You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

HDF5 Virtual Dataset External File Write ModelScan Bypass

This PoC shows that an HDF5 model file can contain a Virtual Dataset (VDS) that writes through to a dataset in another HDF5 file.

When the virtual dataset in the main .h5 file is opened with write access and assigned to, HDF5 follows the VDS mapping and writes the tensor bytes into the external HDF5 sink file. ModelScan 0.8.8 reports zero issues and skips the file as MODEL_CONFIG not found.

Files

hdf5_vds_file_write.h5 - main PoC HDF5 file containing the virtual dataset.
vds_sink.h5 - external HDF5 file modified through the VDS mapping.
build_and_verify.py - builds the PoC and verifies the behavior.
verify_report.json - local verification output.

Reproduction

Run:

python build_and_verify.py

Expected results:

verification.is_virtual=true
verification.write_marker_ok=true
verification.sink_after=HDF5_VDS_FILE_WRITE_MARKER!!!!!!
modelscan.parsed.summary.total_issues=0
modelscan.parsed.summary.skipped.total_skipped=1

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support