From bb78d70b994063c84f1a81df5403cedaf7f41a60 Mon Sep 17 00:00:00 2001 From: osobh Date: Fri, 25 Sep 2026 22:46:44 -0500 Subject: [PATCH] docs: changelog for the review follow-up fixes Co-Authored-By: Claude Opus 5.5 (1M context) --- CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f8568f7..1fc429d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -296,6 +296,14 @@ - CI keeps zlib-ng building and tested; the arm64 job no longer needs cmake. ### Correctness +- `clawhdf5-format` VDS: variable-length and reference data from a source in + another file is refused. Those elements are global-heap IDs and object + addresses in the source file; copied into the virtual dataset they would + be decoded against the wrong file and name another object. +- `clawhdf5-agent`: a store whose `/meta` has an attribute that cannot be + decoded fails to open (`MemoryError::Schema`). With `attrs()` now leaving + unreadable attributes out, it would otherwise have opened with defaults in + place of its settings (`float16`, `compression`, the WAL mark, ...). - `clawhdf5-format` reader: an old-style group whose local heap has a free list pointing outside the heap was listed with names read from the broken heap (garbage names on `cve-2021-36977.h5` once its user block was