Aquesta és una versió anterior. La versió actual és la 0.15.0. zxc 0.15.0 · Data de publicació:
Fitxers d’instal·lació 0.14.1
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | ZIP → Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
# Release Notes
v0.14.1 is a hardening release：every decode path got stricter, block decompression is **10-13 % faster**, reusable contexts reach all five wrappers, and seekable archives can verify per-block checksums.
**Drop-in for v0.14.0.** Same format v8, byte-identical output at every level (verified on Silesia), soname still `libzxc.so.4`. One symbol added, `zxc_seekable_set_checksum`; none removed or changed.
## Decoder hardening
• **A forged block size passed off a truncated decode as success (#428).** A payload size spanning the EOF marker made the frame walk run off the archive and return what it had, with checksums off (the default). A data block's payload can no longer exceed the header's block size, the walk must end on the EOF block, and a seek-table entry spans at most one block. The check sits in the block decoder shared by every reader. Both rules are now normative in `FORMAT.md`.
• **Stack address stored in heap memory (#429).** Multi-threaded seekable jobs held the caller's output pointer. This was harmless, since workers are joined before return, but a scanner can't prove that. Jobs now carry offsets from one base pointer on the caller's stack.
• **`zxc_stream_decompress` ignored the dictionary size limit (#430).** A dictionary above `ZXC_DICT_SIZE_MAX` was accepted, or rejected with a misleading `ZXC_ERROR_DICT_MISMATCH`. The check moved into the shared stream engine.
• **Contexts (#417, #422).** Static contexts reject oversized blocks up front. An empty input through a context now yields the canonical 36-byte archive, like the one-shot API.
## API
• **Reusable contexts in every wrapper (#424, #414, #415).** `Cctx` and `Dctx` now ship in Rust, Go, Python, Node.js and WASM. A dictionary given to the factory applies to every call that doesn't override it. The block API also takes a dictionary's shared literal Huffman table (#415), so small blocks no longer spend bytes describing their own.
• **Seekable checksum verification (#425).** `zxc_seekable_decompress_range` can verify per-block checksums through `zxc_seekable_set_checksum`. It is **off by default** and exposed in all five wrappers.
Also fixed：an overflowing offset plus length slipped past the bounds check, and an incomplete range returned a silent partial read instead of `ZXC_ERROR_CORRUPT_DATA`.
## CLI
• **`-l` and `-t` read checksum status from the `HAS_CHECKSUM` header flag (#435).** `-j` adds `checksum_method`; exit codes are unchanged. Thanks to @Vladexy88x for the fix.
## Performance
• **`zxc_decompress_block` writes straight to the destination (#418).** Given the `zxc_decompress_block_bound()` capacity, it skips the bounce-buffer copy and runs **10-13 % faster**, from 64 KB to 2 MB blocks (Apple M3, level 3, Silesia). An exact-size destination falls back to the bounce buffer instead of failing with `ZXC_ERROR_OVERFLOW`.
## Build & Packaging
• Trusted publishing for the release workflows (#421), replacing long-lived tokens.
• Rapidhash is resolved at configure time (#420). The vendored copy is used unless `-DZXC_USE_SYSTEM_RAPIDHASH=ON`, and a missing copy fails at configure rather than mid-build. Thanks to @jeanga for the issue.
• Wrapper packaging and release integrity tightened (#409). Publish jobs no longer install an unpinned global npm (#426, #427).
• One seeded checksum entry point (#423), tidier nudge tuning macros (#412), and SARIF uploads skipped on fork PRs.
## Documentation
`FORMAT.md` gains the two decoder rules and the dictionary ID derivation (#413)：a 32-bit value that binds a dictionary to an archive without authenticating it. The Rust crate's `zxc-compress` / `zxc` naming is clarified (#410), with README refinements (#408).
## Changelog
• api：Enforces strict block size and EOF validation (#428)
• api：Implements reusable compression contexts (#424)
• api：Enhances seekable API with checksum control and robust range validation (#425)
• api：Fix empty frame compression in contexts (#422)
• api：Enforce strict block size bounds for static decompression contexts (#417)
• api：Adds shared literal table support to block API (#415)
• api：Extends dictionary support for reusable contexts (#414)
• api：Refines README documentation (#408)
• perf：Optimizes block decompression for direct and flexible output (#418)
• cli：Report checksum presence from the archive header in -l and -t (#435)
• build：Migrate release workflows to trusted publishing (#421)
• build：Enforce rapidhash resolution at configure/setup time (#420)
• build：Resolve dependency resolution in wrapper test (#410) (#411)
• build：Enhances wrapper packaging and release integrity (#409)
• doc：Clarify crate branding and improve documentation metadata (#410)
• misc：Compile library objects separately for fuzzers (#440)
• misc：Add fuzzer for streaming API (#443)
• misc：Skip SARIF uploads for fork pull requests
• misc：Enforce dictionary size limits on decompression path (#430)
• misc：Prevent stack memory escape in multi-threaded decompression (#429)
• misc：Drop unpinned global npm install from publish job (#426)
• misc：Drop unpinned global npm install from publish job (#427)
• misc：Consolidates checksums (#423)
• misc：Formalizes dictionary ID calculation and enhances fuzzer (#ossf-557281704) (#413)
• misc：Tidy the nudge tuning macros (#412)
Full Changelog：[v0.14.0...v0.14.1](https://github.com/hellobertrand/zxc/compare/v0.14.0...v0.14.1)
