diff options
| author | Egbert Eich <eich@suse.com> | 2022-11-11 05:20:09 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-11-11 05:20:09 (GMT) |
| commit | 659bc99fd139e16fdf47b31b635f158b72e3f5a4 (patch) | |
| tree | 209e0fb468787b244359eb1b56e1dd72689316e9 /src/H5Faccum.c | |
| parent | 99487d9e45c8245a829f18a060fa472d0422edbb (diff) | |
| download | hdf5-659bc99fd139e16fdf47b31b635f158b72e3f5a4.zip hdf5-659bc99fd139e16fdf47b31b635f158b72e3f5a4.tar.gz hdf5-659bc99fd139e16fdf47b31b635f158b72e3f5a4.tar.bz2 | |
Make H5O__fsinfo_decode() more resilient to out-of-bound reads. (#2229)
When decoding a file space info message in H5O__fsinfo_decode() make
sure each element to be decoded is still within the message. Malformed
hdf5 files may have trunkated content which does not match the
expected size. Checking this will prevent attempting to decode
unrelated data and heap overflows. So far, only free space manager
address data was checked before decoding.
This fixes CVE-2021-45830 / Bug #2228.
Signed-off-by: Egbert Eich <eich@suse.com>
Additions
Co-authored-by: Larry Knox <lrknox@hdfgroup.org>
Diffstat (limited to 'src/H5Faccum.c')
0 files changed, 0 insertions, 0 deletions