-01-19T10:09:32
|
|
Revert "Add a CMake option to link the C runtime statically."
This reverts commit 44dc43ab047d65febed972a17b0e3bf7e994e8f2.
|
|
3f635df9
|
2024-01-17T18:20:32
|
|
Remove unused Z_ARG macro.
|
|
ade6825c
|
2022-09-30T16:04:19
|
|
Fix cmake build on AIX.
The --version-script linker option is not supported by the linker on AIX systems
|
|
25263462
|
2024-01-17T17:19:03
|
|
Remove mentions of an official zlib DLL distribution.
There used to be one, but no more. It is up to the user or vendor
to compile zlib.
|
|
fe41d189
|
2023-08-06T13:56:45
|
|
Correct typos in source code.
|
|
01253ecd
|
2023-10-09T17:04:51
|
|
Make the existence of gz_intmax() unconditional.
gz_intmax() is noted in zlib.map. This assures it's always there.
|
|
6201f893
|
2017-02-10T18:37:09
|
|
Add cmake option to control the build of the example executables.
|
|
14a5f8f2
|
2024-01-17T14:46:18
|
|
Neutralize zip file traversal attacks in miniunz.
Archive formats such as .zip files are generally susceptible to
so-called "traversal attacks". This allows an attacker to craft
an archive that writes to unexpected locations of the file system
(e.g., /etc/shadow) if an unspecting root user were to unpack a
malicious archive.
This patch neutralizes absolute paths such as /tmp/moo and deeply
relative paths such as dummy/../../../../../../../../../../tmp/moo
The Debian project requested CVE-2014-9485 be allocated for the
first identified weakness. The fix was incomplete, resulting in a
revised patch applied here. Since there wasn't an updated version
released by Debian with the incomplete fix, I suggest we use this
CVE to identify both issues.
Link: https://security.snyk.io/research/zip-slip-vulnerability
Link: https://bugs.debian.org/774321
Link: https://bugs.debian.org/776831
Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485
Reported-by: Jakub Wilk <jwilk@debian.org>
Fixed-by: Michael Gilbert <mgilbert@debian.org>
|
|
44dc43ab
|
2023-11-19T21:39:14
|
|
Add a CMake option to link the C runtime statically.
|
|
01155ccc
|
2023-12-02T16:56:47
|
|
Fix random typos over several source and text files.
|
|
16799d06
|
2023-12-11T11:32:09
|
|
Fix "the the" in examples/gzlog.c.
|
|
190168cc
|
2023-12-11T11:47:43
|
|
Correct case of MSDOS in contrib/minizip/miniunz.c.
|
|
762cf49e
|
2023-12-11T12:01:52
|
|
Refer to correct function in contrib/minizip/unzip.c comment.
|
|
36e369e1
|
2024-01-11T12:53:58
|
|
Note that the len2 argument of crc_combine*() must be non-negative.
If it is negative, then the code will enter an infinite loop.
|
|
60c31985
|
2023-12-20T12:26:25
|
|
Fix the copy of pending_buf in deflateCopy() for the LIT_MEM case.
|
|
ee474ff2
|
2023-12-15T15:10:19
|
|
Fix pending buffer overflow assert with LIT_MEM allocation.
Since each element in s->d_buf is 2 bytes, the sx index should be
multiplied by 2 in the assert.
Fixes #897
|
|
4bd9a71f
|
2023-12-12T22:19:05
|
|
Remove fdopen #defines in zutil.h.
fdopen() is not used by zlib anymore. The #defines are vestigial.
|
|
431a9b65
|
2023-12-07T06:38:10
|
|
Add bounds checking to ERR_MSG() macro, used by zError().
|
|
643e17b7
|
2023-11-14T16:23:02
|
|
Correct repeated words in source file comments and a readme.
|
|
15c45adb
|
2023-11-07T15:46:41
|
|
Fix decision on the emission of Zip64 end records in minizip.
The appnote says that if the number of entries in the end record
is 0xffff, then the actual number of entries will be found in the
Zip64 end record. Therefore if the number of entries is equal to
0xffff, it can't be in the end record by itself, since that is an
instruction to get the number from the Zip64 end record. This code
would just store 0xffff in the end record in that case, not making
a Zip64 end record. This commit fixes that.
|
|
ac8f12c9
|
2023-09-18T21:17:00
|
|
Add LIT_MEM define to use more memory for a small deflate speedup.
A bug fix in zlib 1.2.12 resulted in a slight slowdown (1-2%) of
deflate. This commit provides the option to #define LIT_MEM, which
uses more memory to reverse most of that slowdown. The memory for
the pending buffer and symbol buffers is increased by 25%, which
increases the total memory usage with the default parameters by
about 6%.
|
|
bd9c329c
|
2023-09-03T13:10:10
|
|
Make internal functions static in the test code.
To avoid warnings when building with -Wmissing-prototypes.
|
|
5af7cef4
|
2023-08-24T02:14:23
|
|
Fix bug in inflateSync() for data held in bit buffer.
|
|
88e50f17
|
2016-11-15T21:04:58
|
|
Update miniunz version.
|
|
79a0e447
|
2023-08-19T23:17:29
|
|
Update version and date in contrib/nuget.
|
|
8988e032
|
2023-08-19T17:13:12
|
|
Update version numbers and year in contrib/vstudio/vc17.
|
|
7192d692
|
2023-08-19T17:07:35
|
|
Update vc directory in contrib/nuget.
|
|
60bfe641
|
2023-08-19T12:13:00
|
|
Rename contrib/vstudio/vc143 to vc17.
This makes it consistent with the other vstudio projects, which
use the version number.
|
|
73331a6a
|
2023-08-18T11:05:33
|
|
Reject overflows of zip header fields in minizip.
This checks the lengths of the file name, extra field, and comment
that would be put in the zip headers, and rejects them if they are
too long. They are each limited to 65535 bytes in length by the zip
format. This also avoids possible buffer overflows if the provided
fields are too long.
|
|
726e1894
|
2023-08-19T11:06:23
|
|
Remove Windows ARM and ARM64 builds from cmake workflow.
They were added in the VS2022 commit, but failed when run.
|
|
4a47c1bf
|
2022-10-25T00:35:43
|
|
Add project and solution files for building a nuget package.
|
|
d7de5971
|
2022-10-24T16:59:27
|
|
Add VS2022 project files.
Also replaced Itanium with ARM and ARM64 configurations.
|
|
4c5a81c2
|
2023-08-19T10:43:36
|
|
Remove carriage returns from contrib/vstudio/readme.txt.
|
|
0f68a0d8
|
2023-08-18T16:17:04
|
|
Limit the length of Darwin shared library version number.
|
|
5dc7681f
|
2023-08-18T16:01:06
|
|
Fix version numbering for Darwin shared library.
|
|
3a98b57e
|
2023-08-18T13:15:24
|
|
Change version number on develop branch to 1.3.0.1.
|
|
09155eaa
|
2023-08-18T01:45:36
|
|
zlib 1.3
|
|
899ffefb
|
2023-08-17T22:13:25
|
|
Use original make and options when Makefile runs make.
Also avoid the use of the -C option for non-GNU make.
|
|
25bbd7f5
|
2023-08-17T21:40:28
|
|
Avoid uninitialized and unused warnings in contrib/minizip.
|
|
e13289e3
|
2023-08-17T17:40:16
|
|
Fix typo in preceding reversion commit.
|
|
f5ae600c
|
2023-08-17T17:27:47
|
|
Revert flipping of load flags in Makefile.in for z/OS.
It looked innocuous enough and worked on macOS, but failed on
Ubuntu.
|
|
daf27aed
|
2023-03-05T17:46:04
|
|
Look for a cross-compile libtool first in configure.
Permit cross-compilation for Darwin.
|
|
9889e988
|
2023-03-14T13:31:18
|
|
Avoid cmake deprecation warning.
|
|
22fc2089
|
2023-08-17T16:20:57
|
|
Clarify requirement in zlib.h to avoid multiple flush markers.
|
|
5f52b250
|
2023-08-17T15:06:07
|
|
Move load flags before object file in Makefile.in for Z/OS.
|
|
efc9c7b8
|
2022-11-14T15:26:14
|
|
Add license to contrib/untgz.
A zlib license was agreed to by the authors.
|
|
d524e2a8
|
2023-08-17T14:41:53
|
|
zlib now uses ANSI C function prototypes, so zlib2ansi not needed.
|
|
d9825147
|
2023-08-14T17:01:54
|
|
Fix bug when using gzflush() with a very small buffer.
|
|
6951bc60
|
2023-08-06T14:51:29
|
|
Fix typos in contrib/ada.
|
|
89ef46ba
|
2023-08-13T17:46:47
|
|
Remove redundant includes in minizip.
|
|
384e50ee
|
2023-08-13T17:43:36
|
|
Remove TRYFREE macro from minizip.
|
|
c97a8f1e
|
2023-08-06T14:28:31
|
|
Replace gcc-9 with gcc-11 for macOS testing.
At some point, macos-latest stopped supporting gcc-9, and moved to
gcc-11 and gcc-12.
|
|
981ee757
|
2021-06-04T18:25:19
|
|
Suppress MSAN detections in deflate's slide_hash().
slide_hash() knowingly reads potentially uninitialized memory, see
comment lower down about prev[n] potentially being garbage. In
this case, the result is never used.
|
|
1411ccaf
|
2023-08-12T11:03:46
|
|
Add memory sanitizer to configure (--memory).
This also adds --address for the address sanitizer, in addition to
the existing --sanitizer. -fno-omit-frame-pointer has been added
for both sanitizers to improve the error reporting.
|
|
7dd6aa72
|
2023-08-11T10:59:03
|
|
Fix bug when gzungetc() is used immediately after gzopen().
|
|
c7ddcc2e
|
2023-02-02T15:50:00
|
|
Fix some spelling errors.
|
|
2bcc7487
|
2023-08-03T12:38:41
|
|
Add minizip testing to Makefile.
|
|
be7aa115
|
2023-08-03T19:53:08
|
|
Read multiple bytes instead of byte-by-byte in minizip unzip.c.
Use a single ZREAD64 call in the unz64local_getShort/Long/Long64
implementation, rather than read it byte by byte.
|
|
aa154e3d
|
2023-07-29T11:17:19
|
|
Support Haiku in minizip.
|
|
f679a939
|
2022-09-08T21:45:04
|
|
Correct dummy filetime() prototype in minizip.c.
Signed-off-by: Xiang Xiao <xiaoxiang@xiaomi.com>
|
|
b3f23f7f
|
2023-07-29T23:58:11
|
|
Match sign of printf directive to sign of argument in testzlib.
|
|
dcd0d86b
|
2023-07-29T23:55:48
|
|
Match sign of printf directive to sign of argument in minizip.
|
|
3061e501
|
2023-07-29T23:51:22
|
|
Fix logic error in minizip argument processing.
|
|
379bbda3
|
2023-02-02T16:03:24
|
|
Fix typos found by codespell in minizip
|
|
e0bd0ad6
|
2023-07-29T23:34:26
|
|
Fix reading disk number start on zip64 files in minizip.
|
|
7b28ecc8
|
2023-07-29T10:08:42
|
|
Remove duplicated code #806
|
|
f209ca7b
|
2023-02-15T12:25:33
|
|
minizip: Fix being unable to open empty zip file
|
|
a566e156
|
2023-07-29T22:13:09
|
|
Avoid compiler complaints if _TIME_BITS defined when building zlib.
zlib does not use time_t, so _TIME_BITS is irrelevant. However it
may be defined anyway as part of a sledgehammer indiscriminately
applied to all builds.
|
|
a88f727d
|
2023-07-10T11:27:50
|
|
Document in zlib.h the initialization of stream fields by the Init
and Reset functions.
|
|
263a9828
|
2023-05-16T20:28:59
|
|
Correct comment in zlib.h on os setting in gzip header.
The comment said that the os is set to 255, when in fact it has
been set to the current os since zlib 1.2.3. Or at least our best
guess at the os made at compile time.
|
|
48c37410
|
2023-05-01T21:54:25
|
|
Remove duplicate "the" in zlib.h.
|
|
904016e8
|
2023-05-01T14:02:34
|
|
Update Java and Perl links in README.
|
|
b8a8373e
|
2023-04-17T20:47:42
|
|
Fix test/example.c to work with FORCE_STORED.
|
|
33654648
|
2023-04-17T20:21:58
|
|
Fix warnings on test/infcover.c.
|
|
05527a1b
|
2023-04-17T14:08:55
|
|
Fix cast in minizip's ioapi.c for Windows.
|
|
9b962a45
|
2023-04-17T13:59:18
|
|
No include file is needed for __int64 type on Windows.
|
|
66588683
|
2023-04-15T11:27:12
|
|
Remove use of OF() from contrib/untgz and render it compilable.
|
|
bf2578be
|
2023-04-15T11:16:17
|
|
Remove K&R function definitions from contrib/minizip.
|
|
c4aa3567
|
2023-04-15T01:18:06
|
|
Remove K&R function definitions from infback9.
|
|
e9d5486e
|
2023-04-14T01:42:03
|
|
Remove K&R function definitions from zlib.
C2X has removed K&R definitions from the C function syntax.
Though the standard has not yet been approved, some high-profile
compilers are now issuing warnings when such definitions are
encountered.
|
|
5799c14c
|
2023-04-13T20:09:52
|
|
Turn off C2X warning about deprecated K&R function syntax.
This is a temporary workaround before excising the K&R prototypes.
|
|
7e6dc429
|
2023-04-13T15:33:03
|
|
Add a NOPRIME #define to zran.c to not use inflatePrime().
This supports zlib versions earlier than 1.2.3 (July 2005), as
well as incomplete clones of zlib that do not have inflatePrime().
|
|
eb0e038b
|
2023-02-18T20:53:39
|
|
Rewrite of zran in examples. See version history in zran.c.
|
|
12b345c4
|
2023-02-17T00:06:32
|
|
Assure that inflatePrime() can't shift a 32-bit integer by 32 bits.
The inflate() functions never leave state->bits greater than 24, so
an inflatePrime() call could not cause this. The only way this
could have happened would be by using inflatePrime() to fill the
bit buffer with 32 bits, and then calling inflatePrime() a *second*
time asking to insert zero bits, for some reason. This commit
assures that a shift by 32 bits does not occur even in that case.
|
|
fa8cd50a
|
2023-01-25T21:00:52
|
|
Make z_size_t 64 bits when compiling on Windows with Z_SOLO.
Z_SOLO defines z_size_t as an unsigned long. However Windows and
MinGW-w64 are LLP64, where a long is 32 bits, but a size_t is 64
bits. This makes z_size_t, used by adler32_z() and crc32_z(), 64
bits on those systems.
|
|
a9b4c1de
|
2023-01-24T20:43:19
|
|
Update zlib_how.html to match the web page, and add a license.
|
|
02a6049e
|
2022-12-26T23:36:01
|
|
Fix crash when gzsetparams() attempted for transparent write.
gzsetparams() now returns a Z_STREAM_ERROR in this case.
|
|
e5546956
|
2022-12-15T09:07:13
|
|
Fix bug in deflateBound() for level 0 and memLevel 9.
memLevel 9 would cause deflateBound() to assume the use of fixed
blocks, even if the compression level was 0, which forces stored
blocks. That could result in a bound less than the size of the
compressed data. Now level 0 always uses the stored blocks bound.
|
|
76820e41
|
2022-11-08T11:50:59
|
|
Update broken article link in README.
Signed-off-by: Marcus Müller <mueller_sourcecodinglib@baseband.digital>
|
|
41fda48f
|
2022-10-15T09:02:21
|
|
Change version number on develop branch to 1.2.13.1.
|