All pull requests

Pull requests

• cli: refuse following symlinks when opening output files (fixes #1462)

  #1582·jdymitarai opened Oct 10, 2026·

  ·

• fix(java): reject negative distances on extraBits decoding path

  #1581·reginaldalfret opened Oct 9, 2026·

  ·
  1

• Enable shared dictionary for quality 4 hasher H54.

  #1580·copybara-service[bot] opened Oct 6, 2026Bot·

  ·
  1

• CMake: honor bundled mode when installing man pages

  ready to pull
  #1579·fhgffy opened Oct 5, 2026·

  ·

• enc: guard command buffer allocation and hash table size against integer overflow (fixes #1565)

  #1574·jdymitarai opened Oct 5, 2026·

  ·
  1

• cli: make -o / --output mark the output as set

  #1573·kwy404 opened Oct 2, 2026·

  ·

• Guard size_t overflow in HQ match buffer and encoder sizing

  #1566·rwinkelman opened Sep 28, 2026·2 tasks·

  ·
  2

• Validate dictionary blobs in EncoderJNI attach/destroy paths

  #1564·VIRUSBABAA opened Sep 26, 2026·

  ·
  1

• Validate prepared-dictionary blob in EncoderJNI.nativeAttachDictionary (heap OOB read)

  #1563·VIRUSBABAA opened Sep 26, 2026·

  ·
  1

• Fix heap OOB read in EncoderJNI: validate push length against input buffer capacity

  #1562·VIRUSBABAA opened Sep 26, 2026·

  ·
  1

• cli: fix brcat handling of multiple input files

  #1555·1234binpig opened Sep 23, 2026·

  ·
  1

• cli: print successful help to stdout

  #1554·1234binpig opened Sep 22, 2026·

  ·
  1

  1

• Fix out-of-bounds array read in NextFile when skipping options

  #1553·filtede98 opened Sep 21, 2026·

  ·
  1

• Add StreamOffset to cbrotli WriterOptions

  #1542·eatonphil opened Sep 9, 2026·

  ·

• Call the lazy static initializer from EnsureStaticInit

  #1539·lenamonj opened Sep 6, 2026Contributor·

  ·
  4

• CLI: refuse an output path that names the input file

  #1538·lenamonj opened Sep 6, 2026Contributor·

  ·
  2

• Fix compound dictionary range checks in language ports

  #1536·srkyn opened Sep 5, 2026·

  ·

• enc: also try the two-pass fast encoder before falling back to raw storage (fixes #1485)

  #1529·tvost2 opened Sep 1, 2026Contributor·

  ·
  1

• fix(java): reject encoder push length exceeding input buffer capacity

  #1524·3412-cloud opened Aug 22, 2026·

  ·
  2

• Add dual-tier Base64 block deduplication to the Brotli encoder, improving compression ratio and throughput on payloads containing repeated inline Base64 assets.

  #1521·copybara-service[bot] opened Aug 14, 2026Bot·

  ·
  1

• Do not read ISUNCOMPRESSED after a metadata meta-block

  ready to pull
  #1518·mohass1927 opened Aug 9, 2026·

  ·
  3

• java: allow bounding decoder output to mitigate decompression bombs

  #1499·hyperxpro opened Jun 27, 2026Contributor·

  ·
  1

• dec: core security hardening against memory validation and resource flaws

  #1497·owvr27 opened Jun 20, 2026·

  ·

• ci: pin bazel-contrib/publish-to-bcr to full commit SHA

  #1496·XananasX7 opened Jun 14, 2026·

  ·
  1

• Protect encoder wrapper against concurrent closing

  #1493·copybara-service[bot] opened Jun 4, 2026Bot·

  ·