summaryrefslogtreecommitdiffstats
path: root/tools/src
diff options
context:
space:
mode:
authorbmribler <39579120+bmribler@users.noreply.github.com>2021-03-19 13:15:03 (GMT)
committerGitHub <noreply@github.com>2021-03-19 13:15:03 (GMT)
commitdafc7285bb1df4a6529a64c215c5de4017016d24 (patch)
treec40eadbf742bfe9a949cffec62931bbe53ed92ec /tools/src
parent49a14f9e0279e5b43b15121a3d64105f0d7b65b0 (diff)
downloadhdf5-dafc7285bb1df4a6529a64c215c5de4017016d24.zip
hdf5-dafc7285bb1df4a6529a64c215c5de4017016d24.tar.gz
hdf5-dafc7285bb1df4a6529a64c215c5de4017016d24.tar.bz2
Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405)
* Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) Description Checked against buffer size to prevent segfault, in case of data corruption. + HDFFV-11159 CVE-2018-14033 Buffer over-read in H5O_layout_decode + HDFFV-10480 CVE-2018-11206 Buffer over-read in H5O_fill_new[/old]_decode Platforms tested: Linux/64 (jelly) * Accidentally left in another occurrence of the previous patch from user after a more correct fix was applied, that is the check now accounted for the previous advance of the buffer pointer. Removed it. * Typo * Fixed format issues. * Added test. * Changed arguments to ADD_H5_TEST * Fixing arguments to ADD_H5_TEST again. * Fixing arguments again. * Took out the CMake changes until Allen can help. * Added files: tCVE_2018_11206_fill_old.h5 tCVE_2018_11206_fill_new.h5 * Revert "Took out the CMake changes until Allen can help." This reverts commit c21324d6e0044994c5cd24b0671e7d1dd41096cc. * Revert "Fixing arguments again." This reverts commit 5832a70674339e4b524749adde5a181f8c3a446a. * Revert "Fixing arguments to ADD_H5_TEST again." This reverts commit b45de823c22ce83a388d46466ef7c04b66ff05ed. * Revert "Changed arguments to ADD_H5_TEST" This reverts commit 16719824f57e52158451ddd261788c0dcaa3ec55. * Added first argument to ADD_H5_TEST for HDFFV-10480 fix. * Changed argument 0 to 1 * Revert "Changed argument 0 to 1" This reverts commit b343d6613ba681b43248dd5820e96389984ebcf7. * Revert "Added first argument to ADD_H5_TEST for HDFFV-10480 fix." This reverts commit b8a0f9a9e8ec8e6c6ff38d33195d63edff76a563. * Added first argument and corrected the second. * Updated fixes for HDFFV-10480 and HDFFV-11159/HDFFV-11049 * Improved error messages.
Diffstat (limited to 'tools/src')
0 files changed, 0 insertions, 0 deletions