mirror/netcdf-c
2
0
Fork 0
mirror of https://github.com/Unidata/netcdf-c.git synced 2025-01-30 16:10:44 +08:00
Code Issues Packages Projects Releases Wiki Activity
b5d4afd1d5
netcdf-c/libdispatch
History
Dennis Heimbigner b5d4afd1d5 Patch errors 
## Examine and fix ezxml errors

re: Issue https://github.com/Unidata/netcdf-c/issues/2119

Multiple security issues were found in ezxml (see above Issue).

* CVE-2021-31598
* CVE-2021-31348 / CVE-2021-31347
* CVE-2021-31229
* CVE-2021-30485
* CVE-2021-26222
* CVE-2021-26221
* CVE-2021-26220
* CVE-2019-20202
* CVE-2019-20201
* CVE-2019-20200
* CVE-2019-20199
* CVE-2019-20198
* CVE-2019-20007
* CVE-2019-20006
* CVE-2019-20005

In addition, moved ezxml to libdispatch.

## Examine and fix selected  oss-fuzz detected errors

Note that most of these errors are in the libsrc .m4 generated
code so fixing them is difficult. It would nice if we could tell
oss-fuzz to skip those files. They are old and crufty and
probably need a complete refactor.

Issue|Status
-----|------
35382|Fixed; old bug
35398|Closed by OSS-Fuzz
35442|Guarantee alloc > 0 or error; Old bug
35721|Assert failure; ok
35992|Fixed; old bug
36038|Fixed; old bug
36129|Unfixed; old bug
36229|Fixed by adding assert; old bug
37476|Unfixed; old bug
37824|Assert Failure; ok
38300|Closed by OSS-Fuzz
38537|Unfixed; old bug
38658|Unfixed; old bug
38699|Fixed maybe; old bug
38772|Nature of error is unclear, suspect that it results from using too large a type.
39248|Need more information
39394|Unfixed; old bug
2021-10-12 14:03:48 -06:00
..
CMakeLists.txt Patch errors 2021-10-12 14:03:48 -06:00
datt.c This PR adds EXPERIMENTAL support for accessing data in the 2020-06-28 18:02:47 -06:00
dattget.c added anchors for reading_attributes and writing_attributes, and refs to them, also changed order of files in Doxygen.in 2019-11-08 05:19:51 -07:00
dattinq.c cleanup and minor fixes for attribute inq functions 2019-11-07 09:46:23 -07:00
dattput.c added anchors for reading_attributes and writing_attributes, and refs to them, also changed order of files in Doxygen.in 2019-11-08 05:19:51 -07:00
dauth.c Regularize the semantics of mkstemp. 2021-05-14 11:33:03 -06:00
daux.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
dcompound.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dcopy.c Regularize the scoping of dimensions 2021-05-31 15:51:12 -06:00
dcrc32.c Make use of clock_gettime be conditional. 2020-12-06 18:19:53 -07:00
dcrc32.h Provide a Number of fixes/improvements to NCZarr 2020-11-19 17:01:04 -07:00
dcrc64.c Make use of clock_gettime be conditional. 2020-12-06 18:19:53 -07:00
ddim.c formatting cleanup 2019-02-25 07:58:55 -07:00
ddispatch.c Regularize the semantics of mkstemp. 2021-05-14 11:33:03 -06:00
defcheck.c Modified a number of tests 2014-10-04 15:59:16 -06:00
denum.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
derror.c Move to Version 2 NCZarr Extended Meta-Data 2021-07-17 16:55:30 -06:00
dfile.c Codify cross-platform file paths 2021-03-04 13:41:31 -07:00
dfilter.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
dfilterx.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
dgroup.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dhttp.c Move to Version 2 NCZarr Extended Meta-Data 2021-07-17 16:55:30 -06:00
dinfermodel.c dinfermodel: don't fail if NC_NETCDF4 is allowed, but NC3 is found 2021-08-10 07:40:29 -04:00
dinternal.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dnotnc3.c final removal 2019-08-15 07:05:10 -06:00
dnotnc4.c adding quantize functions to all the dispatch tables 2021-08-24 01:26:44 -06:00
doffsets.c Thread safety: step 1: cleanup 2019-03-30 14:06:20 -06:00
dopaque.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dparallel.c documentation improvements for nc_var_par_access() 2020-03-02 16:36:56 -07:00
dpathmgr.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
drc.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
dreadonly.c removed NC from open in dispatch table 2019-08-01 14:30:20 -06:00
dstring.c Merge branch 'master' into byterange.dmh 2019-01-25 14:50:23 -07:00
dtype.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
durlmodel.c Prepare for the path management code 2020-10-13 19:12:15 -06:00
dutf8.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dutil.c Regularize the semantics of mkstemp. 2021-05-14 11:33:03 -06:00
dv2i.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
dvar.c now nsd of 0 is NC_EINVAL for nc_def_var_quantize() 2021-09-10 06:10:20 -06:00
dvarget.c removed non-relaxed coord bounds from test code 2019-11-26 06:20:34 -07:00
dvarinq.c Merge branch 'main' into ejh_quantize_2 2021-09-07 10:44:45 -06:00
dvarput.c now always relax! 2019-11-26 05:36:16 -07:00
dvlen.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
ezxml.c Patch errors 2021-10-12 14:03:48 -06:00
json.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
Makefile.am Patch errors 2021-10-12 14:03:48 -06:00
nc.c Change (again), and hopefully simplify, the file model inference algorithm. 2019-09-29 12:59:28 -06:00
ncbytes.c Working on autoconf-based build on OSX 2020-09-15 14:56:12 -06:00
ncexhash.c Additional Fixes to NCZarr 2020-12-16 20:48:02 -07:00
nchashmap.c Patch errors 2021-10-12 14:03:48 -06:00
ncjson.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
nclist.c Add filter support to NCZarr 2021-09-02 17:04:26 -06:00
nclistmgr.c Change (again), and hopefully simplify, the file model inference algorithm. 2019-09-29 12:59:28 -06:00
nclog.c Add zip file support 2021-01-28 20:11:01 -07:00
ncsettings.hdr Add ability to programmatically 2014-08-29 14:51:14 -06:00
nctime.c Fix for :60 seconds in ncdump 2021-01-26 10:24:43 +02:00
ncuri.c Codify cross-platform file paths 2021-03-04 13:41:31 -07:00
ncxcache.c Move to Version 2 NCZarr Extended Meta-Data 2021-07-17 16:55:30 -06:00
netcdf.m4 Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
stubdef.c Updated libdispatch/ files with copyright notice. 2018-12-06 14:29:57 -07:00
u8.c Resolves Github issue https://github.com/Unidata/netcdf-c/issues/349. 2017-02-16 14:27:54 -07:00
u8.h Resolves Github issue https://github.com/Unidata/netcdf-c/issues/349. 2017-02-16 14:27:54 -07:00
utf8proc_data.c Refactored additional constants. 2017-02-28 11:15:51 -07:00
utf8proc.c Separate out the --ansi comment fixes. 2018-12-12 13:23:09 -07:00
utf8proc.h Spelling fixes 2019-09-18 08:03:01 -06:00