The GitHub Actions job "CI" on tvm-ffi.git/tvm-ffi-harden-serialization has 
failed.
Run started by GitHub user tqchen (triggered by tqchen).

Head commit for run:
fc98c7d4d21f78123b7b30707c3c675069e92557 / tqchen <[email protected]>
[Extra] Validate node index when deserializing FromJSONGraph

A node index read from the input (root_index and child references)
was used to index decoded_nodes_ / nodes_ without a bounds check, so a
malformed graph with an out-of-range or negative index would read out
of bounds. Bounds-check the node index before indexing, and add small
arity checks for Device data (exactly two elements) and Map/Dict data
(even length), so malformed JSON raises ValueError instead. Covered by
malformed-input tests in the C++ and Python suites.

Report URL: https://github.com/apache/tvm-ffi/actions/runs/27285402343

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to