summaryrefslogtreecommitdiffstats
path: root/tools/src/h5ls
diff options
context:
space:
mode:
authorEgbert Eich <eich@suse.com>2022-11-11 05:41:53 (GMT)
committerGitHub <noreply@github.com>2022-11-11 05:41:53 (GMT)
commit34ec3bb7bc129f52bda4d82601f3bce65426459d (patch)
tree27aa5c9065a21991f3aa539c3cc2ac305163eb04 /tools/src/h5ls
parent1750b4b0af5158009aa2f861c65fb4bf8fc364de (diff)
downloadhdf5-34ec3bb7bc129f52bda4d82601f3bce65426459d.zip
hdf5-34ec3bb7bc129f52bda4d82601f3bce65426459d.tar.gz
hdf5-34ec3bb7bc129f52bda4d82601f3bce65426459d.tar.bz2
Make sure info block for external links has at least 3 bytes (#2234)
According to the specification, the information block for external links contains 1 byte of version/flag information and two 0 terminated strings for the object linked to and the full path. Although not very useful, the minimum string length for each (with terminating 0) would be one byte. Checking this will help to avoid SEGVs triggered by bogus files. This fixes CVE-2018-16438 / Bug #2233. Signed-off-by: Egbert Eich <eich@suse.com>
Diffstat (limited to 'tools/src/h5ls')
0 files changed, 0 insertions, 0 deletions