| tags: | |
| - security | |
| - proof-of-concept | |
| - ggml | |
| license: mit | |
| # GGML missing FF tensor assertion PoC | |
| This repository contains a minimal legacy `.ggml` file that makes the public | |
| `llama.cpp` converter `convert_llama_ggml_to_gguf.py` abort with: | |
| ```text | |
| AssertionError: Missing layer 0 FF tensor | |
| ``` | |
| ## Files | |
| - `malicious_missing_ff_tensor.ggml` | |
| Tiny malformed GGML file with valid header and vocab but no tensors. | |
| - `build_poc.py` | |
| Deterministically rebuilds the file. | |
| - `reproduce.py` | |
| Runs the public converter on the file and captures the assertion. | |