summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Release script updates (#3576)Larry Knox2023-09-221-2/+2
| | | | | | | | * Check config on windows for correct wix name (#3573) * Set version to 1.10.11 Update Platforms tested in RELEASE.txt Update release script
* Hdf5 1 10 11 (#3555)Larry Knox2023-09-2010-3/+9151
| | | | | | | | | | | * Initial preparation of hdf5-1_10_11 release branch for HDF5 1.10.11 release: Updated configure.ac for release: switched configure default to production mode and disabled maintainer mode. Set HDF5_GENERATE_HEADERS to OFF in src/CMakeLists.txt. Generated release files including Makefile.ins with autogen.sh, autoconf 2.71 and automake 1.16.2 Incremented version to 1.10.11-2. * Update branch name in main.yml.
* Sync CMake and doxygen changes with develop (#3543)Allen Byrne2023-09-191-11/+1
| | | | | * Sync CMake and doxygen changes from develop * Add missing images
* Fix unmatched TAG in H5Dchunk.c macro (#3535)Dana Robinson2023-09-121-1/+1
|
* Revert "Reverts the CVE fixes (#3448)" (#3487)Dana Robinson2023-09-015-79/+145
| | | | | This reverts commit c5a9cd8cf187b501c569490d3297bda1fccd6667. ^^^^ Which itself was a revert of 6129233
* Revert "Revert "[1.10 Merge] Fix serial to parallel chunked dataset file ↵Dana Robinson2023-09-011-10/+24
| | | | | | | space allocation bug (#3394) (#3475)" (#3479)" (#3486) This reverts commit e3d420084c9bcc3e8f2a4e68bc01e39a1a5f48d1. ^^^ Which itself was a revert of dd4c6c7
* Revert "[1.10 Merge] Fix serial to parallel chunked dataset file space ↵Dana Robinson2023-09-011-24/+10
| | | | | allocation bug (#3394) (#3475)" (#3479) This reverts commit dd4c6c707370c32eb2722ea18509485e43ecef4f.
* [1.10 Merge] Fix serial to parallel chunked dataset file space allocation ↵jhendersonHDF2023-09-011-10/+24
| | | | bug (#3394) (#3475)
* [1.10 Merge] Fix assertion failure during file close on error (#3460)jhendersonHDF2023-09-016-42/+63
|
* Fix valgrind warning about write of uninitialized bytes in ScaleOffset ↵jhendersonHDF2023-09-011-1/+7
| | | | filter (#3390) (#3459)
* Revert "Fix CVE-2018-11202 (#3452)" (#3478)Dana Robinson2023-08-311-14/+1
| | | | | | | This reverts commit 1ddc2e906ac59d3916ec23a2400227654ccde4dd. This CVE fix triggers a difficult to reproduce Java test error. This may be due to uninitialized bytes in the 128 bit float test that precedes it.
* Fix CVE-2018-11202 (#3452)Dana Robinson2023-08-311-1/+14
|
* Fix CVE-2016-4332 (#3451)Dana Robinson2023-08-311-3/+2
|
* Reverts the CVE fixes (#3448)Dana Robinson2023-08-306-147/+82
| | | | | These fixes introduce a difficult-to-reproduce Java test failure so this will be reverted while we investigate. Individual CVE fixes will instead be introduced one at a time.
* 10 CVE fixes (#3440)Dana Robinson2023-08-296-82/+147
| | | | | | | | | | | | | * Fix for CVE-2018-15671 * Fix CVE-2016-4332 * Fix CVE-2018-11202 * Fix CVE-2018-11205 * Fix CVE-2018-13866 * Fix CVE-2018-13867 and CVE-2018-13871
* Bring strndup changes from develop (#3437)Dana Robinson2023-08-286-29/+120
|
* Fix loading plugin fails with missing directory GH issue #3248 (#3325)Allen Byrne2023-08-024-15/+39
|
* Various merges from develop (#3135)Allen Byrne2023-06-194-28/+32
| | | | | | | | | * Merges from develop/1.14 * Fix doxygen warnings * Fix spelling * Fix doxygen ref * Add braces * Fix format * Remove unused file
* Prevent buffer overrun in H5S_select_deserialize (#2963)mattjala2023-05-2112-174/+471
|
* Fix CMake generator expression syntax (#2941)Allen Byrne2023-05-121-11/+12
|
* New 1 10 hdffv 11052 (#2932)vchoi-hdfgroup2023-05-111-26/+36
| | | | | | | | | | | | | | | | | | Fix for HDFFV-11052: h5debug fails on a corrupted file (h5_nrefs_POC) producing a core dump. When h5debug closes the corrupted file, the library calls H5F__dest() which performs all the closing operations for the file "f" (H5F_t *) but just keeping note of errors in "ret_value" all the way till the end of the routine. The user-provided corrupted file has an illegal file size causing failure when reading the image during the closing process. At the end of this routine it sets f->shared to NULL and then frees "f". This is done whether there is error or not in "ret_value". Due to the failure in reading the file earlier, the routine then returns error. The error return from H5F__dest() causes the file object "f" not being removed from the ID node table. When the library finally exits, it will try to close the file objects in the table. This causes assertion failure for f->file_id > 0. Fix: a) H5F_dest(): free the f only when there is no error in "ret_value" at the end of the routine. b) H5F__close_cb(): if f->shared is NULL, free "f"; otherwise, perform closing on "f" as before. c) h5debug.c main(): track error return from H5Fclose().
* Clean up memory allocated when reading messages in H5Dlayout on error (#2813)glennsong092023-04-301-4/+16
|
* Add bug note to H5Dget_space_status documentation (#2788) (#2837)jhendersonHDF2023-04-301-0/+14
|
* Fix v1 object header gap bug in H5Ocopy (#2785) (#2834)jhendersonHDF2023-04-301-2/+7
|
* Fixed GH-2603, heap-buffer-overflow in H5O__linfo_decode (#2758)bmribler2023-04-181-7/+23
| | | | Verified with valgrind -v --tool=memcheck --leak-check=full h5dump POV-GH-2603 The several invalid reads shown originally are now gone.
* Add buffer overrun checks to H5O__layout_decode and H5O__sdspace_decode ↵jhendersonHDF2023-04-153-53/+270
| | | | (#2679) (#2730)
* Fix a heap buffer overflow during H5D__compact_readvv (GitHub #2606) (#2664) ↵jhendersonHDF2023-04-151-0/+27
| | | | (#2727)
* H5O__pline_decode() Make more resilient to out-of-bounds read (#2210) (#2734)jhendersonHDF2023-04-152-2/+18
| | | | | | | | | Malformed hdf5 files may have trunkated content which does not match the expected size. When this function attempts to decode these it may read past the end of the allocated space leading to heap overflows as bounds checking is incomplete. Make sure each element is within bounds before reading. This fixes CVE-2019-8396 / HDFFV-10712 / github bug #2209.
* Fix for github issue #2599: (#2665) (#2736)vchoi-hdfgroup2023-04-141-1/+6
| | | | | | | | | | | | As indicated in the description, memory leak is detected when running "./h5dump pov". The problem is: when calling H5O__add_cont_msg() from H5O__chunk_deserialize(), memory is allocated for cont_msg_info->msgs. Eventually, when the library tries to load the continuation message via H5AC_protect() in H5O_protect(), error is encountered due to illegal info in the continuation message. Due to the error, H5O_protect() exits but the memory allocated for cont_msg_info->msgs is not freed. When we figure out how to handle fuzzed files that we didn't generate, a test needs to be added to run h5dump with the provided "pov" file.
* Fix memory leaks and aborts in H5O EFL decode (#2656) (#2708)Dana Robinson2023-04-131-48/+61
| | | | | | | | | | | | | | | | | | | | | * Convert asserts to error handling in efl decode The function that decodes external data files object header messages would call assert() when parsing malformed files, causing applications to crash when linked against the debug library. This change converts these assert() calls to HDF5 error checks, so the messages are sanity checked in both release and debug mode and debug mode no longer crashes applications. Also cleaned up some error handling usage and debug checks. * Free memory on H5O efl decode errors * Add buffer size checks to efl msg decode * Add parentheses to math expressions Fixes GitHub #2605
* [1.10 Merge] Avoid suppressing error output for non-tentative file opens ↵jhendersonHDF2023-04-081-20/+48
| | | | (#2632) (#2668)
* Update HDF5 version after 1.10.10 release. (#2681)Larry Knox2023-04-071-3/+3
| | | | | | | | * Update HDF5 version after 1.10.10 release. Update so numbers to match 1.10.10 release so numbers. Update HISTORY-1_10.txt. Clean RELEASE.txt entries. * Missed one version change.
* Undo revert 2615 (#2638)Larry Knox2023-03-278-395/+168
| | | | | | * Revert "1 10 revert 2615 (#2629)" This reverts commit 43e4e64d886e9072a6075c6369e84c0e273fa44f.
* 1 10 revert 2615 (#2629)Larry Knox2023-03-249-231/+568
| | | Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
* Fix a memory corruption issue in H5S__point_project_simple (#2627)jhendersonHDF2023-03-241-1/+1
|
* Remove getlogin work-arounds (#2620)Dana Robinson2023-03-233-21/+0
| | | Unused in the library
* Add missing items for hpc/scripts and release versions of extra (#2616)Allen Byrne2023-03-202-1/+10
| | | | | | | | | * Add missing items for hpc/scripts and release versions of extra * Update examples project version * Add VS2022 options to build scripts * And VS2022 added to windefs comment
* [1.10 Merge] Add Developer build mode to CMake (#2617)jhendersonHDF2023-03-2011-112/+110
| | | | | | | | | | | | | | | | | | | | | | * Add Developer build mode to CMake (#1659) * Add Developer build mode to CMake * Set a few CMake variables for Developer build modes * Refactor enabling of debug and developer-level compile definitions * Convert cache debugging macros to normal ifdef style Normal ifdef-style instead of if-style allows build system to define macros without warning about redefining macros with different values (0 vs. 1) * Add HDF5 Developer compile definitions to testing files * Temporarily disable -fanalyzer flag for GCC 12+ Developer builds * Fix Java tests for Developer build modes (#2079) * Minor adjustment of Developer build mode changes for 1.10 branch
* Normalize platform-independence code w/ develop (#2615)Dana Robinson2023-03-209-566/+230
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Normalize platform-independence code w/ develop * Use C99 types and functions in lieu of C89 work-arounds * Align key files with develop - H5public.h - H5private.h - H5system.c - H5win32defs.h * Minor fixes elsewhere to support changes in above files * Incidentally brings Fortran mod directory settings file change over This does NOT change the configure/build files. Those will still do the checks needed for the C89 work-around cruft until the perf and perform code gets cleaned up. * Add C++98 fixes * Explicitly set -std=c++98 in Autotools * Do not include cstdlib in H5public.h (requires C++11) * Remove redundant stdbool.h include * Fix alarm issues on Windows * Bring parallel alarm() changes from develop
* Gather latest CMake changes from develop (#2609)Allen Byrne2023-03-201-4/+4
| | | | Add HDF5_SRC_INCLUDE_DIRS variable cleanup cmake comments and documentation
* Bring warning fixes from develop (#2608)Dana Robinson2023-03-2012-67/+124
|
* Bring mirror VFD test improvements from develop (#2597)Dana Robinson2023-03-201-3/+5
|
* Bring warning macro changes from develop (#2594)Dana Robinson2023-03-202-52/+100
|
* Remove unused H5MP and H5HP packages (#2591)Dana Robinson2023-03-189-1842/+1
|
* Removes dmalloc support (#2239) (#2587)Dana Robinson2023-03-182-8/+0
| | | | | | | | | | This has not been used to debug the library in a very long time. Most developers use valgrind, -fsanitize=address, or some other memory checker instead of this library. This removes: * dmalloc.h include from H5private.h * --with-dmalloc= Autotools configure option * HDF5_ENABLE_USING_DMALLOC CMake option
* Minor merges to 1.10 (#2579)Larry Knox2023-03-182-8/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Elaborate how cd_values get stored (#2522) * Enclose MESG in do...while loop (#2576) Enclose MSG macro in a do...while loop * Add a clang-format comment about permissions (#2577) * Check for overflow when calculating on-disk attribute data size (#2459) * Remove duplicate code Signed-off-by: Egbert Eich <eich@suse.com> * Add test case for CVE-2021-37501 Bogus sizes in this test case causes the on-disk data size calculation in H5O__attr_decode() to overflow so that the calculated size becomes 0. This causes the read to overflow and h5dump to segfault. This test case was crafted, the test file was not directly generated by HDF5. Test case from: https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md --------- Co-authored-by: Mark (he/his) C. Miller <miller86@llnl.gov> Co-authored-by: glennsong09 <43005495+glennsong09@users.noreply.github.com> Co-authored-by: Dana Robinson <43805+derobins@users.noreply.github.com> Co-authored-by: Egbert Eich <eich@suse.com>
* Merge MD cache tag slist --> hash table change (#2580)Dana Robinson2023-03-174-129/+89
| | | PR #1925 from develop
* Make sure that ONLY_SHARED_LIBS option is correctly set (#2547)Allen Byrne2023-03-141-4/+4
|
* docs: in->out (#2514) (#2532)H. Joe Lee2023-03-121-1/+1
|
* Update copyright headers. (#2527)Larry Knox2023-03-10403-405/+0
|