Tag: Branch: Tree: c06dfecb8a

develop

master

v0.71

v0.79

v0.8

v0.9

v0.91

v0.92

v0.93

v0.94

v0.95

v0.99

v1.0-pre

v1.0.1

v1.0.2

v1.0.4

v1.0.5

v1.0.7

v1.0.8

v1.0.9

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.0.1

v1.2.0.2

v1.2.0.3

v1.2.0.4

v1.2.0.5

v1.2.0.6

v1.2.0.7

v1.2.0.8

v1.2.1

v1.2.1.1

v1.2.1.2

v1.2.10

v1.2.11

v1.2.12

v1.2.13

v1.2.2

v1.2.2.1

v1.2.2.2

v1.2.2.3

v1.2.2.4

v1.2.3

v1.2.3.1

v1.2.3.2

v1.2.3.3

v1.2.3.4

v1.2.3.5

v1.2.3.6

v1.2.3.7

v1.2.3.8

v1.2.3.9

v1.2.4

v1.2.4-pre1

v1.2.4-pre2

v1.2.4.1

v1.2.4.2

v1.2.4.3

v1.2.4.4

v1.2.4.5

v1.2.5

v1.2.5.1

v1.2.5.2

v1.2.5.3

v1.2.6

v1.2.6.1

v1.2.7

v1.2.7.1

v1.2.7.2

v1.2.7.3

v1.2.8

v1.2.9

v1.3

v1.3.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'c06dfecb8a'

${ noResults }

Commit Graph

176 Commits (c06dfecb8a0c996dce87148b9086f0fe79734f32)

Author	SHA1	Message	Date
Mark Adler	c06dfecb8a	Use Makefile compiler for minizip-test target.	12 months ago
Dimitri Papadopoulos	fe41d18921	Correct typos in source code.	1 year ago
Matt Wilson	14a5f8f266	Neutralize zip file traversal attacks in miniunz. ... Archive formats such as .zip files are generally susceptible to so-called "traversal attacks". This allows an attacker to craft an archive that writes to unexpected locations of the file system (e.g., /etc/shadow) if an unspecting root user were to unpack a malicious archive. This patch neutralizes absolute paths such as /tmp/moo and deeply relative paths such as dummy/../../../../../../../../../../tmp/moo The Debian project requested CVE-2014-9485 be allocated for the first identified weakness. The fix was incomplete, resulting in a revised patch applied here. Since there wasn't an updated version released by Debian with the incomplete fix, I suggest we use this CVE to identify both issues. Link: https://security.snyk.io/research/zip-slip-vulnerability Link: https://bugs.debian.org/774321 Link: https://bugs.debian.org/776831 Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485 Reported-by: Jakub Wilk <jwilk@debian.org> Fixed-by: Michael Gilbert <mgilbert@debian.org>	1 year ago
THE-Spellchecker	01155ccc3f	Fix random typos over several source and text files.	1 year ago
William Leara	190168cc1c	Correct case of MSDOS in contrib/minizip/miniunz.c.	1 year ago
William Leara	762cf49e63	Refer to correct function in contrib/minizip/unzip.c comment.	1 year ago
Paul Ivanov	643e17b749	Correct repeated words in source file comments and a readme.	1 year ago
Mark Adler	15c45adb76	Fix decision on the emission of Zip64 end records in minizip. ... The appnote says that if the number of entries in the end record is 0xffff, then the actual number of entries will be found in the Zip64 end record. Therefore if the number of entries is equal to 0xffff, it can't be in the end record by itself, since that is an instruction to get the number from the Zip64 end record. This code would just store 0xffff in the end record in that case, not making a Zip64 end record. This commit fixes that.	1 year ago
tbeu	88e50f1705	Update miniunz version.	1 year ago
Mark Adler	79a0e447a0	Update version and date in contrib/nuget.	1 year ago
Mark Adler	8988e03256	Update version numbers and year in contrib/vstudio/vc17.	1 year ago
Mark Adler	7192d692be	Update vc directory in contrib/nuget.	1 year ago
Mark Adler	60bfe641af	Rename contrib/vstudio/vc143 to vc17. ... This makes it consistent with the other vstudio projects, which use the version number.	1 year ago
Hans Wennborg	73331a6a04	Reject overflows of zip header fields in minizip. ... This checks the lengths of the file name, extra field, and comment that would be put in the zip headers, and rejects them if they are too long. They are each limited to 65535 bytes in length by the zip format. This also avoids possible buffer overflows if the provided fields are too long.	1 year ago
AraHaan	4a47c1bf3d	Add project and solution files for building a nuget package.	1 year ago
AraHaan	d7de5971f4	Add VS2022 project files. ... Also replaced Itanium with ARM and ARM64 configurations.	1 year ago
Mark Adler	4c5a81c2ae	Remove carriage returns from contrib/vstudio/readme.txt.	1 year ago
Mark Adler	3a98b57e55	Change version number on develop branch to 1.3.0.1.	1 year ago
Mark Adler	09155eaa2f	zlib 1.3	1 year ago
Mark Adler	25bbd7f5a6	Avoid uninitialized and unused warnings in contrib/minizip.	1 year ago
Bastian Germann	efc9c7b801	Add license to contrib/untgz. ... A zlib license was agreed to by the authors.	1 year ago
Dimitri Papadopoulos	6951bc609b	Fix typos in contrib/ada.	1 year ago
Mark Adler	89ef46ba09	Remove redundant includes in minizip.	1 year ago
Mark Adler	384e50eea4	Remove TRYFREE macro from minizip.	1 year ago
Dimitri Papadopoulos	c7ddcc2e0e	Fix some spelling errors.	1 year ago
Eugene Golushkov	be7aa11551	Read multiple bytes instead of byte-by-byte in minizip unzip.c. ... Use a single ZREAD64 call in the unz64local_getShort/Long/Long64 implementation, rather than read it byte by byte.	1 year ago
Gilles Vollant	aa154e3da0	Support Haiku in minizip.	1 year ago
Xiang Xiao	f679a939d3	Correct dummy filetime() prototype in minizip.c. ... Signed-off-by: Xiang Xiao <xiaoxiang@xiaomi.com>	1 year ago
Mark Adler	b3f23f7fb7	Match sign of printf directive to sign of argument in testzlib.	1 year ago
Mark Adler	dcd0d86b9e	Match sign of printf directive to sign of argument in minizip.	1 year ago
Mark Adler	3061e5013c	Fix logic error in minizip argument processing.	1 year ago
Dimitri Papadopoulos	379bbda363	Fix typos found by codespell in minizip	1 year ago
Mark Adler	e0bd0ad6e4	Fix reading disk number start on zip64 files in minizip.	1 year ago
Gilles Vollant	7b28ecc89d	Remove duplicated code #806	1 year ago
RedworkDE	f209ca7be7	minizip: Fix being unable to open empty zip file	1 year ago
Mark Adler	05527a1b1e	Fix cast in minizip's ioapi.c for Windows.	2 years ago
Mark Adler	66588683b3	Remove use of OF() from contrib/untgz and render it compilable.	2 years ago
Mark Adler	bf2578be2d	Remove K&R function definitions from contrib/minizip.	2 years ago
Mark Adler	c4aa356742	Remove K&R function definitions from infback9.	2 years ago
Mark Adler	41fda48fc2	Change version number on develop branch to 1.2.13.1.	2 years ago
Mark Adler	04f42ceca4	zlib 1.2.13	2 years ago
Mark Adler	40c5a9bc06	Find other BSD's without *64 functions in contrib/minizip/ioapi.h.	2 years ago
Mark Adler	2bb4961990	Avoid C89 warning in contrib/minizip/crypt.h.	2 years ago
Mark Adler	e61ff990c0	Comment out unused code in contrib/minizip/minizip.c.	2 years ago
Mark Adler	4572dfbe99	Remove some harmless semicolons in minizip.	2 years ago
Mark Adler	138c93cffb	Security and warning fixes for minizip. [gvollant] ... Remove unused code and unnecessary test for free().	2 years ago
Mark Adler	9b291c9f01	Fix incorrect cast in minizip's ioapi.c.	2 years ago
Mark Adler	2d283adfee	Fix c89 compatibility in minizip's ioapi.c. [gvollant]	2 years ago
Mark Adler	d0704a8201	Remove deleted assembler code references. ... The code was removed, but the builds that used the code were not updated. This fixes that. Thanks to Adenilson and toxieainc for the patches.	2 years ago
Mark Adler	59b948acee	Fix typo in contrib readme.	2 years ago