FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=vendor%2Flibarchive 2026-07-07T10:58:25Z 2026-07-07T10:58:25Z Martin Matuska mm@FreeBSD.org 2026-07-07T10:36:51Z urn:sha1:77a6696abb6946edaa8cef0fcd9f666d3c69514b New features in 3.8.8: #2685 add support for reading encrypted zipx formats (bzip2, lzma, ppmd, xz, zstd) Bugfixes between 3.8.7 and 3.8.8: Core: #2905 Fix NULL pointer increment in archive_acl_from_text_nl #2927 archive_match: Prevent call stack overflow #2928 pathmatch: Treat anchors not special without flags #2942 fix `archive_entry_set_mode` & `archive_entry_set_perm` #2957 Fix a double-free in the link resolver #2971 Fix mem leaks found with ASAN-enabled test suites #2988 Fix buffer overrun and wrong output for NULL-name ACL entries #2998, §3009: archive_read: FATAL should be sticky for all API calls #3010 Date parsing: reject dates with numbers of more than 4 digits #3011 acl: parser out-of-bounds read #3012 pathmatch: heap buffer over-read #3036 cmdline: Use free+strdup instead of realloc+strcpy #3019 sparse: UAF in sparse_reset #3037 strmode: Remove strcpy usage #3040 Fix a number of unchecked memory allocations #3064 Fix libattr version returned in archive_version_details, as well as a leak #3083 Fix integer overflow in __archive_read_filter_ahead #3114 Fix OOB in `archive_read_open_filenames_w` on some systems #3146 read_disk: Check if off_t can overflow size_t #XXXX read: Fix memory corruption on filtered multi-volume archives Filters: #2526 compress: Fix SIGSEGV when appended before open #3033 filter: Remove unneeded strcpy calls #3050 bzip2: Support large in-memory archives #3054 filter: Fix mismatched filter function dispatch table entry in archive_write_add_filter.c #3073 zstd: Fix 32 bit platform endless loop and OOB access during bidding #3085 gzip: Support more large in-memory archives #3093 lz4: Improve truncated input stream detection #3100 lz4: Check `XXH32_init` result #3103 uu: Extend range checks to avoid 32 bit OOB #3115 gzip: Fix OOB in writer with huge filename #3132 lz4: Fix double-free on reallocation failure 7-ZIP reader and writer: #2923 sanity-check FilesInfo NumFiles before allocating entries #2929 Verify that Codec ID fits into 63 bit #2980 Sanity-check the number of files #2985 Harden SFX parser #3002 Clean up the failure path in `setup_decode_folder` #3006 Fix 32 bit heap overflow #3062 writer: free file->utf16name on symlink UTF-8 conversion failure #3067 Set error message in case of error #3074 Support streamable reading again #3099 Extend support for filtered input #3102 fix a number of issues in zstd detection #3119 Fix range check in get_pe_sfx_offset CAB reader: #2979 reader: Fix use of uninitialized values from Huffman table #3000 Harden the handling of invalid headers #3144 Improve truncation detection #3145 Properly limit maximum name length #3153 Fix multi volume parser CPIO reader and writer: #2984 reader: Validate pathname in record_hardlink #3043 reject oversized pathnames before read-ahead #3055 Fix UAF in error path #3095 Improve afio header detection #3158 Fix writer OOB read with very long filenames #3168 fix OOB read from int pathlength truncation in newc/binary writers iso9660 reader and writer: #2968 Fix `..` (dot dot) path normalization #2974 Fix OOB during Joliet ID generation #2978 Fix infinite loop in Joliet ID generation #2983 Fix joliet pathname overflow #3017 Fix NULL deref and Joliet ID overflow #3021 fix infinite loop on self-referencing CE entry #3029 Fix memory leaks on error paths #3045 bound duplicate identifier extension placement #3117 Fix null dereference in set_directory_record_rr mtree reader and writer: #2930 Fix time value parser truncation #2982 Fix hex parser #3007 Escape standard pathname matching characters #3008 Do not append '/' when basename is '.' #3018 NULL pointer deref during archive close #3032 Port iso9660 fix for `..` (dot dot) path normalization #3057 Fix null dereference for some corner cases RAR reader: #3015 avoid reading NEWSUB extended data during header parsing #3047 skip NEWSUB payloads without size cap #3048 reset low-distance state for new LZ tables #3087 Simplify FILE_ATTRIBUTE_DIRECTORY check #3105 Add missing bound check for staticdata RARv5 reader: #3004 FAIL if the decode table is > 2^16 #3081 Avoid dangling pointers in init_unpack #3091 skip unconsumed block bytes before ARCHIVE_RETRY #3121 fix signed integer underflow in bytes_remaining TAR reader and writer: #2991 Harden timestamp parsing #3038 Improve string safety in list_item_verbose #3052 Fix OOB with empty wide character directory names WARC reader and writer: #3061 writer: free hdr on _popul_ehdr overflow in _warc_header XAR reader and writer: #3013 Fix two UB (#3013) #3028 Free XAR xattr fstype metadata during cleanup #3030 Avoid integer overflows in number parsers #3032 Port iso9660 fix for `..` (dot dot) path normalization #3041 Fix writer OOB accesses with fflags #3060 fix fflags_text leak in file_free ZIP reader and writer: #2981 Limit the LZMA initialization to 64MiB memory (#2981) #2993 Don't try to write overlong pathnames (#2993) #2996 Reject empty pathnames in ZIP writer (#2996) Obtained from: libarchive Vendor commit: 7219b0134d771dc4b51bf86b4d01761b87398b1b 2024-04-11T13:48:20Z Martin Matuska mm@FreeBSD.org 2024-04-11T13:37:34Z urn:sha1:a509d68f27b9f114b876bbe3b9caa9d0ee0c5606 New features: #1941 uudecode filter: support file name and file mode in raw mode #1943 7-zip reader: translate Windows permissions into UNIX permissions #1962 zstd filter now supports the "long" write option #2012 add trailing letter b to bsdtar(1) substitute pattern #2031 PCRE2 support #2054 add support for long options "--group" and "--owner" to tar(1) Security fixes: #2101 Fix possible vulnerability in tar error reporting introduced in f27c173 Important bugfixes: #1974 ISO9660: preserve the natural order of links #2105 rar5: fix infinite loop if during rar5 decompression the last block produced no data #2027 xz filter: fix incorrect eof at the end of an lzip member #2043 zip: fix end-of-data marker processing when decompressing zip archives Obtained from: libarchive Libarchive commit: 4fcc02d906cca4b9e21a78a833f1142a2689ec52 2021-08-23T00:24:04Z Martin Matuska mm@FreeBSD.org 2021-08-23T00:24:04Z urn:sha1:9aa5476184726da9d9159568c9b15e29451b5778 Libarchive 3.5.2 New features: PR #1502: Support for PWB and v7 binary cpio formats PR #1509: Support of deflate algorithm in symbolic link decompression for ZIP archives Important bugfixes: IS #1044: fix extraction of hardlinks to symlinks PR #1480: Fix truncation of size values during 7zip archive extraction on 32bit architectures PR #1504: fix rar header skiming PR #1514: ZIP excessive disk read - fix location of central directory PR #1520: fix double-free in CAB reader PR #1521: Fixed leak of rar before ending with error PR #1530: Handle short writes from archive_write_callback PR #1532: 7zip: Use compression settings from file also for file header IS #1566: do not follow symlinks when processing the fixup list Obtained from: libarchive Libarchive commit: 1b2c437b99b361c7692538fa373e99955e9b93ae Libarchive tag: v3.5.2 2016-05-11T10:19:44Z Martin Matuska mm@FreeBSD.org 2016-05-11T10:19:44Z urn:sha1:4e579f6c9425c995106fbf72667f4ec7e5d5db85 2013-03-21T18:59:02Z Martin Matuska mm@FreeBSD.org 2013-03-21T18:59:02Z urn:sha1:6a316f322a46b3e531726dd2a7de63b9e245878d Git branch: release Git commit: 19f23e191f9d3e1dd2a518735046100419965804 Obtained from: https://github.com/libarchive/libarchive.git