summaryrefslogtreecommitdiffstats
path: root/release_docs
diff options
context:
space:
mode:
authorVailin Choi <vchoi@hdfgroup.org>2020-07-17 19:27:12 (GMT)
committervchoi <vchoi@jelly.ad.hdfgroup.org>2020-07-21 17:57:12 (GMT)
commitccf4a92ec6c552400a1bb15c8d43f68a8592850f (patch)
tree2b8132642d72a7acababbbc164b3acb02b3f6b53 /release_docs
parent0ee5d676210291f784ce273ee34b1a7d383ec694 (diff)
downloadhdf5-ccf4a92ec6c552400a1bb15c8d43f68a8592850f.zip
hdf5-ccf4a92ec6c552400a1bb15c8d43f68a8592850f.tar.gz
hdf5-ccf4a92ec6c552400a1bb15c8d43f68a8592850f.tar.bz2
Merge pull request #2693 in HDFFV/hdf5 from ~VCHOI/my_third_fork:bugfix/HDFFV-11080-heap-use-after-free-by-the-call to develop
* commit '3023b34272cc6ada84aebfa7441a6a55afa3621c': Update MANIFEST. Add new test to Cmake. Fix for jira issue HDFFV-11080: (1) Patch up the file pointer when reading attribute of variable length datatype (2) Test to verify the fix when doing multiple threads
Diffstat (limited to 'release_docs')
-rw-r--r--release_docs/RELEASE.txt14
1 files changed, 14 insertions, 0 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt
index f76f2e5..9d1eab1 100644
--- a/release_docs/RELEASE.txt
+++ b/release_docs/RELEASE.txt
@@ -342,6 +342,20 @@ Bug Fixes since HDF5-1.10.5 release
Library
-------
+ - Fixed the segmentation fault when reading attributes with multiple threads
+
+ It was reported that the reading of attributes with variable length string
+ datatype will crash with segmentation fault particularly when the number of
+ threads is high (>16 threads). The problem was due to the file pointer that
+ was set in the variable length string datatype for the attribute. That file
+ pointer was already closed when the attribute was accessed.
+
+ The problem was fixed by setting the file pointer to the current opened file pointer
+ when the attribute was accessed. Similar patch up was done before when reading
+ dataset with variable length string datatype.
+
+ (VC - 2020/07/13, HDFFV-11080)
+
- Fixed CVE-2018-17435
The tool h52gif produced a segfault when the size of an attribute