zip: Changelog

Version Message
1.22.4 - compatibility with 8.4
- add ZipArchive::ER_TRUNCATED_ZIP added in libzip 1.11
1.22.3 - fix GH-12661 (Inconsistency in ZipArchive::addGlob 'remove_path' Option Behavior)
1.22.2 - add ZipArchive::LENGTH_TO_END and ZipArchive::LENGTH_UNCHECKED constants with libzip 1.10.1
- use typed constants in 8.3
1.22.1 - add more tests
- ZipArchive::FL_RECOMPRESS constant is deprecated and will be removed in a future version of libzip
- add ZipArchive::FL_OPEN_FILE_NOW to open the file when added instead of waiting for archive to be closed
1.22.0 - compatibility with 8.3
- add new error macros (ER_DATA_LENGTH and ER_NOT_ALLOWED) with libzip >= 1.10.0
- add new archive global flags (ER_AFL_*) with libzip >= 1.10.0
- add ZipArchive::setArchiveFlag and ZipArchive::getArchiveFlag methods
1.21.1 - PHP 8.2 compatibility
1.21.0 - Fix GH-8781 #ZipArchive deletes zip file with no contents and doesn't update stat cache
- implement fseek for zip stream when possible with libzip 1.9.1
- Allow 8.2
1.20.1 - Fixed type for index in ZipArchive::replaceFile. (Martin Rehberger)
1.20.0 - Fix #81490 ZipArchive::extractTo() may leak memory. (cmb, Remi)
- Fix #77978 Dirname ending in colon unzips to wrong dir. (cmb)
- add ZipArchive::clearError() method (Remi)
- add ZipArchive::getStreamName() and ZipArchive::getStreamIndex methods (Remi)
1.19.5 - Fix #81420 ZipArchive::extractTo extracts outside of destination (CVE-2021-21706) (cmb)
1.19.4 - Fix #80833 ZipArchive::getStream doesn't use setPassword
1.19.3 - Fix #80648 Fix for bug 79296 should be based on runtime version (cmb, Remi)
- Fix #80863 ZipArchive::extractTo() ignores references. (cmb)
1.19.2 - only display libzip both headers/library versions if they differ
- report about ZSTD compression availability
- Raise E_WARNING on PHP related errors (PHP 8)
1.19.1 - encode parameter is optional (PHP 8)
- deprecate procedural API with PHP 8
- promote warning to exception (PHP 8)
- Fixed bug #79678 Build fails due to undeclared ZIP_RDONLY
- add ZipArchive::CM_ZSTD constant (since libzip 1.8.0)
1.19.0 - add ZipArchive::EM_TRAD_PKWARE and ZipArchive::EM_UNKNOWN constants
- Fix #79424 don't use gl_pathc after call to globfree (Max Rees)
- add ZipArchive::isCompressionMethodSupported() method (libzip 1.7.0)
- add ZipArchive::isEncryptionMethodSupported() method (libzip 1.7.0)
- initial PHP 8 support
1.18.2 - Fixed Bug #79296 ZipArchive::open fails on empty file with libzip 1.6.0.
1.18.1 - Implement #77960 add compression / encryption in ZipArchive::addGlob and
ZipArchive::addPattern options parameter which now accepts:
comp_method, comp_flags, enc_method and enc_password
1.18.0 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
- make status, statusSys properties and ZipArchive::getStatusString() method
available after archive is closed
- Fixed bug #72374 remove_path option strips first char of filename
- Fixed bug #50678 files extracted lost their original modified time
1.18.0RC6 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
- make status, statusSys properties and ZipArchive::getStatusString() method
available after archive is closed
- Fixed bug #72374 remove_path option strips first char of filename
- Fixed bug #50678 files extracted lost their original modified time
1.18.0RC5 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
- make status, statusSys properties and ZipArchive::getStatusString() method
available after archive is closed
- Fixed bug #72374 remove_path option strips first char of filename
- Fixed bug #50678 files extracted lost their original modified time
1.18.0RC4 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
- make status, statusSys properties and ZipArchive::getStatusString() method
available after archive is closed
- Fixed bug #72374 remove_path option strips first char of filename
1.18.0RC3 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
- make status, statusSys properties and ZipArchive::getStatusString() method
available after archive is closed
1.18.0RC2 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
- add lastId property to ZipArchive
1.18.0RC1 - add ZipArchive::FL_RECOMPRESS, FL_ENCRYPTED, FL_OVERWRITE, FL_LOCAL,
FL_CENTRAL constants
- add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and
addFromString methods
- add "flags" options to ZipArchive::addGlob and addPattern methods,
keeping previous behavior having FL_OVERWRITE by default
- add ZipArchive::replaceFile() method
1.17.2 - fix #79315 ZipArchive::addFile doen't honor start/length parameters
1.17.1 - add ZipArchive::RDONLY constant (since libzip 1.0.0)
- fix #73119 Wrong return for ZipArchive::addEmptyDir method
1.17.0 - add ZipArchive::registerProgressCallback() method (since libzip 1.3.0)
- add ZipArchive::registerCancelCallback() method (since libzip 1.6.0)
- drop support for old PHP versions
1.16.1 - add ZipArchive::CM_XZ constant (since libzip 1.6.0)
- add ZipArchive::ER_* missing constants
- fix Windows build
1.16.0 - fix #78641 addGlob can modify given remove_path value
- add ZipArchive::CM_LZMA2 constant (since libzip 1.6.0)
- add ZipArchive::setMtimeName and ZipArchive::setMtimeIndex
- add ZipArchive::LIBZIP_VERSION constant
1.15.5 - Fix build with PHP 7.4
- Remove dead code
- Replace deprecated libzip functions
1.15.4 - Fixed Bug #76524 ZipArchive memory leak (OVERWRITE flag and empty archive)
- Fixed incorrrecr zval_dtor() usage to replace value of argument passed by reference, that may lead to memory leaks.
1.15.3 - Add OPSYS_CPM constant as documented
- Fix build with PHP 7.3
1.15.2 - fix bug #75540 Segfault with libzip 1.3.1 (double free)
- display headers (buildtime) and library (runtime) versions in phpinfo (libzip >= 1.3.1)
1.15.1 - fix segfault in php_stream_context_get_option call
1.15.0 - ZipArchive implements Countable, added ZipArchive::count() method
1.14.0 - Fix #70103: ZipArchive::addGlob ignores remove_all_path option (cmb)
- add ZipArchive::setEncryptionName and ZipArchive::setEncryptionIndex
methods available with libzip >= 1.2.0 (Remi)
- add encryption_method in statIndex/statName returned array (Remi)
- allow to set password in stream wrapper using context (Remi)
- Fix #73803: Reflection of ZipArchive does not show public properties (Remi)
- support for system libzip on Windows (Anatol)
- drop bundled libzip, only support system library (Remi)
1.13.5 - Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd). (Laruence)
- Fixed bug #68302 (impossible to compile php with zip support). (cmb)
- Fixed bug #70752 (Depacking with wrong password leaves 0 length files). (cmb)
1.13.4 - Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener). (Stas)
1.13.3 - Fixed bug #71923 (integer overflow in ZipArchive::getFrom*). (CVE-2016-3078) (Stas)
- Fixed bug #72258 (ZipArchive converts filenames to unrecoverable form). (Anatol)
- Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize). (Dmitry)
1.13.2 - Update bundled libzip to 1.1.2 (Remi, Anatol)
- Fixed bug #71561 (NULL pointer dereference in Zip::ExtractTo) (Stas)
- Format string fixes (Nikic)
- Remove TSRMLS_* from code, they are not used anymore (Stas)
- Fixed incorrect usage of HASH_OF() macro. (Dmitry)
1.13.1 - fix pecl installaton
1.13.0 - update bundled libzip to 1.0.1 (Remi, Anatol)
- new methods for ZipArchive:
setCompressionName, setCompressionIndex (Cedric Delmas)
- allow to build with PHP 7
- Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal
when creating directories). (neal at fb dot com)
- Fixed bug #70322 (ZipArchive::close() doesn't indicate errors). (cmb)
1.12.5 - add OPSYS_Z_CPM missing constant
- Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap boundary). (CVE-2015-2331) (Stas)
1.12.4 - bundled libzip version 0.11.2
- new methods for ZipArchive:
setExternalAttributesName, setExternalAttributesIndex,
getExternalAttributesName, getExternalAttributesIndex
1.12.3 - clean all uses of private libzip structure
- allow to build in php tree
1.12.2 - fix build with PHP 5.3
- add --with-libzip configure option to use system libzip
- move check before dereferencing ptr (Felipe)
- add LICENSE and LICENSE_libzip
- fix bug #64342 ZipArchive::addFile() has to check file existance
1.12.1 - fix build on some linux
- fix zip_set_file_compression
1.12.0 - Added setPassword method, support for crypted archives
. uncompress only
. AES and ZipCrypto
- fix VC9 builds (using bundled stdint)
- fix preprocessor bug for ZipArchive::close method being renamed to
_close on Windows
1.11.0 - Added Zip64 support (large file support)
- Added UTF-8 support for file names, file comments, and archive comments
- Added zip_discard()
- Added ZIP_TRUNCATE for zip_open()
- Added zip_set_file_compression()
1.10.2 - #49072, feof never returns true for damaged file in zip
- Fix possible crash when zip stream are used, the file entry stream was desroyed after the archive.
1.10.1 - #48763, ZipArchive produces corrupted archive (dani dot church at gmail dot com)
- Fixed regression in the overwrite mode
- Fixed binary mode with FCGI on Windows
1.9.0 - fix some memleaks and double-free()s on error conditions (Nuno Lopes)
- Add experimental support for addGlob and addPattern. They use respectively
glob or regexp patterns to add entries. They also accept options like remove_path
, add_path or remove_all_path. See the examples addglob and addpattern.php
- requires pcre
1.8.10 -Fixed build, missing macro
1.8.9 -Fixed a possible crash in the event directory cannot be created, due to a double free. (Ilia)
1.8.8 - PECL bug #10414, Fixed macros name in stream
- Fixed possible leak when open_basedir checks fail in extractTo (Ilia)
1.8.7 - Add missing openbasedir or safemode (php 5.x and 4.x) checks in zip:// stream or ZipArchive::open
- Fixed possible relative path issues in zip_open and TS mode (old API)
- rename SAFEMODE_CHECKFILE to OPENBASEDIR_CHECKPATH (no confusion when used wiht php6)
1.8.6 - Fixed possible leaks in zip_read() and zip_entry_read (old API)
- Fixed leak when an entry is 0 bytes length in ZipArchive::getFrom*() methods
- Use snprintf instead sprintf (Ilia, Marcus)
- Add examples images and odt in release
1.8.5 - Fixed leaks happening on error (Nuno Lopes)
- PHP bug #40228, extractTo does not create recursive empty path (empty1/empty2/)
1.8.4 - Use phplibdir in config.m4 (for lib64 or other custom location)
- Add path length sanity checks (Ilia, Tony)
- Update year, happy new year
1.8.3 - Fixed threadsafe issue with localtime function, it uses now the
php php_localtime_r (Ron Korving, Ilia)
1.8.2 - restore compatibility with php 5.1.0 to 5.1.2 (other versions are not affected)
1.8.1 - PECL #9278, Binary access issues on Windows in any SAPI but CGI, CLI and embed
(windows API does not respect "b" mode given to fopen)
- Fixed a possible leak in the entries managements (Nuno Lopes)
- createEmptyDir returns true one success
- Use static for each internal functions when possible (Nuno Lopes)
- Update protos in the sources
1.8.0 - Fixed a possible leak in statName and statIndex
- Added zipArchive::adEmptyDir() method, creates an empty directory
- Fixed setComment when used with a freshly added entry
- setComment now returns the expected value (boolean) (Hannes)
1.7.5 - PECL Bug #9082, wrong entry name like "a/b//file.txt" cannot be extracted on windows
A "bug" in php mkdir was the cause, a work around has been introduced for php versions before 5.2.0
1.7.4 - PHP Bug #38943, properties in extended class cannot be set
- PHP Bug #38944, freshly created archive has no comment or cdir
1.7.3 - PECL Bug #8700, zipArchive::getFromIndex fails
- PECL Bug #8676, zipArchive::addFile was not updated and still used VCWD_REALPATH, it now uses expand_filename
- Fixed wrong internal types for comment lenghts, does not affect userland script (Nuno Lopes)
1.7.2 - Previous release was broken in non threaded environment.
This release works smoothly in threaded and non threaded.
Thanks to "FamilleCollet dot com" (Fedora-Extra maintainer for the
head up)
1.7.1 - Fix issues with relative path in threaded environment,
VCWD_REALPATH is used in ZipArchive::open() and ::addFile
1.7.0 - Add ZIPARCHIVE::OVERWRITE mode for ::open(), creates a new
archive and write over an existing file
- locateName do not change anymore the state, it can now be used to test an entry
- fix possilbe crashes when two entries with the same name have been added
- Enhanced safemode support
- fix builds against php 6.0 (HEAD)
- fix compiler warning (Ilia, Tony)
- cleanup phpinfo() output (Ilia)
1.6.0 - Rename Class Zip to ZipArchive, required to be bundled
in php 5.2.0 (Zip being a ZipCode in US), making the role of
this class more obvious *Gah*
1.5.0 - bring consistency to the method names:
- rename zip::delete() to deleteIndex()
- add zip::deleteName()
- rename zip::statPath to zip::statName()
- rename zip::rename to zip::renameIndex()
- add zip::renameName();
- add zip::locateName(), returns the index of an entry, allows case insensitive
or directory free lookup (ZIP::FL_NOCASE, ZIP::FL_NODIR)
- add zip::unchangeName(), ::unchangeIndex(), unchangeAll() and unchangeArchive()
revert changes to an entry, to all entries or the archive
- add zip::getNameIndex(), get the name of the entry at the given position
- Bug #7658, Modify zip archives causes corruption if the data descriptor is used
(bit 3 of the general flags)
- fix a bug when in the delete and rename methods when the index is lower than 1
- zip::addFile() must return true on success
- zip::open() returns now the error code on error and true on success
1.4.1 - Add missing files in the package release
1.4.0 - Add write mode to the archive comment (zip::comment property)
- Add zip::setCommentName and ::setCommentIndex, add or remove entrie comment
- Add zip::getCommentName and ::getCommentIndex, get an entrie comment
- Add zip::setArchiveComment
- Full sync with zip-0.7.1
- #8009, modify archives on windows cannot be closed
1.3.1 - #7500, Fix build with php 5.1.0, 5.1.1 and 5.1.2
1.3.0 - Fix possible leak with __set/__get in classes extending the Zip
intern object (tony2001[at]php.net)
- Added getFromName(), return the contents of an entry using its name
- Added getFromIndex(), return the contents of an entry using its index
1.2.3 - #7214, use binary safe string as return value, 0x00 was considered as
the end of the content, affected only the procedural API
1.2.2 - fix a bug in internal zip_close, new archives were not written
- ::open returns now false on error
- update the "create.php" example, status and returned codes are now checked
- fix a leak when the ::open method is called twice or more with the same
object
1.2.1 - fixed a possible build problem (mkstemp missing)
- fix a bug where extending the Zip class does allow
to write to a property, see php bugs #36743 (array)
1.2.0 - enable stream by default,
* use uri like zip:///path/to/my.zip#entryname.dat
(the URI format may change in future version)
- add support for print_r/var_dump (Zip object)
- add tests for the OO (still need more)
- add more example, like using xmlreader and zip
stream to parse OpenDocument meta info
1.1.2 - do not create empty file when a zip entry is only
a directory (empty or not)
1.1.1 - Fix PHP 5.1 detection at compiletie
- fix possible build errors with gcc other than 4.0.x
- add better zlib detection
- "--with-zlib-dir=[DIR]" added
1.1.0 - replace the old zip extensions
* 100% compatible with the old API
* added zip creation support (write mode)
* added OO interface
* Stream support, getStream method
returns a file handler
- bundled libzip and drop zzlib usage
(see http://www.nih.at/libzip/)