Views
No views yet
.riva/EFF archive that demonstrates
manifest-controlled PickleContentCallback execution when a consumer reads an
artifact with the default Artifact.get_content() behavior.nvidia-eff==0.6.7nemo2riva commit 95db8a086d32db1021dfea6b307b119680d9ac7e1python3 -m venv .venv-riva
2.venv-riva/bin/pip install --extra-index-url https://pypi.nvidia.com nvidia-eff==0.6.7
3rm -f /tmp/riva_eff_pickle_callback_executed
4.venv-riva/bin/python test_eff_pickle_callback_rce.py
5.venv-riva/bin/eff-inspect poc/malicious-pickle-callback.riva content -a artifacts:payload.bin
6cat /tmp/riva_eff_pickle_callback_executedeff_pickle_callback_executedpoc/malicious-pickle-callback.riva71502a162533d0cb5fca537b8bb8bcb7a5841047ab9d25277a9161b4c5f1f95b