]> git.djapps.eu Git - pkg/ggml/sources/whisper.cpp/commit
rpc: fix known RCE in rpc-server (ggml/1103)
authorPatrick Peng <redacted>
Thu, 6 Feb 2025 14:29:13 +0000 (09:29 -0500)
committerGeorgi Gerganov <redacted>
Thu, 27 Feb 2025 06:55:36 +0000 (08:55 +0200)
commitba4645db2ce96c6f2c0dc818ec875380306948ac
treebc337b61b1e4cb0d911ee47efd54bbb2fe8d55f3
parentdfc6ca62f3f219b0bf6320485438eb2aec172791
rpc: fix known RCE in rpc-server (ggml/1103)

Add bounds checking in `rpc_server::copy_tensor` to prevent out-of-bounds writes
+ Check if  `(uint8_t *)dst->data + ggml_nbytes(src)` remains within the destination buffer’s allocated region.
ggml/src/ggml-rpc/ggml-rpc.cpp