docs: changelog and known issues for the plugin-filter review fixes

The short-decoding chunk (wrong data, pre-existing), the Blosc header underflow (crash) and filter 32023 registration, each with its date and what it changes; the conformance count is unchanged at 573 of 697. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
2026-09-26 01:24:18 -05:00
parent 738b9491b2
commit 17fc8b1964
2 changed files with 31 additions and 1 deletions
@@ -140,7 +140,16 @@ fill-value item that did is fixed).
  697 ok). **Still open:** Blosc2 (32026 — hdf5plugin stores each chunk as a
  Blosc2 super-chunk frame, and n-D chunks as B2ND arrays) and ZFP (32013);
  both fail with an `UnsupportedFilter` error that names the filter, and
-  either can be plugged in with `filter_registry::register_filter`.
+  either can be plugged in with `filter_registry::register_filter` (32023,
+  Granular BitRound, too, since 2026-09-26 even with the `pcodec` feature).
+- **Wrong data: a chunk whose filters decode to fewer bytes than the chunk
+  read with zeros for the missing bytes** (any filter; found reviewing the plugin
+  filters). **Fixed 2026-09-26:** it is an error naming the chunk. A corrupt
+  chunk must never read as zeros. Unfiltered chunks are read at their stored
+  size and are not checked this way.
+- **Crash:** a hostile Blosc chunk (frame size below its header) panicked in
+  builds with overflow checks. **Fixed 2026-09-26**; the new decoders are
+  fuzzed in the unit tests.
 - **Header checks:** on 12 CVE datasets libhdf5 rejects a corrupt header and
  we read data anyway. We need stricter header checks.
 - **Writer:**