Update README.md
Browse files
README.md
CHANGED
|
@@ -10,9 +10,9 @@ model_format: gguf
|
|
| 10 |
security_scan: intentionally-malformed
|
| 11 |
---
|
| 12 |
|
| 13 |
-
# Load-Time Division-by-Zero
|
| 14 |
|
| 15 |
-
⚠️ This repository does
|
| 16 |
The file provided is intentionally malformed and exists solely for security research and vulnerability reproduction.
|
| 17 |
|
| 18 |
## PoC Artifact
|
|
@@ -25,8 +25,9 @@ The file provided is intentionally malformed and exists solely for security rese
|
|
| 25 |
|
| 26 |
## Vulnerability Summary
|
| 27 |
|
| 28 |
-
A malformed GGUF file can trigger a deterministic crash during model loading due to a division-by-zero condition in GGUF tensor shape validation.
|
| 29 |
-
|
|
|
|
| 30 |
|
| 31 |
## Reproduction
|
| 32 |
|
|
@@ -35,9 +36,3 @@ From a `llama.cpp` build directory:
|
|
| 35 |
```bash
|
| 36 |
./llama-gguf poc_fp_exception.gguf r
|
| 37 |
```
|
| 38 |
-
|
| 39 |
-
## Expected Result
|
| 40 |
-
|
| 41 |
-
The process terminates during GGUF parsing with a fatal runtime error
|
| 42 |
-
(division by zero). This occurs deterministically during model load and
|
| 43 |
-
does not require any non-default configuration.
|
|
|
|
| 10 |
security_scan: intentionally-malformed
|
| 11 |
---
|
| 12 |
|
| 13 |
+
# Load-Time Division-by-Zero Crash in llama.cpp GGUF Metadata Parser
|
| 14 |
|
| 15 |
+
⚠️ **This repository does not contain a machine learning model.**
|
| 16 |
The file provided is intentionally malformed and exists solely for security research and vulnerability reproduction.
|
| 17 |
|
| 18 |
## PoC Artifact
|
|
|
|
| 25 |
|
| 26 |
## Vulnerability Summary
|
| 27 |
|
| 28 |
+
A malformed GGUF file can trigger a deterministic crash during model loading due to a division-by-zero condition in GGUF tensor shape validation.
|
| 29 |
+
|
| 30 |
+
The crash occurs at **load time**, before inference or tensor data processing, and results in immediate process termination.
|
| 31 |
|
| 32 |
## Reproduction
|
| 33 |
|
|
|
|
| 36 |
```bash
|
| 37 |
./llama-gguf poc_fp_exception.gguf r
|
| 38 |
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|