docs: changelog for the review follow-up fixes
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
This commit is contained in:
@@ -296,6 +296,14 @@
|
||||
- CI keeps zlib-ng building and tested; the arm64 job no longer needs cmake.
|
||||
|
||||
### Correctness
|
||||
- `clawhdf5-format` VDS: variable-length and reference data from a source in
|
||||
another file is refused. Those elements are global-heap IDs and object
|
||||
addresses in the source file; copied into the virtual dataset they would
|
||||
be decoded against the wrong file and name another object.
|
||||
- `clawhdf5-agent`: a store whose `/meta` has an attribute that cannot be
|
||||
decoded fails to open (`MemoryError::Schema`). With `attrs()` now leaving
|
||||
unreadable attributes out, it would otherwise have opened with defaults in
|
||||
place of its settings (`float16`, `compression`, the WAL mark, ...).
|
||||
- `clawhdf5-format` reader: an old-style group whose local heap has a free
|
||||
list pointing outside the heap was listed with names read from the broken
|
||||
heap (garbage names on `cve-2021-36977.h5` once its user block was
|
||||
|
||||
Reference in New Issue
Block a user