You can deploy this model and start earning money today!

hacnho/
pytorch-v13-legacy-stride-allocation-dos-poc

Views

No views yet

PyTorch v1.3 legacy stride allocation DoS PoC

This repository contains two PyTorch v1.3 legacy .pt files:

a normal control legacy state_dict
a malicious legacy state_dict whose serialized linear.bias.stride is changed from (1,) to (1073741824,)

Observed under a 2 GiB address-space cap:

control:
- torch.load(..., map_location="cpu") succeeds
- torch.load(..., map_location="cpu", weights_only=True) succeeds
malicious:
- both load paths fail with an allocator error: can't allocate memory

Reproduction:

bash

python3 build_poc.py
python3 reproduce.py

Public repo:

Repo: https://huggingface.co/hacnho/pytorch-v13-legacy-stride-allocation-dos-poc
Control file: https://huggingface.co/hacnho/pytorch-v13-legacy-stride-allocation-dos-poc/resolve/main/control_v13_legacy_state_dict.pt
Malicious file: https://huggingface.co/hacnho/pytorch-v13-legacy-stride-allocation-dos-poc/resolve/main/malicious_v13_stride_1g.pt
Reproducer: https://huggingface.co/hacnho/pytorch-v13-legacy-stride-allocation-dos-poc/resolve/main/reproduce.py
Repo state at verification time: pending post-upload verification