osobhandClaude Opus 5.5 256e7b89e4 fix(format): refuse variable-length and reference VDS data from another file ...

Their elements are global-heap IDs and object addresses in the source
file. The VDS reader copied them raw, so anything decoding them against
the virtual dataset's file got another object's data with no error.
Same-file sources are unaffected. Found by the adversarial review.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-09-25 22:42:57 -05:00

..

clawhdf5

fix(format): refuse variable-length and reference VDS data from another file

2026-09-25 22:42:57 -05:00

clawhdf5-accel

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-agent

docs: withdraw the ZeroClaw integration claims

2026-09-25 11:08:41 -05:00

clawhdf5-android

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-ann

fix(format): apply the base address of files with a user block

2026-09-25 22:07:50 -05:00

clawhdf5-bench

feat(agent): Ed25519-signed checkpoints

2026-09-25 10:13:34 -05:00

clawhdf5-cli

feat(agent): Ed25519-signed checkpoints

2026-09-25 10:13:34 -05:00

clawhdf5-derive

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-filters

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-format

fix(format): refuse variable-length and reference VDS data from another file

2026-09-25 22:42:57 -05:00

clawhdf5-gpu

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-io

fix(format): apply the base address of files with a user block

2026-09-25 22:07:50 -05:00

clawhdf5-migrate

docs: withdraw the ZeroClaw integration claims

2026-09-25 11:08:41 -05:00

clawhdf5-napi

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-netcdf4

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

clawhdf5-py

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00

libaec-sys

build: declare Rust 1.92 as the MSRV and check it in CI

2026-09-23 11:05:26 -05:00