mirror of
https://github.com/Unidata/netcdf-c.git
synced 2025-01-24 16:04:40 +08:00
b5d4afd1d5
## Examine and fix ezxml errors re: Issue https://github.com/Unidata/netcdf-c/issues/2119 Multiple security issues were found in ezxml (see above Issue). * CVE-2021-31598 * CVE-2021-31348 / CVE-2021-31347 * CVE-2021-31229 * CVE-2021-30485 * CVE-2021-26222 * CVE-2021-26221 * CVE-2021-26220 * CVE-2019-20202 * CVE-2019-20201 * CVE-2019-20200 * CVE-2019-20199 * CVE-2019-20198 * CVE-2019-20007 * CVE-2019-20006 * CVE-2019-20005 In addition, moved ezxml to libdispatch. ## Examine and fix selected oss-fuzz detected errors Note that most of these errors are in the libsrc .m4 generated code so fixing them is difficult. It would nice if we could tell oss-fuzz to skip those files. They are old and crufty and probably need a complete refactor. Issue|Status -----|------ 35382|Fixed; old bug 35398|Closed by OSS-Fuzz 35442|Guarantee alloc > 0 or error; Old bug 35721|Assert failure; ok 35992|Fixed; old bug 36038|Fixed; old bug 36129|Unfixed; old bug 36229|Fixed by adding assert; old bug 37476|Unfixed; old bug 37824|Assert Failure; ok 38300|Closed by OSS-Fuzz 38537|Unfixed; old bug 38658|Unfixed; old bug 38699|Fixed maybe; old bug 38772|Nature of error is unclear, suspect that it results from using too large a type. 39248|Need more information 39394|Unfixed; old bug |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| ceconstraints.h | ||
| CMakeLists.txt | ||
| err_macros.h | ||
| ezxml.h | ||
| fbits.h | ||
| hdf4dispatch.h | ||
| hdf5dispatch.h | ||
| hdf5internal.h | ||
| isnan.h | ||
| Makefile.am | ||
| nc3dispatch.h | ||
| nc3internal.h | ||
| nc4dispatch.h | ||
| nc4internal.h | ||
| nc_hashmap.h | ||
| nc_logging.h | ||
| nc_provenance.h | ||
| nc_tests.h | ||
| nc.h | ||
| ncauth.h | ||
| ncbytes.h | ||
| ncconfigure.h | ||
| nccrc.h | ||
| ncdap.h | ||
| ncdimscale.h | ||
| ncdispatch.h | ||
| ncexhash.h | ||
| ncexternl.h | ||
| ncfilter.h | ||
| nchashmap.h | ||
| nchttp.h | ||
| ncindex.h | ||
| ncjson.h | ||
| nclist.h | ||
| nclog.h | ||
| ncmodel.h | ||
| ncoffsets.h | ||
| ncpathmgr.h | ||
| ncrc.h | ||
| nctestserver.h | ||
| nctime.h | ||
| ncuri.h | ||
| ncurlmodel.h | ||
| ncutf8.h | ||
| ncxcache.h | ||
| netcdf_aux.h | ||
| netcdf_dispatch.h.in | ||
| netcdf_f.h | ||
| netcdf_filter_build.h | ||
| netcdf_filter_hdf5_build.h | ||
| netcdf_filter.h | ||
| netcdf_json.h | ||
| netcdf_mem.h | ||
| netcdf_meta.h.in | ||
| netcdf_par.h | ||
| netcdf.h | ||
| onstack.h | ||
| rnd.h | ||
| XGetopt.h | ||