---
tags:
  - security
  - proof-of-concept
  - ggml
license: mit
---

# GGML missing FF tensor assertion PoC

This repository contains a minimal legacy `.ggml` file that makes the public
`llama.cpp` converter `convert_llama_ggml_to_gguf.py` abort with:

```text
AssertionError: Missing layer 0 FF tensor
```

## Files

- `malicious_missing_ff_tensor.ggml`
  Tiny malformed GGML file with valid header and vocab but no tensors.
- `build_poc.py`
  Deterministically rebuilds the file.
- `reproduce.py`
  Runs the public converter on the file and captures the assertion.