diff options
| author | Dana Robinson <43805+derobins@users.noreply.github.com> | 2021-08-12 12:21:50 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-08-12 12:21:50 (GMT) |
| commit | b5c66529e9709839f336d2b6f0d453139a0744b5 (patch) | |
| tree | 9926fba600f73eb479127773fd9a5dfe5e799b1c /test/cve_2020_10810.h5 | |
| parent | 7c918e685fea4d58b632389999f092b1f4b33d17 (diff) | |
| download | hdf5-b5c66529e9709839f336d2b6f0d453139a0744b5.zip hdf5-b5c66529e9709839f336d2b6f0d453139a0744b5.tar.gz hdf5-b5c66529e9709839f336d2b6f0d453139a0744b5.tar.bz2 | |
Fixes a bad memory read and unfreed memory in fsinfo code (#893)
* Fixes a bad memory read and unfreed memory in fsinfo code
The segfaul from CVE-2020-10810 was fixed some time ago, but the
illegal memory read and unfreed memory were not.
This fix tracks some buffer sizes and errors out gracefully on errors,
ensuring buffers are cleaned up and avoiding the H5FL infinite loop +
abort on library close.
* Committing clang-format changes
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Diffstat (limited to 'test/cve_2020_10810.h5')
| -rw-r--r-- | test/cve_2020_10810.h5 | bin | 0 -> 1808 bytes |
1 files changed, 0 insertions, 0 deletions
diff --git a/test/cve_2020_10810.h5 b/test/cve_2020_10810.h5 Binary files differnew file mode 100644 index 0000000..5cface3 --- /dev/null +++ b/test/cve_2020_10810.h5 |