| tags: | |
| - security | |
| - proof-of-concept | |
| - pytorch | |
| - torchscript | |
| - flatbuffer | |
| license: mit | |
| # Flatbuffer JIT `__setstate__` Load Exec | |
| Defensive validation / triage only. | |
| This PoC shows that a crafted flatbuffer-exported JIT artifact can keep | |
| `forward` behavior benign while running scripted `__setstate__` logic during | |
| `torch.jit.jit_module_from_flatbuffer()` before inference. | |
| Files: | |
| - `model/clean_setstate.ff`: clean control | |
| - `model/evil_setstate.ff`: crafted flatbuffer artifact | |
| - `model/build-meta.json`: hashes and generation metadata | |
| - `reproduce/replay_flatbuffer_setstate.py`: replay script for clean vs crafted flatbuffer load | |
| Quick repro: | |
| ```bash | |
| python reproduce/replay_flatbuffer_setstate.py \ | |
| --clean model/clean_setstate.ff \ | |
| --crafted model/evil_setstate.ff | |
| ``` | |