chai min

minizip has two risks

3

1. zip.c line 1962 ```c if(pData == NULL || *dataLen < 4) // NULL pointer deference, dataLen could be NULL ``` 2. unzip.c line 1569 and line 1589 ```c TRYFREE(pfile_in_zip_read_info);...

TRYFREE macro should be used here

1

```c // zip.c // Line 1136 zi->ci.central_header = (char*)ALLOC((uInt)zi->ci.size_centralheader + zi->ci.size_centralExtraFree); // Line 1700 free(zi->ci.central_header); ``` ALLOC -> malloc **OR** free -> TRYFREE?

this problem occurs after [commit](https://github.com/madler/zlib/commit/0530dbcef992b56b88a6bfd0fd2efa868669d04e) ```(void)opaque;``` should be placed after all variable declarations

File 'deflate.c' Lines executed:80.15% of 786 File 'trees.c' Lines executed:85.38% of 260

Do CVE-2023-30631 and CVE-2023-33933 affect version 7.1.x?

1

I compared the code for 7.1.8 and 8.1.6, and the code difference near the bug fix is very small.

依赖软件golang.org/x/text有安全漏洞，需要升级

1

https://nvd.nist.gov/vuln/detail/CVE-2022-32149 此漏洞影响 golang.org/x/text < 0.3.8的版本，当前go-chassis最新版本依赖 golang.org/x/text 0.3.7

`https://github.com/bcgit/bc-java/wiki/CVE-2023-33202` Return to the wiki homepage `https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902023%E2%80%9033202` ok

using 指示的例子错误

3

当前是 ```c++ using namespace_name name; ``` 应该修改为 ```c++ using namespace namespace_name; ``` 比如： ```c++ using namespace std; ```