pmqs
0e95839324
Add github workflow to build with all available C standards.
12 months ago
pmqs
d9243a0f06
Add warnings and error on warning to configure and cmake tests.
12 months ago
Mark Adler
fd5fe8b17e
Further address Microsoft deprecation warnings.
12 months ago
Mark Adler
ceac32f156
Keep lines short in gzread.c.
12 months ago
Mark Adler
1bff6f0fd5
Avoid signedness change warning in test/minigzip.c.
12 months ago
Mark Adler
7a7202de35
Correct a variable type in deflate.c.
12 months ago
Mark Adler
3c13497a61
One more github actions version update.
12 months ago
Mark Adler
76156087c8
Update github actions versions.
12 months ago
Mark Adler
25740f4ad5
Include share.h on Windows for _SH_DENYNO.
12 months ago
Mark Adler
985a62d118
Address Microsoft deprecation warnings.
1 year ago
Justin Dhillon
504403f3e4
Fix broken links.
1 year ago
Mark Adler
81e7c38608
Correct printf formats in test/infcover.c to %zu.
1 year ago
Mark Adler
96d3e9e3dd
Expand on the deflate strategy parameter in zlib.h.
1 year ago
Mark Adler
e342bb3dae
Assume no snprintf() or vsnprintf() if C89/90 in gzguts.h.
...
Those functions were introduced in C99. However it is assumed that
they are there if under Windows, since Visual C claims C89/90, but
does have those functions, or variants.
1 year ago
Mark Adler
915a3d5b7b
Avoid use of snprintf() in test/minigzip.c.
...
It was being used only as a safe version of strcpy(). Instead, use
a safe alternative to strcpy().
1 year ago
Mark Adler
1382e66114
Use _POSIX_C_SOURCE in gzguts.h, instead of _POSIX_SOURCE.
1 year ago
Paul Marquess
4b98fd39c8
Enable fileno() for POSIX system in minigzip.c.
1 year ago
Mark Adler
abd3d1a289
Update zran version.
1 year ago
Mark Adler
037bca67fd
Allocate the dictionaries in examples/zran.c.
...
This reduces the memory needed for dictionaries, and avoids the
need to reallocate the index at the end to return unused memory.
1 year ago
Mark Adler
6378d33478
Provide a reusable inflate engine in the index in example/zran.c.
...
Avoids the overhead of creating a new inflate engine for each
random access extraction.
1 year ago
Mark Adler
bb054d95d0
Stop decoding in zran.c once request is satisfied.
1 year ago
Mark Adler
be4db0a79a
Set returned index to NULL on an index build error in zran.c.
...
An attempt to use the returned pointer in deflate_index_extract()
will now return cleanly with an error. The returned pointer can
now also be used with deflate_index_free() even on error.
1 year ago
Mark Adler
f1f503da85
Fix cmake build directory interference issue.
1 year ago
Mark Adler
b14484997a
Fix version numbers in vstudio definition files.
...
They can only have a major and a minor version.
1 year ago
Mark Adler
31d3dd4306
Update copyright years in LICENSE file.
1 year ago
Aleksei Shpakovskii
04ca30003f
Enable build of shared library on AIX.
1 year ago
Mark Adler
f56ad0aafa
Note termination of returned strings in contrib/minizip/unzip.h.
1 year ago
Mark Adler
b289a50fc5
Ignore unknown options in configure.
1 year ago
Levi Broderick
8a76f02e0e
Avoid implicit conversion warnings in deflate.c and trees.c.
1 year ago
Tomas Berger
df3b265064
Add option to CMakeLists.txt to disable renaming of zconf.h.
1 year ago
Mark Adler
d4eaa1d939
Avoid unterminated file name in contrib/minizip/miniunz.c.
1 year ago
Mark Adler
da5937705d
Permit compiling contrib/minizip/unzip.c with decryption.
1 year ago
Cameron Cawley
4de0b054a5
Improve portability to RISC OS.
1 year ago
Mark Adler
9f0f2d4f9f
Change version number on develop branch to 1.3.1.1.
1 year ago
Mark Adler
51b7f2abda
zlib 1.3.1
1 year ago
Mark Adler
1a8db63788
Move the load flags before the object files in Makefile tests.
1 year ago
tr1cks
2e3d86c4e1
Add target include directories to CMakeLists.txt.
...
This enables the addition of zlib to other projects.
1 year ago
Mark Adler
c06dfecb8a
Use Makefile compiler for minizip-test target.
1 year ago
Mark Adler
88ec24670e
Remove -w compile option in configure test.
...
Not all C compilers have a -w option.
1 year ago
Dan Kegel
9404df5a1f
Use updated zconf.h when building out of directory with configure.
1 year ago
Mark Adler
84f0bafd7c
Remove carriage returns from zlib.map.
1 year ago
Mark Adler
7af6320ad7
Fix a bug in ZLIB_DEBUG compiles in check_match().
...
This avoids trying to compare a match starting one byte before the
current window. Thanks to @zmodem (Hans) for discovering this.
1 year ago
Mark Adler
7b632b486a
Revert "Add a CMake option to link the C runtime statically."
...
This reverts commit 44dc43ab04
.
1 year ago
Mark Adler
3f635df97e
Remove unused Z_ARG macro.
1 year ago
gastush
ade6825c49
Fix cmake build on AIX.
...
The --version-script linker option is not supported by the linker on AIX systems
1 year ago
Mark Adler
2526346237
Remove mentions of an official zlib DLL distribution.
...
There used to be one, but no more. It is up to the user or vendor
to compile zlib.
1 year ago
Dimitri Papadopoulos
fe41d18921
Correct typos in source code.
1 year ago
Milan Bulat
01253ecd7e
Make the existence of gz_intmax() unconditional.
...
gz_intmax() is noted in zlib.map. This assures it's always there.
1 year ago
Peter Taylor
6201f89384
Add cmake option to control the build of the example executables.
1 year ago
Matt Wilson
14a5f8f266
Neutralize zip file traversal attacks in miniunz.
...
Archive formats such as .zip files are generally susceptible to
so-called "traversal attacks". This allows an attacker to craft
an archive that writes to unexpected locations of the file system
(e.g., /etc/shadow) if an unspecting root user were to unpack a
malicious archive.
This patch neutralizes absolute paths such as /tmp/moo and deeply
relative paths such as dummy/../../../../../../../../../../tmp/moo
The Debian project requested CVE-2014-9485 be allocated for the
first identified weakness. The fix was incomplete, resulting in a
revised patch applied here. Since there wasn't an updated version
released by Debian with the incomplete fix, I suggest we use this
CVE to identify both issues.
Link: https://security.snyk.io/research/zip-slip-vulnerability
Link: https://bugs.debian.org/774321
Link: https://bugs.debian.org/776831
Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485
Reported-by: Jakub Wilk <jwilk@debian.org>
Fixed-by: Michael Gilbert <mgilbert@debian.org>
1 year ago