Views
No views yet
staticSliceImporter: stack-buffer-overflow via unchecked axes value in the INT32-weight fast path (importerUtils.cpp:1137).parsers/onnx submodule pointing to onnx/onnx-tensorrt @ 6bde659 (tag release/10.16-GA).repro_slice_oob.onnx — minimal malicious model (271 bytes). Single Slice node with data shape [4,4] FLOAT, starts=[0], ends=[4], axes=[8], steps=[1]. All slice inputs are INT32 constant tensors, satisfying the fast-path gate. axes=8 indexes past the 8-element int64_t d[8] stack array.harness_l7.cpp — C++ harness that invokes the ONNX parser on the malicious model.libnvonnxparser.so from TensorRT 10.16.1 with ASan:1cd tensorrt/parsers/onnx && mkdir build_asan && cd build_asan
2cmake .. -DCMAKE_CXX_FLAGS="-fsanitize=address -g -O1 -fno-omit-frame-pointer"
3make -j$(nproc) nvonnxparser1g++ -fsanitize=address -g -O0 -std=c++17 \
2 -I<trt_include> -I<cuda_stub_include> \
3 harness_l7.cpp -o harness_l7 \
4 -L<build_asan_dir> -lnvonnxparser -Wl,-rpath,<build_asan_dir>./harness_l7 repro_slice_oob.onnximporterUtils.cpp:1137 — READ of size 8 past inputDims[416,488), with adjacent starts/sizes/steps arrays as overwrite targets.