Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Address Microsoft deprecation warnings. | Mark Adler | 2024-02-08 | 6 | -13/+25 |
| | |||||
* | Fix broken links. | Justin Dhillon | 2024-02-07 | 6 | -579/+579 |
| | |||||
* | Correct printf formats in test/infcover.c to %zu. | Mark Adler | 2024-02-07 | 1 | -3/+3 |
| | |||||
* | Expand on the deflate strategy parameter in zlib.h. | Mark Adler | 2024-02-07 | 1 | -12/+15 |
| | |||||
* | Assume no snprintf() or vsnprintf() if C89/90 in gzguts.h. | Mark Adler | 2024-02-06 | 1 | -19/+14 |
| | | | | | | Those functions were introduced in C99. However it is assumed that they are there if under Windows, since Visual C claims C89/90, but does have those functions, or variants. | ||||
* | Avoid use of snprintf() in test/minigzip.c. | Mark Adler | 2024-02-06 | 1 | -29/+27 |
| | | | | | It was being used only as a safe version of strcpy(). Instead, use a safe alternative to strcpy(). | ||||
* | Use _POSIX_C_SOURCE in gzguts.h, instead of _POSIX_SOURCE. | Mark Adler | 2024-02-06 | 1 | -2/+2 |
| | |||||
* | Enable fileno() for POSIX system in minigzip.c. | Paul Marquess | 2024-02-05 | 1 | -0/+4 |
| | |||||
* | Update zran version. | Mark Adler | 2024-02-04 | 2 | -4/+8 |
| | |||||
* | Allocate the dictionaries in examples/zran.c. | Mark Adler | 2024-02-04 | 2 | -22/+27 |
| | | | | | This reduces the memory needed for dictionaries, and avoids the need to reallocate the index at the end to return unused memory. | ||||
* | Provide a reusable inflate engine in the index in example/zran.c. | Mark Adler | 2024-02-04 | 2 | -76/+78 |
| | | | | | Avoids the overhead of creating a new inflate engine for each random access extraction. | ||||
* | Stop decoding in zran.c once request is satisfied. | Mark Adler | 2024-02-04 | 1 | -2/+6 |
| | |||||
* | Set returned index to NULL on an index build error in zran.c. | Mark Adler | 2024-02-04 | 2 | -1/+5 |
| | | | | | | An attempt to use the returned pointer in deflate_index_extract() will now return cleanly with an error. The returned pointer can now also be used with deflate_index_free() even on error. | ||||
* | Fix cmake build directory interference issue. | Mark Adler | 2024-01-28 | 1 | -2/+6 |
| | |||||
* | Fix version numbers in vstudio definition files. | Mark Adler | 2024-01-28 | 6 | -6/+6 |
| | | | | They can only have a major and a minor version. | ||||
* | Update copyright years in LICENSE file. | Mark Adler | 2024-01-24 | 1 | -1/+1 |
| | |||||
* | Enable build of shared library on AIX. | Aleksei Shpakovskii | 2024-01-23 | 1 | -0/+1 |
| | |||||
* | Note termination of returned strings in contrib/minizip/unzip.h. | Mark Adler | 2024-01-23 | 1 | -0/+4 |
| | |||||
* | Ignore unknown options in configure. | Mark Adler | 2024-01-23 | 1 | -4/+5 |
| | |||||
* | Avoid implicit conversion warnings in deflate.c and trees.c. | Levi Broderick | 2024-01-23 | 2 | -5/+5 |
| | |||||
* | Add option to CMakeLists.txt to disable renaming of zconf.h. | Tomas Berger | 2024-01-23 | 1 | -1/+2 |
| | |||||
* | Avoid unterminated file name in contrib/minizip/miniunz.c. | Mark Adler | 2024-01-23 | 1 | -2/+2 |
| | |||||
* | Permit compiling contrib/minizip/unzip.c with decryption. | Mark Adler | 2024-01-23 | 2 | -5/+0 |
| | |||||
* | Improve portability to RISC OS. | Cameron Cawley | 2024-01-23 | 5 | -9/+11 |
| | |||||
* | Change version number on develop branch to 1.3.1.1. | Mark Adler | 2024-01-22 | 26 | -52/+55 |
| | |||||
* | zlib 1.3.1v1.3.1master | Mark Adler | 2024-01-22 | 41 | -84/+91 |
| | |||||
* | Move the load flags before the object files in Makefile tests. | Mark Adler | 2024-01-22 | 1 | -5/+5 |
| | |||||
* | Add target include directories to CMakeLists.txt. | tr1cks | 2024-01-22 | 1 | -0/+2 |
| | | | | This enables the addition of zlib to other projects. | ||||
* | Use Makefile compiler for minizip-test target. | Mark Adler | 2024-01-21 | 2 | -2/+2 |
| | |||||
* | Remove -w compile option in configure test. | Mark Adler | 2024-01-20 | 1 | -1/+1 |
| | | | | Not all C compilers have a -w option. | ||||
* | Use updated zconf.h when building out of directory with configure. | Dan Kegel | 2024-01-19 | 1 | -1/+1 |
| | |||||
* | Remove carriage returns from zlib.map. | Mark Adler | 2024-01-19 | 1 | -100/+100 |
| | |||||
* | Fix a bug in ZLIB_DEBUG compiles in check_match(). | Mark Adler | 2024-01-19 | 1 | -6/+14 |
| | | | | | This avoids trying to compare a match starting one byte before the current window. Thanks to @zmodem (Hans) for discovering this. | ||||
* | Revert "Add a CMake option to link the C runtime statically." | Mark Adler | 2024-01-19 | 1 | -21/+4 |
| | | | | This reverts commit 44dc43ab047d65febed972a17b0e3bf7e994e8f2. | ||||
* | Remove unused Z_ARG macro. | Mark Adler | 2024-01-17 | 3 | -24/+0 |
| | |||||
* | Fix cmake build on AIX. | gastush | 2024-01-17 | 1 | -1/+1 |
| | | | | The --version-script linker option is not supported by the linker on AIX systems | ||||
* | Remove mentions of an official zlib DLL distribution. | Mark Adler | 2024-01-17 | 2 | -20/+3 |
| | | | | | There used to be one, but no more. It is up to the user or vendor to compile zlib. | ||||
* | Correct typos in source code. | Dimitri Papadopoulos | 2024-01-17 | 3 | -6/+6 |
| | |||||
* | Make the existence of gz_intmax() unconditional. | Milan Bulat | 2024-01-17 | 2 | -10/+6 |
| | | | | gz_intmax() is noted in zlib.map. This assures it's always there. | ||||
* | Add cmake option to control the build of the example executables. | Peter Taylor | 2024-01-17 | 1 | -17/+19 |
| | |||||
* | Neutralize zip file traversal attacks in miniunz. | Matt Wilson | 2024-01-17 | 1 | -0/+14 |
| | | | | | | | | | | | | | | | | | | | | | | | | Archive formats such as .zip files are generally susceptible to so-called "traversal attacks". This allows an attacker to craft an archive that writes to unexpected locations of the file system (e.g., /etc/shadow) if an unspecting root user were to unpack a malicious archive. This patch neutralizes absolute paths such as /tmp/moo and deeply relative paths such as dummy/../../../../../../../../../../tmp/moo The Debian project requested CVE-2014-9485 be allocated for the first identified weakness. The fix was incomplete, resulting in a revised patch applied here. Since there wasn't an updated version released by Debian with the incomplete fix, I suggest we use this CVE to identify both issues. Link: https://security.snyk.io/research/zip-slip-vulnerability Link: https://bugs.debian.org/774321 Link: https://bugs.debian.org/776831 Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9485 Reported-by: Jakub Wilk <jwilk@debian.org> Fixed-by: Michael Gilbert <mgilbert@debian.org> | ||||
* | Add a CMake option to link the C runtime statically. | tbeu | 2024-01-17 | 1 | -4/+22 |
| | |||||
* | Fix random typos over several source and text files. | THE-Spellchecker | 2024-01-17 | 8 | -11/+11 |
| | |||||
* | Fix "the the" in examples/gzlog.c. | William Leara | 2024-01-17 | 1 | -2/+2 |
| | |||||
* | Correct case of MSDOS in contrib/minizip/miniunz.c. | William Leara | 2024-01-17 | 1 | -1/+1 |
| | |||||
* | Refer to correct function in contrib/minizip/unzip.c comment. | William Leara | 2024-01-17 | 1 | -1/+1 |
| | |||||
* | Note that the len2 argument of crc_combine*() must be non-negative. | Mark Adler | 2024-01-13 | 1 | -2/+2 |
| | | | | If it is negative, then the code will enter an infinite loop. | ||||
* | Fix the copy of pending_buf in deflateCopy() for the LIT_MEM case. | Hans Wennborg | 2024-01-13 | 2 | -7/+5 |
| | |||||
* | Fix pending buffer overflow assert with LIT_MEM allocation. | Hans Wennborg | 2024-01-13 | 1 | -1/+1 |
| | | | | | | | Since each element in s->d_buf is 2 bytes, the sx index should be multiplied by 2 in the assert. Fixes #897 | ||||
* | Remove fdopen #defines in zutil.h. | Mark Adler | 2024-01-13 | 1 | -22/+1 |
| | | | | fdopen() is not used by zlib anymore. The #defines are vestigial. |