Vulnerability in unrar dll - updated dlls

[Axel]

Thank you for the info.

And where is the original source of the used "lzma.dll"s (32-/64-bit) used for "TCMDLZMA.DLL and "TCLZMA64.DLL"?
On Igor Pavlovs page I can only download "lzma.exe", but no dll...

I now expect you compile them yourself too?

[Fla$her]

This happens because you didn't set a path to rar.exe or winrar.exe in Configuration - Options - Packer.

It's a strange explanation. I shouldn't have to do this on a clean TC, especially considering that WinRAR might not be installed at all. As for my build, I've already mentioned that I have the path to Rar.exe specified.

I will completely remove the loading of unrar.dll from other folders than the program folder, it could load an old unrar dll.

Good.

1. Does the loading of the unrar9x.dll work when you rename or delete the unrar.dll in the path?
2. When you rename or remove unrar9x.dll too, does TC use tc7z.dll now?

1. Yes.
2. Yes.

I was looking for this file not just for nothing, but specifically for these tests.

[ghisler(Author)]

And where is the original source of the used "lzma.dll"s (32-/64-bit) used for "TCMDLZMA.DLL and "TCLZMA64.DLL"?
On Igor Pavlovs page I can only download "lzma.exe", but no dll...

It's also on https://www.7-zip.org/download.html under the name "LZMA SDK: (C, C++, C#, Java)".
Unfortunately it's only version 25.00, so I updated the few changed files from "7-Zip Source code" 25.01 from the same page.

[Dalai]

2ghisler(Author)
The up-to-date one is here: https://www.7-zip.org/sdk.html

[ghisler(Author)]

Thanks, that's identical to what I put together myself.

[Axel]

Thanks @ghisler and @Dalai, but in the mentioned downloads I can't see any DLLs, just EXEs?

[Dalai]

2Axel
Well, you asked for the original source for the DLL, and it's exactly that. There doesn't seem to be a pre-compiled lzma.dll as far as I can see.

[ghisler(Author)]

Moderator message from: ghisler(Author) » 2025-10-12, 07:40 UTC

Moved to fixed bugs