diff options
| author | Binh-Minh Ribler <bmribler@hdfgroup.org> | 2020-08-02 20:32:08 (GMT) |
|---|---|---|
| committer | Binh-Minh Ribler <bmribler@hdfgroup.org> | 2020-08-02 20:32:08 (GMT) |
| commit | 127fb757f815187865e9f14947ed43987a8a47cc (patch) | |
| tree | 0922b06b0731c474dca9cbfc598800a813ccd3e5 /src/H5Oname.c | |
| parent | ece92e9d8e336aa3dcec0e53132fb5871d5ce695 (diff) | |
| download | hdf5-127fb757f815187865e9f14947ed43987a8a47cc.zip hdf5-127fb757f815187865e9f14947ed43987a8a47cc.tar.gz hdf5-127fb757f815187865e9f14947ed43987a8a47cc.tar.bz2 | |
Fix HDFFV-11120 and HDFFV-11121 (CVE-2018-13870 and CVE-2018-13869)
Description:
When a buffer overflow occurred because a name length was corrupted
and became very large, h5dump produced a segfault on one file and a
memcpy parameter overlap on another file. This commit added checks
that detect a read pass the end of the buffer to prevent these error
conditions.
Platforms tested:
Linux/64 (jelly)
Diffstat (limited to 'src/H5Oname.c')
0 files changed, 0 insertions, 0 deletions