hdf5/release_docs
Egbert Eich 0b4e9cf976
Compound datatypes may not have members of size 0 (#2243)
* Compound datatypes may not have members of size 0

A member size of 0 may lead to an FPE later on as reported in
CVE-2021-46244. To avoid this, check for this as soon as the
member is decoded.
This should probably be done in H5O_dtype_decode_helper() already,
however it is not clear whether all sizes are expected to be != 0.

This fixes CVE-2021-46244 / Bug #2242.

Signed-off-by: Egbert Eich <eich@suse.com>

* Rework error recovery code in H5O__dtype_decode_helper() and
H5O__dtype_decode().

* Format changes for src/H5Odtype.c.

Signed-off-by: Egbert Eich <eich@suse.com>
Co-authored-by: Neil Fortner <nfortne2@hdfgroup.org>
Co-authored-by: Larry Knox <lrknox@hdfgroup.org>
2022-12-07 16:14:40 -06:00
..
HISTORY-1_0-1_8_0_rc3.txt spelling fixes (#1561) 2022-03-31 10:42:30 -05:00
HISTORY-1_8_0-1_10_0.txt spelling fixes (#1561) 2022-03-31 10:42:30 -05:00
HISTORY-1_8.txt Fixes codespell issues (#2032) 2022-08-17 16:31:54 -07:00
HISTORY-1_10_0-1_12_0.txt
HISTORY-1_10.txt Fixes codespell issues (#2032) 2022-08-17 16:31:54 -07:00
HISTORY-1_12.txt
HISTORY-1_13.txt Update link for Software Changes in RELEASE.txt. (#2205) 2022-11-01 16:14:52 -05:00
INSTALL Set default level to minimum time (#1722) 2022-05-17 11:54:05 -05:00
INSTALL_CMake.txt Removes the memory allocation sanity checks feature (#2218) 2022-11-03 16:30:08 -07:00
INSTALL_Cygwin.txt
INSTALL_parallel
INSTALL_Warnings.txt
INSTALL_Windows.txt
README_HDF5_CMake Update examples reference to single-source version 2.0.1 (#2107) 2022-09-20 17:21:15 -05:00
README_HPC Update CMake code to 3.18 minimum version (#2080) 2022-09-02 17:31:29 -07:00
RELEASE.txt Compound datatypes may not have members of size 0 (#2243) 2022-12-07 16:14:40 -06:00
USING_CMake_Examples.txt Update CMake code to 3.18 minimum version (#2080) 2022-09-02 17:31:29 -07:00
USING_HDF5_CMake.txt Update CMake code to 3.18 minimum version (#2080) 2022-09-02 17:31:29 -07:00
USING_HDF5_VS.txt