docs: changelog for the review follow-up fixes

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
2026-09-25 22:46:44 -05:00
parent a7de15534c
commit bb78d70b99
1 changed files with 8 additions and 0 deletions
@@ -296,6 +296,14 @@
 - CI keeps zlib-ng building and tested; the arm64 job no longer needs cmake.
 ### Correctness
 - `clawhdf5-format` VDS: variable-length and reference data from a source in
  another file is refused. Those elements are global-heap IDs and object
  addresses in the source file; copied into the virtual dataset they would
  be decoded against the wrong file and name another object.
 - `clawhdf5-agent`: a store whose `/meta` has an attribute that cannot be
  decoded fails to open (`MemoryError::Schema`). With `attrs()` now leaving
  unreadable attributes out, it would otherwise have opened with defaults in
  place of its settings (`float16`, `compression`, the WAL mark, ...).
 - `clawhdf5-format` reader: an old-style group whose local heap has a free
  list pointing outside the heap was listed with names read from the broken
  heap (garbage names on `cve-2021-36977.h5` once its user block was