ZXing/zxing.git/javase/src, branch dependabot/github_actions/actions/setup-java-6

reject negative and overflowing crop in BufferedImageLuminanceSource (#2111)

2026-06-25T22:09:49+00:00

Validate crop rectangle for TYPE_BYTE_GRAY images in BufferedImageLuminanceSource (#2107)

2026-06-22T17:45:57+00:00

The crop-bounds check was only in the else branch, so TYPE_BYTE_GRAY images skipped it and an out-of-bounds crop was accepted, failing later with an ArrayIndexOutOfBoundsException instead of IllegalArgumentException. Hoist the check above the image-type branch so it applies to all images. Adds a test.

wrap invalid base64 as IOException in readDataURIImage (#2105)

2026-06-22T13:11:52+00:00

Fix QR decode failure for small/native-size images (#2061)

2026-04-08T03:40:49+00:00

* Fix QR decode failure for small/native-size images (#1976) QRCodeWriter.encode(..., 0, 0) produces a 33x33 native-size QR that ZXing cannot decode. The CENTER_QUORUM filter in selectBestPatterns() (added in 110ef9e to fix #1567) removes finder patterns with count < 2. For small images, the row-skip interval (iSkip=3, MIN_SKIP) means the scanner only crosses the top two finder pattern centers on a single row each, giving them count=1. The bottom-left pattern gets count=2 because it's scanned after iSkip drops to 2. The filter then removes the two count=1 patterns, leaving 1 of the 3 needed, and throws NotFoundException. The fix: only apply the CENTER_QUORUM filter when either (a) at least 3 confirmed patterns would survive, or (b) the total candidate list exceeds a size threshold. This preserves #1567 protection while allowing small images through. Why a size threshold: the filter was added to prevent O(n^3) blowup in the triangle-selection loop when noisy images produce thousands of spurious candidates. When the candidate list is small (<= 25 entries, yielding <= ~2300 loop iterations), the cubic cost is negligible regardless of whether the patterns are real or spurious. A clean single-QR image produces ~3 candidates; even a noisy image below the threshold is computationally trivial. Above the threshold, the filter applies unconditionally, matching today's behavior. Alternatives considered: - Removing the filter entirely: all 561 existing tests pass, but re-opens #1567 for pathological images with thousands of spurious count=1 candidates. - Reducing MIN_SKIP from 3 to 1 for small images: addresses the symptom (more scan rows = higher counts) but doesn't fix the fundamental interaction between iSkip and the quorum filter, and changes scan behavior for all small images. - Fallback (try with filter, retry without on failure): re-opens #1567 whenever fewer than 3 confirmed patterns exist, which is exactly the scenario that produces thousands of unconfirmed candidates in noisy images. * Increase noisy-image test timeout from 5s to 30s GitHub shared runners timed out at 5s. Local measurement shows ~1.2s, implying at least 4x slowdown on CI. 30s gives a comfortable margin while still catching the O(n^3) regression from #1567.

Prevent --raw CLR option from failing if result.getRawBytes() is null (#1683)

2023-09-07T01:58:06+00:00

Fixes https://github.com/zxing/zxing/issues/1682

javase/test/matrix: check format support (#1668)

2023-07-20T22:15:06+00:00

Use SwingUtilities to avoid deadlock in GUI mini app

2022-10-23T21:20:22+00:00

Set FEATURE_SECURE_PROCESSING when reading XML in HtmlAssetTranslator, just in case (#1482)

2022-01-14T14:43:05+00:00

Minor code style updates to MinimalEncoder and a few other files ; minor dep updates

2021-10-13T02:06:05+00:00

Enforce line length and indent in checkstyle (#1448)

2021-10-05T20:49:47+00:00