合并受阻
wu-jinpeng981212start build
首次触发
门禁构建开始,包含静态检查、代码编译和测试【hispark_taurus_Linux编译, ohos-sdk编译, dayu200_tdd编译, dayu200编译, hispark_taurus_LiteOS测试, hispark_taurus_LiteOS编译, dayu200测试】,预计在60分钟内完成,门禁结果会同步发送到注册邮箱。您可以通过如下链接跟踪门禁进展:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d887864650f998bddae71/runlist
OpenHarmony-6.1-Release所有代码仓合入受控, 请联系分支负责人@aiyongfu: aiyongfu@huawei.com, @shermanzhong: sherman.zhong@huawei.com, @lijie2025: lijie6@huawei.com, @RayShih: shirui721@huawei.com, @amy_mayun: zhuyanting@huawei.com, @huster_zwy: zhaowenyuan2_huawei.com, @chengongping: chengongping@huawei.com任一人评审并评论approve
感谢提交 Pull Requests！如果您提交的PR已经开发完毕，请评论 "start build" 触发门禁，更多交互操作，请访问OpenHarmony社区支持命令清单。如果需要调整订阅PR、Issue的变更状态，请访问订阅链接。
Thanks for submitting the pull request. If your Pull Request has already been developed, you can leave a "start build" comment to trigger the gated system. For more commands, please visit OpenHarmony Command List. If you need to change the subscription of a Pull Request or Issue, please visit the link.
代码门禁通过
您可以通过如下链接查看门禁报告:http://dcp.openharmony.cn/workbench/cicd/detail/6a8d887864650f998bddae71/runlist
静态检查:
| # | check type | result | report |
|---|---|---|---|
| 1 | codeCheck | pass | >>> |
编译测试:
| # | Device | build result | test result | package |
|---|---|---|---|---|
| 1 | hispark_taurus_LiteOS | success | success | >>> |
| 2 | hispark_taurus_Linux | success | NA | >>> |
| 3 | ohos-sdk | success | NA | >>> |
| 4 | dayu200 | success | success | >>> |
| 5 | dayu200_tdd | success | NA | >>> |
您好，Committer @wang19954 @wanghang904 @hanfeng6 @hustautumn2025 ，请分配检视人员检视该PR，可以通过命令"assign [@someone_id]"分配检视人员，也可以直接评论"assign"分配给自己进行检视。
Hello, Committer @wang19954 @wanghang904 @hanfeng6 @hustautumn2025 . Please assign someone to review the PR. You can assign a reviewer by using the command "assign [@someone_id]", or you can comment "assign" to review the PR by yourself.
closes #236
Backport of the zlib 1.3.2 fix for CVE-2026-27171 onto this branch (vendored 1.3.1).
Vulnerability:
x2nmodp()had no negative-n guard; a negative len2 throughcrc32_combine64()/crc32_combine_gen64()drovewhile(n) n >>= 1without terminating (right-shift of a negative value never reaches zero) → unbounded CPU consumption (7ASECURITY audit).Complete fix shape (1 file):
crc32_combine64()/crc32_combine_gen64():if (len2 < 0) return 0;x2nmodp()returnsuLong; documented "n must not be negative"braid()result cast toz_crc_t;crc32_z()castlasttointReachability: crc32.c ships in libz (BUILD.gn static+shared).
DCO Signed-off-by present. Same fix already proposed for master (see the master PR).
Upstream: https://github.com/madler/zlib/releases/tag/v1.3.2
(generated by ohos-cve-autofix)