HDF4-EOS: fix 2 heap-buffer-overflow

Fixes #14378
Fixes #14379

Author: rouault

autotest/gcore/data/hdf4/issue_14378.he4

@@ -619,3 +619,27 @@ def test_hdf4_gh_14363():
         pytest.skip()
 
     gdal.Open("data/hdf4/issue_14363.he4")
+
+
+###############################################################################
+# Test bugfix for https://github.com/OSGeo/gdal/issues/14378
+
+
+def test_hdf4_gh_14378():
+
+    if gdaltest.hdf4_drv is None:
+        pytest.skip()
+
+    gdal.Open("data/hdf4/issue_14378.he4")
+
+
+###############################################################################
+# Test bugfix for https://github.com/OSGeo/gdal/issues/14379
+
+
+def test_hdf4_gh_14379():
+
+    if gdaltest.hdf4_drv is None:
+        pytest.skip()
+
+    gdal.Open("data/hdf4/issue_14379.he4")

autotest/gcore/data/hdf4/issue_14379.he4

@@ -1753,8 +1753,12 @@ GDfieldinfo(int32 gridID, const char *fieldname, int32 * rank, int32 dims[],
 
 	    if (statmeta == 0)
 	    {
-		memmove(utlstr, utlstr + 1, strlen(utlstr) - 2);
-		utlstr[strlen(utlstr) - 2] = 0;
+		const size_t len = strlen(utlstr);
+		if (len >= 2 && utlstr[0] == '(' && utlstr[len-1] == ')')
+		{
+		    memmove(utlstr, utlstr + 1, len - 2);
+		    utlstr[len - 2] = '\0';
+		}
 
 		/* Parse trimmed DimList string and get rank */
 		ndims = EHparsestr(utlstr, ',', ptr, slen);

autotest/gcore/hdf4_read.py

@@ -1301,8 +1301,12 @@ SWfinfo(int32 swathID, const char *fieldtype, const char *fieldname,
 
 	if (statmeta == 0)
 	{
-	    memmove(utlstr, utlstr + 1, strlen(utlstr) - 2);
-	    utlstr[strlen(utlstr) - 2] = 0;
+	    const size_t len = strlen(utlstr);
+	    if (len >= 2 && utlstr[0] == '(' && utlstr[len-1] == ')')
+	    {
+	        memmove(utlstr, utlstr + 1, len - 2);
+	        utlstr[len - 2] = '\0';
+	    }
 
 	    /* Parse trimmed DimList string and get rank */
 	    ndims = EHparsestr(utlstr, ',', ptr, slen);