Go to file
Egbert Eich 0b4e9cf976
Compound datatypes may not have members of size 0 (#2243)
* Compound datatypes may not have members of size 0

A member size of 0 may lead to an FPE later on as reported in
CVE-2021-46244. To avoid this, check for this as soon as the
member is decoded.
This should probably be done in H5O_dtype_decode_helper() already,
however it is not clear whether all sizes are expected to be != 0.

This fixes CVE-2021-46244 / Bug #2242.

Signed-off-by: Egbert Eich <eich@suse.com>

* Rework error recovery code in H5O__dtype_decode_helper() and
H5O__dtype_decode().

* Format changes for src/H5Odtype.c.

Signed-off-by: Egbert Eich <eich@suse.com>
Co-authored-by: Neil Fortner <nfortne2@hdfgroup.org>
Co-authored-by: Larry Knox <lrknox@hdfgroup.org>
2022-12-07 16:14:40 -06:00
.github Develop fix ubuntu 22.04 openmpi install on github (#2268) 2022-11-28 13:20:24 -06:00
bin Removes MPE instrumentation support. (#2245) 2022-11-09 11:06:26 -08:00
c++ Correct requires setting for pkgconfig files (#2280) 2022-12-07 16:05:51 -06:00
config Add aarch64 toolchain and change dump test to long opt (#2271) 2022-12-01 14:32:34 -08:00
doc Moved the contributing.md document to the project root (#2244) 2022-11-09 09:58:32 -08:00
doxygen Remove hard-coded version text (#2260) 2022-11-16 15:13:46 -06:00
examples Correct the CMake link for MPI (#2198) 2022-11-01 16:03:13 -05:00
fortran Correct requires setting for pkgconfig files (#2280) 2022-12-07 16:05:51 -06:00
hl Correct requires setting for pkgconfig files (#2280) 2022-12-07 16:05:51 -06:00
java Develop jni trans (#2266) 2022-12-05 22:29:42 -06:00
m4 Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
release_docs Compound datatypes may not have members of size 0 (#2243) 2022-12-07 16:14:40 -06:00
src Compound datatypes may not have members of size 0 (#2243) 2022-12-07 16:14:40 -06:00
test Bug Fix: Segfault in H5CX_get_vol_wrap_ctx when H5VLwrap_register is called from an application (#2248) 2022-11-17 16:29:21 -06:00
testpar Removes MPE instrumentation support. (#2245) 2022-11-09 11:06:26 -08:00
tools Output should only be printed if verbose. (#2273) 2022-12-02 09:39:49 -08:00
utils Correct the CMake link for MPI (#2198) 2022-11-01 16:03:13 -05:00
.autom4te.cfg Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
.clang-format Develop clang format java (#1653) 2022-04-19 13:08:09 -05:00
.gitattributes Update the java slf4j logging jars to latest 1.7.33 (#1369) 2022-01-18 07:44:11 -06:00
.gitignore ignore java classpath 2017-04-17 13:19:20 -05:00
.h5chkright.ini Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
ACKNOWLEDGMENTS [svn-r19803] Description: 2010-11-17 11:42:57 -05:00
acsite.m4 Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
autogen.sh Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
CMakeFilters.cmake Update CMake code to 3.18 minimum version (#2080) 2022-09-02 17:31:29 -07:00
CMakeInstallation.cmake Implement option for using CMake GNUInstallDirs (#2175) 2022-10-25 08:50:43 -07:00
CMakeLists.txt Removes dmalloc support (#2239) 2022-11-09 09:22:14 -08:00
CMakePlugins.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md 2022-07-14 09:37:57 -07:00
configure.ac Simplify & fix check for szlib encoder (#2263) 2022-11-17 16:28:44 -06:00
CONTRIBUTING.md Add text about release notes (#2246) 2022-12-06 06:02:21 -08:00
COPYING Update top-level COPYING file and remove COPYING files from subdirectories (#561) 2021-04-21 11:23:34 -05:00
COPYING_LBNL_HDF5 Add LBNL license file and modify COPYING file accordingly. 2017-03-29 13:36:52 -05:00
CTestConfig.cmake develop Merge doxygen from 1.12 branch (#2095) 2022-09-14 15:44:24 -05:00
Makefile.am Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
Makefile.dist Update copyright headers (#2184) 2022-11-01 16:02:27 -05:00
README.md Update develop branch version to 1.13.4-1 (#2189) 2022-10-26 11:07:17 -05:00
UserMacros.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00

HDF5 version 1.13.4-1 currently under development

HDF5 Logo

Build BSD

Please refer to the release_docs/INSTALL file for installation instructions.

This repository contains a high-performance library's source code and a file format specification that implement the HDF5® data model. The model has been adopted across many industries and this implementation has become a de facto data management standard in science, engineering, and research communities worldwide.

The HDF Group is the developer, maintainer, and steward of HDF5 software. Find more information about The HDF Group, the HDF5 Community, and other HDF5 software projects, tools, and services at The HDF Group's website.

https://www.hdfgroup.org/

DOCUMENTATION

This release is fully functional for the API described in the documentation.

https://portal.hdfgroup.org/display/HDF5/The+HDF5+API

Full Documentation and Programming Resources for this release can be found at

https://portal.hdfgroup.org/display/HDF5

See the RELEASE.txt file in the release_docs/ directory for information specific to the features and updates included in this release of the library.

Several more files are located within the release_docs/ directory with specific details for several common platforms and configurations.

INSTALL - Start Here. General instructions for compiling and installing the library
INSTALL_CMAKE  - instructions for building with CMake (Kitware.com)
INSTALL_parallel - instructions for building and configuring Parallel HDF5
INSTALL_Windows and INSTALL_Cygwin - MS Windows installations.

HELP AND SUPPORT

Information regarding Help Desk and Support services is available at

https://portal.hdfgroup.org/display/support/The+HDF+Help+Desk

FORUM and NEWS

The following public forums are provided for public announcements and discussions of interest to the general HDF5 Community.

These forums are provided as an open and public service for searching and reading. Posting requires completing a simple registration and allows one to join in the conversation. Please read the following instructions pertaining to the Forum's use and configuration https://forum.hdfgroup.org/t/quickstart-guide-welcome-to-the-new-hdf-forum

RELEASE SCHEDULE

HDF5 release schedule

HDF5 does not release on a regular schedule. Instead, releases are driven by new features and bug fixes, though we try to have at least one release of each maintenance branch per year. Future HDF5 releases indicated on this schedule are tentative.

Release New Features
1.13.2 Onion VFD, Selection I/O, Subfiling
1.13.3 Multi-Dataset I/O
TBD VFD SWMR

This list of feature release versions is also tentative, and the specific release in which a feature is introduced may change.

SNAPSHOTS, PREVIOUS RELEASES AND SOURCE CODE

Periodically development code snapshots are provided at the following URL:

https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/snapshots/

Source packages for current and previous releases are located at:

https://portal.hdfgroup.org/display/support/Downloads

Development code is available at our Github location:

https://github.com/HDFGroup/hdf5.git