File When-evicting-driver-info-block-NULL-the-corres... of Package hdf5

Overview Repositories Revisions Requests Users Attributes Meta

File When-evicting-driver-info-block-NULL-the-corresponding-entry.patch of Package hdf5

From: Egbert Eich <eich@suse.com>
Date: Thu Sep 29 13:47:30 2022 +0200
Subject: When evicting driver info block, NULL the corresponding entry
Patch-mainline: Not yet
Git-repo: https://github.com/HDFGroup/hdf5
Git-commit: fd941964209e5a88df00bb6d2dbf042f4af65a1c
References:

This prevents it from another attempt to unpin it in H5F__dest() which may
happen due to malformed hdf5 files which leads to a segfault.

This fixes CVE-2021-46242

Signed-off-by: Egbert Eich <eich@suse.com>
Signed-off-by: Egbert Eich <eich@suse.de>
---
 src/H5Fsuper.c | 2 ++
 1 file changed, 2 insertions(+)
diff --git a/src/H5Fsuper.c b/src/H5Fsuper.c
index bc4319a1ac..9a5b137671 100644
--- a/src/H5Fsuper.c
+++ b/src/H5Fsuper.c
@@ -1045,6 +1045,8 @@ done:
             /* Evict the driver info block from the cache */
             if (H5AC_expunge_entry(f, H5AC_DRVRINFO, sblock->driver_addr, H5AC__NO_FLAGS_SET) < 0)
                 HDONE_ERROR(H5E_FILE, H5E_CANTEXPUNGE, FAIL, "unable to expunge driver info block")
+
+	    f->shared->drvinfo = NULL;
         } /* end if */
 
         /* Unpin & discard superblock */

Places

File When-evicting-driver-info-block-NULL-the-corresponding-entry.patch of Package hdf5

Places