2026-09-26 09:42:10 +00:00
1 changed files with 8 additions and 0 deletions
@@ -296,6 +296,14 @@
 - CI keeps zlib-ng building and tested; the arm64 job no longer needs cmake.

 ### Correctness
+- `clawhdf5-format` VDS: variable-length and reference data from a source in
+  another file is refused. Those elements are global-heap IDs and object
+  addresses in the source file; copied into the virtual dataset they would
+  be decoded against the wrong file and name another object.
+- `clawhdf5-agent`: a store whose `/meta` has an attribute that cannot be
+  decoded fails to open (`MemoryError::Schema`). With `attrs()` now leaving
+  unreadable attributes out, it would otherwise have opened with defaults in
+  place of its settings (`float16`, `compression`, the WAL mark, ...).
 - `clawhdf5-format` reader: an old-style group whose local heap has a free
  list pointing outside the heap was listed with names read from the broken
  heap (garbage names on `cve-2021-36977.h5` once its user block was