(commons-compress) branch master updated: Reject invalid literal/length and distance codes in Deflate64 decoder (#785).

[gg...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-compress.git


The following commit(s) were added to refs/heads/master by this push:
     new 5a8634c1f Reject invalid literal/length and distance codes in Deflate64 decoder (#785).
5a8634c1f is described below

commit 5a8634c1f7d2f5fd1b17dfc69e8bd8542b6bd072
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Tue Jul 14 13:09:18 2026 -0400

    Reject invalid literal/length and distance codes in Deflate64 decoder
    (#785).
---
 src/changes/changes.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 591bcd70c..f034d37f6 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -118,6 +118,8 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="fix" issue="COMPRESS-705" dev="ggregory" due-to="Mario Fredenhagen, Gary Gregory">GZip IOException: Extra subfield length exceeds remaining bytes in extra field; use new option GzipCompressorInputStream.Builder.setIgnoreExtraField(boolean).</action>
       <!-- FIX snappy -->
       <action type="fix" dev="ggregory" due-to="Stanislav Fort, Gary Gregory">Fix for when a valid raw Snappy stream with uncompressed size > 2 GiB used to decompress and then fail at physical EOF with a “Premature end of stream” exception instead of completing cleanly.</action>
+      <!-- FIX deflate64 -->
+      <action type="fix" dev="ggregory" due-to="KALI 834X, Gary Gregory">Reject invalid literal/length and distance codes in Deflate64 decoder (#785).</action>
       <!-- FIX general -->      
       <action type="fix" dev="ggregory" due-to="Piotr P. Karwasz, Gary Gregory">Add missing Javadoc @since tag to org.apache.commons.compress.compressors.lz77support.LZ77Compressor.AbstractReference.</action>
       <action type="fix" dev="ggregory" due-to="Gary Gregory">Classes in org.apache.commons.compress.archivers now throw a subclass of IOException called ArchiveException instead of IOException when a formatting problem is found.</action>