diff options
| author | Egbert Eich <eich@suse.de> | 2022-11-09 18:25:11 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-11-09 18:25:11 (GMT) |
| commit | 18c438bdf0be8ad98f968bb77b327d7a3f17a3f5 (patch) | |
| tree | 25bb66ad54786a0fe6c680850cff403debad6ae5 /src/H5private.h | |
| parent | adc467992e30c89d731b70f1daf789e7385dce42 (diff) | |
| download | hdf5-18c438bdf0be8ad98f968bb77b327d7a3f17a3f5.zip hdf5-18c438bdf0be8ad98f968bb77b327d7a3f17a3f5.tar.gz hdf5-18c438bdf0be8ad98f968bb77b327d7a3f17a3f5.tar.bz2 | |
H5O__pline_decode() Make more resilient to out-of-bounds read (#2210)
Malformed hdf5 files may have trunkated content which does not match
the expected size. When this function attempts to decode these it may
read past the end of the allocated space leading to heap overflows
as bounds checking is incomplete.
Make sure each element is within bounds before reading.
This fixes CVE-2019-8396 / HDFFV-10712 / github bug #2209.
Signed-off-by: Egbert Eich <eich@suse.com>
Signed-off-by: Egbert Eich <eich@suse.com>
Diffstat (limited to 'src/H5private.h')
| -rw-r--r-- | src/H5private.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/H5private.h b/src/H5private.h index 2ed55bb..78df3fd 100644 --- a/src/H5private.h +++ b/src/H5private.h @@ -1415,6 +1415,9 @@ H5_DLL H5_ATTR_CONST int Nflock(int fd, int operation); #ifndef HDstrlen #define HDstrlen(S) strlen(S) #endif +#ifndef HDstrnlen +#define HDstrnlen(S, L) strnlen(S, L) +#endif #ifndef HDstrncat #define HDstrncat(X, Y, Z) strncat(X, Y, Z) #endif |