reject incomplete model buffers (#38852)

2026-09-18 06:03:44 +08:00 · 2026-09-10 18:17:40 -07:00
parent 2a70b40cdc
commit f87e170bee
1 changed files with 2 additions and 1 deletions
@@ -41,7 +41,8 @@ def load_oob(f):
  def buffers():
    while (h := f.read(8)):
      pb = pickle.PickleBuffer(bytearray(struct.unpack('<q', h)[0]))
-      f.readinto(pb)
+      if f.readinto(pb) != pb.raw().nbytes:
+        raise EOFError("incomplete model buffer")
      yield pb
  return pickle.load(io.BytesIO(opcodes), buffers=buffers())