Update Zlib to version 1.2.8

third_party/zlib/contrib/minizip/mztools.c

 /*
   Additional tools for Minizip
   Code: Xavier Roche '2004
   License: Same as ZLIB (www.gzip.org)
 */
 
 /* Code */
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ skipping 24 matching lines @@
 uLong* bytesRecovered;
 {
   int err = Z_OK;
   FILE* fpZip = fopen(file, "rb");
   FILE* fpOut = fopen(fileOut, "wb");
   FILE* fpOutCD = fopen(fileOutTmp, "wb");
   if (fpZip != NULL &&  fpOut != NULL) {
     int entries = 0;
     uLong totalBytes = 0;
     char header[30];
-    char filename[256];
+    char filename[1024];
     char extra[1024];
     int offset = 0;
     int offsetCD = 0;
     while ( fread(header, 1, 30, fpZip) == 30 ) {
       int currentOffset = offset;
 
       /* File entry */
       if (READ_32(header) == 0x04034b50) {
         unsigned int version = READ_16(header + 4);
         unsigned int gpflag = READ_16(header + 6);
@@ skipping 10 matching lines @@
         /* Header */
         if (fwrite(header, 1, 30, fpOut) == 30) {
           offset += 30;
         } else {
           err = Z_ERRNO;
           break;
         }
 
         /* Filename */
         if (fnsize > 0) {
-          if (fread(filename, 1, fnsize, fpZip) == fnsize) {
-            if (fwrite(filename, 1, fnsize, fpOut) == fnsize) {
-              offset += fnsize;
+          if (fnsize < sizeof(filename)) {
+            if (fread(filename, 1, fnsize, fpZip) == fnsize) {
+                if (fwrite(filename, 1, fnsize, fpOut) == fnsize) {
+                offset += fnsize;
+              } else {
+                err = Z_ERRNO;
+                break;
+              }
             } else {
               err = Z_ERRNO;
               break;
             }
           } else {
             err = Z_ERRNO;
             break;
           }
         } else {
           err = Z_STREAM_ERROR;
           break;
         }
 
         /* Extra field */
         if (extsize > 0) {
-          if (fread(extra, 1, extsize, fpZip) == extsize) {
-            if (fwrite(extra, 1, extsize, fpOut) == extsize) {
-              offset += extsize;
+          if (extsize < sizeof(extra)) {
+            if (fread(extra, 1, extsize, fpZip) == extsize) {
+              if (fwrite(extra, 1, extsize, fpOut) == extsize) {
+                offset += extsize;
+                } else {
+                err = Z_ERRNO;
+                break;
+              }
             } else {
               err = Z_ERRNO;
               break;
             }
           } else {
             err = Z_ERRNO;
             break;
           }
         }
 
@@ skipping 165 matching lines @@
       }
       if (bytesRecovered != NULL) {
         *bytesRecovered = totalBytes;
       }
     }
   } else {
     err = Z_STREAM_ERROR;
   }
   return err;
 }