gguf : prevent integer overflow

ggml-org · Jan 29, 2024 · 78fd95e · 78fd95e
1 parent 81584d9
commit 78fd95e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/ggml.c b/src/ggml.c
@@ -19348,10 +19348,9 @@ struct gguf_context * gguf_init_from_file(const char * fname, struct gguf_init_p
         }
 
         // sanity-checks to prevent from integer/buffer overflows
-        // - sizeof(struct gguf_tensor_info)*n_tensors < SIZE_MAX
-        // - sizeof(struct gguf_kv)*n_kv               < SIZE_MAX
 
         ok = ok && (ctx->header.n_tensors < SIZE_MAX/sizeof(struct gguf_tensor_info));
+        ok = ok && (ctx->header.n_tensors < SIZE_MAX/ggml_tensor_overhead());
         ok = ok && (ctx->header.n_kv      < SIZE_MAX/sizeof(struct gguf_kv));
 
         if (!ok) {