llama.cpp

Public/llama.cpp

Fork 0

mirror of https://github.com/ggml-org/llama.cpp.git synced 2026-09-04 20:11:05 +02:00

Commit Graph

Author	SHA1	Message	Date
hcl	5788b510a1	gguf-py: validate n_dims and guard against uint64 overflow in reader (#25401 ) The Python GGUF reader lacked two guards the C++ loader has: - n_dims read as uint32 with no GGML_MAX_DIMS bound -> crafted file with huge n_dims triggers oversized memmap read / OOM. - np.prod(dims) on uint64 wraps silently -> a crafted dims triple can overflow to a tiny element count, passing an undersized read through. Add a GGML_MAX_DIMS check and compute the element count with Python ints. Fixes #25378	2026-08-04 12:12:48 +03:00

Author

SHA1

Message

Date

hcl

5788b510a1

gguf-py: validate n_dims and guard against uint64 overflow in reader (#25401 )

The Python GGUF reader lacked two guards the C++ loader has:
- n_dims read as uint32 with no GGML_MAX_DIMS bound -> crafted file with
  huge n_dims triggers oversized memmap read / OOM.
- np.prod(dims) on uint64 wraps silently -> a crafted dims triple can
  overflow to a tiny element count, passing an undersized read through.

Add a GGML_MAX_DIMS check and compute the element count with Python ints.

Fixes #25378

2026-08-04 12:12:48 +03:00

1 Commits