All pull requests

Pull requests

• check that crc is zero for ae-2 winzip aes entries

  #599·arshsmith1 opened Sep 29, 2026Contributor·

  ·

• Reject 24 byte Zip64 extra field if disk number start is 0xFFFF.

  #598·DeNdlerX opened Sep 28, 2026·

  ·
  1

• Check that partial reads of stored files don’t go past their data.

  #597·DeNdlerX opened Sep 28, 2026·

  ·

• Check length of WinZip AES AE-2 entries.

  #596·DeNdlerX opened Sep 28, 2026·

  ·

• Check uncompressed size of deflate, bzip2, LZMA and XZ entries.

  #595·DeNdlerX opened Sep 28, 2026·

  ·

• Fix memory leak in tryopen.

  #592·DeNdlerX opened Sep 26, 2026·

  ·

• Fix error reporting and resource cleanup across sources and constructors

  #591·filtede98 opened Sep 25, 2026·

  ·
  1

• zip_error_to_str: fix format string vulnerability and handle NULL/empty buffer

  #589·filtede98 opened Sep 24, 2026·

  ·

• zip_close: check for allocation overflow and set error on failure

  #588·filtede98 opened Sep 24, 2026·

  ·

• Use close-on-exec duplication in zip_fdopen

  #587·KiritoYG opened Sep 24, 2026·

  ·
  1

• zip_file_extra_field_delete: disallow deleting extra fields in torrentzip archives

  #586·filtede98 opened Sep 24, 2026·

  ·

• Support zip_fseek() for stored entries encrypted with WinZip AES

  #584·fdegros opened Sep 23, 2026·

  ·
  1

• Compute allocation sizes with a checked helper

  #580·Stephen-Psaradellis opened Sep 18, 2026·

  ·

• buffer: add optional -fbounds-safety annotations for struct zip_buffer

  #578·LaptopsPlural opened Sep 11, 2026·

  ·

• Preserve explicit crypto buffer clearing across backends

  feedback
  #576·agamal026 opened Sep 6, 2026·

  ·
  14

• check for NUL in filename after applying unicode path extra field

  #570·arshsmith1 opened Aug 27, 2026Contributor·

  ·

• handle local zip64 extra field with 32-bit compressed size

  #569·arshsmith1 opened Aug 24, 2026Contributor·

  ·
  2

• Reject window stat past lower source end

  #567·carrerasdarren-cell opened Aug 22, 2026Contributor·

  ·
  1

• Preserve POSIX ACLs when replacing archives

  #561·srkyn opened Aug 15, 2026·

  ·
  4

• ossfuzz: add zip_source_zip_fuzzer for partial-window extraction paths

  #543·tejgokani opened Jun 16, 2026·

  ·

• ossfuzz: add zip_write_alt_compress_fuzzer for bzip2/zstd/xz codec paths

  #539·XananasX7 opened Jun 11, 2026Contributor·

  ·
  3