diff options
| author | Vailin Choi <vchoi@hdfgroup.org> | 2020-07-23 22:22:34 (GMT) |
|---|---|---|
| committer | Vailin Choi <vchoi@hdfgroup.org> | 2020-07-23 22:22:34 (GMT) |
| commit | 0a8408a3f916cedb63be28380038696dd662e3ca (patch) | |
| tree | c113e4569460988325f4b83e2fafe40f00c75971 /release_docs | |
| parent | a5f61c36aea198cc99c593e4c87e7bd8bcfbd201 (diff) | |
| parent | 2d7a23887a6c5121b4dac858a50792a18087c5bf (diff) | |
| download | hdf5-0a8408a3f916cedb63be28380038696dd662e3ca.zip hdf5-0a8408a3f916cedb63be28380038696dd662e3ca.tar.gz hdf5-0a8408a3f916cedb63be28380038696dd662e3ca.tar.bz2 | |
Merge pull request #2708 in HDFFV/hdf5 from ~VCHOI/my_third_fork:bugfix/18_HDFFV-11080-heap-use-after-free-by-the-call to hdf5_1_8
* commit '2d7a23887a6c5121b4dac858a50792a18087c5bf':
Incorporate pull request #2693 from develop for the fix to HDFFV-11080: (1) Patch up the file pointer when reading attribute of variable length datatype (2) Test to verify the fix when doing multiple threads (3) Update MANIFEST (4) Add new test to Cmake
Diffstat (limited to 'release_docs')
| -rw-r--r-- | release_docs/RELEASE.txt | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt index 7c5d245..0a1a3bb 100644 --- a/release_docs/RELEASE.txt +++ b/release_docs/RELEASE.txt @@ -354,6 +354,20 @@ Bug Fixes since HDF5-1.8.21 Library ------- + - Fixed the segmentation fault when reading attributes with multiple threads + + It was reported that the reading of attributes with variable length string + datatype will crash with segmentation fault particularly when the number of + threads is high (>16 threads). The problem was due to the file pointer that + was set in the variable length string datatype for the attribute. That file + pointer was already closed when the attribute was accessed. + + The problem was fixed by setting the file pointer to the current opened file pointer + when the attribute was accessed. Similar patch up was done before when reading + dataset with variable length string datatype. + + (VC - 2020/07/13, HDFFV-11080) + - Fixed CVE-2018-17435 The tool h52gif produced a segfault when the size of an attribute |