fiajoiwfj/tflite-1

TFLite SignatureDef/TensorMap parser SIGSEGV

This package contains a benign local PoC for a TensorFlow Lite model-file loader crash. A valid Keras-converted .tflite control file loads normally through tf.lite.Interpreter. A one-byte mutation at offset 118 in the serialized SignatureDef/TensorMap region causes the normal interpreter constructor to terminate with SIGSEGV.

Reproduce

Run from the repository root:

reproduce.py

Expected success tokens:

MFV_TFLITE_CONTROL_OK
MFV_TFLITE_SIGSEGV_CONFIRMED
MFV_REPRO_OK_MFV-50

Artifacts

• artifacts/control_seed.tflite: valid control model.
• artifacts/crash_signature_tensor_map.tflite: derived by changing byte 118 from 0x00 to 0x83.
• evidence/loader-results.json: package-local loader verification.
• evidence/gdb-backtrace.txt: native crash backtrace.
• evidence/scanner-tflite.json: ModelScan/PickleScan evidence.

The PoC has no shell, network, credential, persistence, or destructive behavior. The only effect of the crash case is process termination in a child loader subprocess.