Harmless PoC: TFLM FULLY_CONNECTED missing output bytes gate OOB WRITE
FullyConnectedPrepare checks types/quant and rejects hybrid float/int8, but never gates
output/input/filter/bias bytes vs element counts, and never checks input last-dim
vs filter accum_depth. Eval โ reference_ops::FullyConnected โ ASan stack/heap OOB WRITE
(primary) / READ (secondary).
Pin: 096563546742ba81adb6f012ab718d196a48e02d
Reproduce
# Against local tflite-micro checkout at the pin; see NOTES.md + build_and_run.sh
./build_and_run.sh
# Primary WRITE:
ASAN_OPTIONS=detect_leaks=0:halt_on_error=1 ./repro_undersized_output_bytes_asan
ASAN_OPTIONS=detect_leaks=0:halt_on_error=1 ./repro_undersized_output_heap_asan
Harmless crash PoC only. No ACE payload.
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support