YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Security research artifacts
This repository contains proof-of-concept artifacts for a reported vulnerability. The contents are provided to authorized security reviewers for validation.
Scope, impact, affected project, and full analysis live in the corresponding vulnerability report — not in this repository. The public card intentionally carries no technical detail about the issue.
Contents
| path | purpose |
|---|---|
poc.gguf |
proof-of-concept input file |
gen_poc.py |
deterministic generator for poc.gguf (regenerable, no need to trust the blob) |
reproduce.sh |
one-click reproducer: integrity checks → build → run → diagnostics |
vendor/gguf_reader.c, vendor/gguf_reader.h, vendor/main.c |
upstream tool source snapshot (pinned commit recorded in reproduce.sh) |
All upstream source snapshots are byte-identical to the referenced commit;
reproduce.sh verifies their SHA-256 before building.
Reproduce
bash reproduce.sh
Requires clang (or set CC=...) and optionally python3. The script
builds the unmodified upstream tool under AddressSanitizer +
UndefinedBehaviorSanitizer and again without sanitizers, then prints the
expected diagnostics. A clean run exits 0.
- Downloads last month
- -
We're not able to determine the quantization variants.