docs: h5rs check inherits the library's header-check gap
Measured on the CVE corpus: check --data passes 33 of 180 files, and h5dump 1.14.6 rejects 26 of those. Recorded under the open "Header checks" gap and in the crate README. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
This commit is contained in:
@@ -207,7 +207,11 @@ B-tree chunk indexes, and version 3 superblocks).
|
||||
|
||||
What it does not check: free-space manager and shared-message (SOHM) table
|
||||
checksums, global heap collections other than those a value read touches,
|
||||
and objects reachable only by external links.
|
||||
and objects reachable only by external links. It validates with
|
||||
clawhdf5's parsers, so it accepts what they accept: some header damage that
|
||||
libhdf5 refuses goes unreported (of the 180 files of the HDF Group's CVE
|
||||
corpus, `check --data` passes 33, and h5dump 1.14.6 rejects 26 of those;
|
||||
tank, 2026-09-26).
|
||||
|
||||
## Robustness
|
||||
|
||||
|
||||
Reference in New Issue
Block a user