mindspore-Ecosystem
/
mindspore
21
0
Fork 27
Code Issues Pull Requests 6 Projects Releases Wiki Activity

Add memory out-of-bounds check for InplaceOp's indices.

This commit is contained in:
CHEN YU 2022-12-07 11:05:51 +08:00
parent 8e6d984b75
commit dce4dc8b20
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
mindspore/ccsrc/plugin/device/cpu/kernel/in_place_op_cpu_kernel.cc
View File

@ -128,6 +128,10 @@ class InplaceOpCpuTypeFunc : public CpuKernelFunc {
int Resize(const BaseOperatorPtr &, const std::vector<KernelTensorPtr> &inputs, const std::vector<KernelTensorPtr> &, int Resize(const BaseOperatorPtr &, const std::vector<KernelTensorPtr> &inputs, const std::vector<KernelTensorPtr> &,
const std::map<uint32_t, tensor::TensorPtr> &) override { const std::map<uint32_t, tensor::TensorPtr> &) override {
auto v_shape = inputs.at(kIndex1)->GetShapeVector(); auto v_shape = inputs.at(kIndex1)->GetShapeVector();
if (v_shape.at(0) != SizeToLong(indices_.size())) {
MS_LOG(ERROR) << "For 'InplaceOp', the size of indices must equal to input_v's shape[0].";
return KRET_RESIZE_FAILED;
}
// x_shape_.size() == v_shape.size() is checked at front end // x_shape_.size() == v_shape.size() is checked at front end
// x_shape_[1:] == v_shape[1:] is checked at front end // x_shape_[1:] == v_shape[1:] is checked at front end