hdf5/release_docs
Egbert Eich b16ec83d4b
Check for overflow when calculating on-disk attribute data size (#2459)
* Remove duplicate code

Signed-off-by: Egbert Eich <eich@suse.com>

* Add test case for CVE-2021-37501

Bogus sizes in this test case causes the on-disk data size
calculation in H5O__attr_decode() to overflow so that the
calculated size becomes 0. This causes the read to overflow
and h5dump to segfault.
This test case was crafted, the test file was not directly
generated by HDF5.
Test case from:
https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md
2023-03-02 11:17:49 -06:00
..
HISTORY-1_0-1_8_0_rc3.txt
HISTORY-1_8_0-1_10_0.txt
HISTORY-1_8.txt
HISTORY-1_10_0-1_12_0.txt
HISTORY-1_10.txt
HISTORY-1_12.txt
HISTORY-1_13.txt Update link for Software Changes in RELEASE.txt. (#2205) 2022-11-01 16:14:52 -05:00
INSTALL
INSTALL_CMake.txt Add fetchcontent for compression libs and fix cmake config (#2487) 2023-02-26 15:06:14 -08:00
INSTALL_Cygwin.txt
INSTALL_parallel
INSTALL_Warnings.txt
INSTALL_Windows.txt
README_HDF5_CMake Update examples reference to single-source version 2.0.1 (#2107) 2022-09-20 17:21:15 -05:00
README_HPC
RELEASE.txt Check for overflow when calculating on-disk attribute data size (#2459) 2023-03-02 11:17:49 -06:00
USING_CMake_Examples.txt
USING_HDF5_CMake.txt
USING_HDF5_VS.txt