当前Pull Request已关闭, 关闭人@wu-jinpeng981212
start build


首次触发
门禁构建开始,包含静态检查、代码编译和测试【hispark_taurus_Linux_5.1.0-Release编译, hispark_taurus_LiteOS_5.1.0-Release测试, ohos-sdk_5.1.0-Release编译, dayu200_5.1.0-Release测试, dayu200_tdd_5.1.0-Release编译, hispark_taurus_LiteOS_5.1.0-Release编译, dayu200_5.1.0-Release编译, dayu200_xts_5.1.0-Release编译】,预计在60分钟内完成,门禁结果会同步发送到注册邮箱。您可以通过如下链接跟踪门禁进展:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d886764650f998bdda721/runlist


感谢提交 Pull Requests!如果您提交的PR已经开发完毕,请评论 "start build" 触发门禁,更多交互操作,请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态,请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.


代码门禁通过
您可以通过如下链接查看门禁报告:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d886764650f998bdda721/runlist
静态检查:
| # | check type | result | report |
|---|---|---|---|
| 1 | codeCheck | pass | >>> |
编译测试:
| # | Device | build result | test result | package |
|---|---|---|---|---|
| 1 | hispark_taurus_LiteOS_5.1.0-Release | success | success | >>> |
| 2 | hispark_taurus_Linux_5.1.0-Release | success | NA | >>> |
| 3 | ohos-sdk_5.1.0-Release | success | NA | >>> |
| 4 | dayu200_5.1.0-Release | success | success | >>> |
| 5 | dayu200_xts_5.1.0-Release | success | NA | >>> |
| 6 | dayu200_tdd_5.1.0-Release | success | NA | >>> |


您好,Committer @wang19954 @wanghang904 @hanfeng6 @hustautumn2025 ,请分配检视人员检视该PR,可以通过命令"assign [@someone_id]"分配检视人员,也可以直接评论"assign"分配给自己进行检视。
Hello, Committer @wang19954 @wanghang904 @hanfeng6 @hustautumn2025 . Please assign someone to review the PR. You can assign a reviewer by using the command "assign [@someone_id]", or you can comment "assign" to review the PR by yourself.


closes #234
Backport of the zlib 1.3.2 fix for CVE-2026-27171 onto this branch (vendored 1.3.1).
Vulnerability:
x2nmodp()had no negative-n guard; a negative len2 throughcrc32_combine64()/crc32_combine_gen64()drovewhile(n) n >>= 1without terminating (right-shift of a negative value never reaches zero) → unbounded CPU consumption (7ASECURITY audit).Complete fix shape (1 file):
crc32_combine64()/crc32_combine_gen64():if (len2 < 0) return 0;x2nmodp()returnsuLong; documented "n must not be negative"braid()result cast toz_crc_t;crc32_z()castlasttointReachability: crc32.c ships in libz (BUILD.gn static+shared).
DCO Signed-off-by present. Same fix already proposed for master (see the master PR).
Upstream: https://github.com/madler/zlib/releases/tag/v1.3.2
(generated by ohos-cve-autofix)