Re: Zlib memory corruption on deflate (i.e. compress)

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  1. ZLib

    A massively spiffy yet delicately unobtrusive compression library.

    This seems to be a minor bug, in that it is only triggered using unusual (and rather unlikely) deflate parameters.

    But, looking into this bug, I was sort-of interested to see how it was handled. The change log for 1.2.12 (2022-03-27) indicates the issue was resolved ("Fix a bug that can crash deflate on some input when using Z_FIXED"). Yet, in what seems to be the canonical Zlib repository (https://github.com/madler/zlib), I was unable to find a corresponding commit.

    None of commits this year (7, so not too hard to review) seem to be particularity meaningful changes, and in particular yesterday's 'zlib 1.2.12' commit seems to only consist of version/copyright updates.

    So, does anyone have any idea where to find the commits related to the change log entry? (Note that I'm not disputing the issue is actually fixed, I'm just trying to improve my Github reading skills...)

  2. InfluxDB

    InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

    InfluxDB logo
  3. zlib-ng

    zlib replacement with optimizations for "next generation" systems.

    There are already active zlib forks (e.g. https://github.com/zlib-ng/zlib-ng), the problem is with having people move to them. It takes a lot of effort to move mindshare from the original version to a fork, there's some historical examples of it happening, but not a ton.

  4. fpc

    I wonder if FreePascal is affected

    Looks like they ported zlib to Pascal in 1998 and left it pretty much unchanged:

    https://gitlab.com/freepascal.org/fpc/source/-/blob/main/pac...

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • zlib-ng: zlib replacement with optimizations for "next generation" systems

    2 projects | news.ycombinator.com | 16 Mar 2025
  • Discord Reduced WebSocket Traffic by 40%

    2 projects | news.ycombinator.com | 20 Sep 2024
  • Show HN: Pzip- blazing fast concurrent zip archiver and extractor

    2 projects | news.ycombinator.com | 24 Sep 2023
  • Introducing zune-inflate: The fastest Rust implementation of gzip/Zlib/DEFLATE

    2 projects | /r/rust | 11 Feb 2023
  • Computing Adler32 Checksums at 41 GB/s

    2 projects | news.ycombinator.com | 4 Aug 2022

Did you know that C is
the 6th most popular programming language
based on number of references?