diff options
| author | Dana Robinson <43805+derobins@users.noreply.github.com> | 2023-08-31 23:30:50 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-08-31 23:30:50 (GMT) |
| commit | 2e361e40eeeac9534c60b7c8aebf6be8601154f8 (patch) | |
| tree | 56828d63fdc04b53a65e7c87a4ec488ad8cc7641 /release_docs | |
| parent | 1ddc2e906ac59d3916ec23a2400227654ccde4dd (diff) | |
| download | hdf5-2e361e40eeeac9534c60b7c8aebf6be8601154f8.zip hdf5-2e361e40eeeac9534c60b7c8aebf6be8601154f8.tar.gz hdf5-2e361e40eeeac9534c60b7c8aebf6be8601154f8.tar.bz2 | |
Revert "Fix CVE-2018-11202 (#3452)" (#3478)
This reverts commit 1ddc2e906ac59d3916ec23a2400227654ccde4dd.
This CVE fix triggers a difficult to reproduce Java test error. This may
be due to uninitialized bytes in the 128 bit float test that precedes
it.
Diffstat (limited to 'release_docs')
| -rw-r--r-- | release_docs/RELEASE.txt | 14 |
1 files changed, 0 insertions, 14 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt index 5dc8bf5..668c648 100644 --- a/release_docs/RELEASE.txt +++ b/release_docs/RELEASE.txt @@ -135,20 +135,6 @@ Bug Fixes since HDF5-1.10.10 release =================================== Library ------- - - Fixed CVE-2018-11202 - - A malformed file could result in chunk index memory leaks. Under most - conditions (i.e., when the --enable-using-memchecker option is NOT - used), this would result in a small memory leak and and infinite loop - and abort when shutting down the library. The infinite loop would be - due to the "free list" package not being able to clear its resources - so the library couldn't shut down. When the "using a memory checker" - option is used, the free lists are disabled so there is just a memory - leak with no abort on library shutdown. - - The chunk index resources are now correctly cleaned up when reading - misparsed files and valgrind confirms no memory leaks. - - Fixed an assertion in a previous fix for CVE-2016-4332 An assert could fail when processing corrupt files that have invalid |