Skip to content

Validate value indices when deserializing list types #7637

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 14, 2025

Conversation

dbort
Copy link
Contributor

@dbort dbort commented Jan 13, 2025

Summary:
List types contain lists of indices into the method's values_ list. Ensure that we don't overflow the list when those indices are corrupt. This should guard:

  • IntList
  • OptionalTensorList
  • TensorList

The other scalar list types do not do the unboxing that IntList does, so shouldn't run into this problem.

Differential Revision: D68127899

Copy link

pytorch-bot bot commented Jan 13, 2025

🔗 Helpful Links

🧪 See artifacts and rendered test results at hud.pytorch.org/pr/pytorch/executorch/7637

Note: Links to docs will display an error until the docs builds have been completed.

✅ No Failures

As of commit c91d7de with merge base 83c0da5 (image):
💚 Looks good so far! There are no failures yet. 💚

This comment was automatically generated by Dr. CI and updates every 15 minutes.

@facebook-github-bot facebook-github-bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Jan 13, 2025
@facebook-github-bot
Copy link
Contributor

This pull request was exported from Phabricator. Differential Revision: D68127899

Summary:

List types contain lists of indices into the method's `values_` list. Ensure that we don't overflow the list when those indices are corrupt. This should guard:
- IntList
- OptionalTensorList
- TensorList

The other scalar list types do not do the unboxing that IntList does, so shouldn't run into this problem.

Differential Revision: D68127899
@facebook-github-bot
Copy link
Contributor

This pull request was exported from Phabricator. Differential Revision: D68127899

@facebook-github-bot facebook-github-bot merged commit b450f9c into pytorch:main Jan 14, 2025
45 of 47 checks passed
YIWENX14 pushed a commit that referenced this pull request Jan 28, 2025
Differential Revision: D68127899

Pull Request resolved: #7637
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. fb-exported topic: not user facing
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants