Go to file
bmribler dafc7285bb
Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405)
* Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033)
Description
    Checked against buffer size to prevent segfault, in case of data corruption.

    + HDFFV-11159 CVE-2018-14033 Buffer over-read in H5O_layout_decode
    + HDFFV-10480 CVE-2018-11206 Buffer over-read in H5O_fill_new[/old]_decode
Platforms tested:
    Linux/64 (jelly)

* Accidentally left in another occurrence of the previous patch from user
   after a more correct fix was applied, that is the check now accounted
   for the previous advance of the buffer pointer.  Removed it.

* Typo

* Fixed format issues.

* Added test.

* Changed arguments to ADD_H5_TEST

* Fixing arguments to ADD_H5_TEST again.

* Fixing arguments again.

* Took out the CMake changes until Allen can help.

* Added files:

tCVE_2018_11206_fill_old.h5
tCVE_2018_11206_fill_new.h5

* Revert "Took out the CMake changes until Allen can help."

This reverts commit c21324d6e0.

* Revert "Fixing arguments again."

This reverts commit 5832a70674.

* Revert "Fixing arguments to ADD_H5_TEST again."

This reverts commit b45de823c2.

* Revert "Changed arguments to ADD_H5_TEST"

This reverts commit 16719824f5.

* Added first argument to ADD_H5_TEST for HDFFV-10480 fix.

* Changed argument 0 to 1

* Revert "Changed argument 0 to 1"

This reverts commit b343d6613b.

* Revert "Added first argument to ADD_H5_TEST for HDFFV-10480 fix."

This reverts commit b8a0f9a9e8.

* Added first argument and corrected the second.

* Updated fixes for HDFFV-10480 and HDFFV-11159/HDFFV-11049

* Improved error messages.
2021-03-19 08:15:03 -05:00
.github clang format push commit for develop (#453) 2021-03-11 08:28:55 -06:00
bin Update clang config (#473) 2021-03-17 10:25:39 -05:00
c++ Update clang config (#473) 2021-03-17 10:25:39 -05:00
config Fix display of long double in tools (#469) 2021-03-17 10:27:21 -05:00
doc Added description of the current HDF5 branches; added a draft of contribution policy. (#445) 2021-03-19 08:13:32 -05:00
doxygen RM blocks for H5R (#219) 2020-12-23 00:01:46 -06:00
examples fix block coordinate printing example (#437) 2021-03-05 20:34:25 -06:00
fortran Changes found during merge to 1.12 (#414) 2021-03-04 06:29:10 -06:00
hl Update clang config (#473) 2021-03-17 10:25:39 -05:00
java Update clang config (#473) 2021-03-17 10:25:39 -05:00
m4 Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
release_docs Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405) 2021-03-19 08:15:03 -05:00
src Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405) 2021-03-19 08:15:03 -05:00
test Suppresses the tcheck_version test's abort dialog on Windows (#477) 2021-03-17 14:23:07 -05:00
testpar Update clang config (#473) 2021-03-17 10:25:39 -05:00
tools Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405) 2021-03-19 08:15:03 -05:00
utils Update clang config (#473) 2021-03-17 10:25:39 -05:00
.autom4te.cfg Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
.clang-format Update clang config (#473) 2021-03-17 10:25:39 -05:00
.gitattributes Fix display of long double in tools (#469) 2021-03-17 10:27:21 -05:00
.gitignore ignore java classpath 2017-04-17 13:19:20 -05:00
.h5chkright.ini Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
ACKNOWLEDGMENTS
acsite.m4 Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
autogen.sh Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
CMakeFilters.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
CMakeInstallation.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
CMakeLists.txt Removed checks/workarounds for pre-C++89 compatibility (#449) 2021-03-10 11:51:45 -06:00
CMakePlugins.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
configure.ac Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
COPYING Correct entries related to --enable-build-mode and --enable-profiling in 2020-10-03 15:32:57 -05:00
COPYING_LBNL_HDF5 Add LBNL license file and modify COPYING file accordingly. 2017-03-29 13:36:52 -05:00
CTestConfig.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
Makefile.am Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
Makefile.dist Update license url part2 (#333) 2021-02-17 08:52:36 -06:00
MANIFEST Fixed HDFFV-10480 (CVE-2018-11206) and HDFFV-11159 (CVE-2018-14033) (#405) 2021-03-19 08:15:03 -05:00
README.txt HDFFV-10868 - add H5Sselect API java wrappers. 2020-10-27 16:48:02 -05:00
UserMacros.cmake Update license url part2 (#333) 2021-02-17 08:52:36 -06:00

HDF5 version 1.13.0 currently under development

------------------------------------------------------------------------------
Please refer to the release_docs/INSTALL file for installation instructions.
------------------------------------------------------------------------------

THE HDF GROUP
---------------

The HDF Group is the developer of HDF5®, a high-performance software library and
data format that has been adopted across multiple industries and has become a
de facto standard in scientific and research communities.

More information about The HDF Group, the HDF5 Community and the HDF5 software
project, tools and services can be found at the Group's website.

    https://www.hdfgroup.org/


DOCUMENTATION
-------------
This release is fully functional for the API described in the documentation.
    https://portal.hdfgroup.org/display/HDF5/The+HDF5+API

Full Documentation and Programming Resources for this release can be found at
    https://portal.hdfgroup.org/display/HDF5

See the RELEASE.txt file in the release_docs/ directory for information specific
to the features and updates included in this release of the library.

Several more files are located within the release_docs/ directory with specific
details for several common platforms and configurations.

    INSTALL - Start Here. General instructions for compiling and installing the library
    INSTALL_CMAKE  - instructions for building with CMake (Kitware.com)
    INSTALL_parallel - instructions for building and configuring Parallel HDF5
    INSTALL_Windows and INSTALL_Cygwin - MS Windows installations.



HELP AND SUPPORT
----------------
Information regarding Help Desk and Support services is available at

    https://portal.hdfgroup.org/display/support/The+HDF+Help+Desk



FORUM and NEWS
--------------
The following public forums are provided for public announcements and discussions
of interest to the general HDF5 Community.

    Homepage of the Forum
        https://forum.hdfgroup.org

    News and Announcement
        https://forum.hdfgroup.org/c/news-and-announcements-from-the-hdf-group

    HDF5 and HDF4 Topics
        https://forum.hdfgroup.org/c/hdf5

These forums are provided as an open and public service for searching and reading.
Posting requires completing a simple registration and allows one to join in the
conversation.  Please read the following instructions pertaining to the Forum's
use and configuration
    https://forum.hdfgroup.org/t/quickstart-guide-welcome-to-the-new-hdf-forum


SNAPSHOTS, PREVIOUS RELEASES AND SOURCE CODE
--------------------------------------------
Periodically development code snapshots are provided at the following URL:
    https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/snapshots/

Source packages for current and previous releases are located at:
    https://portal.hdfgroup.org/display/support/Downloads

Development code is available at our Github location:
    https://github.com/HDFGroup/hdf5.git