asherreis/mfv-circle-onert-num-elements-wrap-poc

Security research artifact — Circle / ONE onert shape-wrap PoC

This repository hosts crafted .circle model files and minimal harnesses used for coordinated disclosure under the huntr Model File Format Vulnerability (MFV) program (format: Circle – Samsung).

It is a security research artifact only. It is not a usable neural network. Do not deploy it in production.

Pin: evidence was collected against Samsung ONE 1.30.0 (last public tree with runtime/).

Contents

• depth2space_shape_wrap*.circle, spacetodepth_shape_wrap.circle, pad_shape_wrap.circle, tile_shape_wrap.circle
• harness_depth2space_wrap.c — standalone algorithm harness (no ONE build required)
• e2e_circle_depth2space.cpp / e2e_nnfw_circle.cpp — e2e paths against ONE 1.30.0
• reproduce.sh — build/run hints
• asan-excerpt.txt — AddressSanitizer excerpt

Reproduce

# Fastest (no ONE build):
gcc -O1 -g -fsanitize=address harness_depth2space_wrap.c -o harness
ASAN_OPTIONS=halt_on_error=1:detect_leaks=0 ./harness

Full nnfw path requires an ASan build of ONE 1.30.0 — see reproduce.sh / report.

Disclaimer

Provided for vulnerability triage and remediation only. No warranty. Do not use against systems you do not own.