Skip to content

Harden ZnSphere lattice codec against invalid parameters#4826

Closed
sh00s wants to merge 2 commits intofacebookresearch:mainfrom
sh00s:export-D93670702
Closed

Harden ZnSphere lattice codec against invalid parameters#4826
sh00s wants to merge 2 commits intofacebookresearch:mainfrom
sh00s:export-D93670702

Conversation

@sh00s
Copy link

@sh00s sh00s commented Feb 20, 2026

Summary: Add bounds checks for dim and r2 in ZnSphereSearch and ZnSphereCodecRec constructors to prevent excessive computation and allocation overflows from corrupted deserialized data.

Reviewed By: mdouze

Differential Revision: D93670702

Andrejs Krasilnikovs added 2 commits February 20, 2026 13:45
Summary:

Add n_levels > 0 check in Panorama::set_derived_values() to prevent division by zero, and validate n_levels during deserialization.

Reviewed By: mdouze

Differential Revision: D93670703
Summary: Add bounds checks for dim and r2 in ZnSphereSearch and ZnSphereCodecRec constructors to prevent excessive computation and allocation overflows from corrupted deserialized data.

Reviewed By: mdouze

Differential Revision: D93670702
@meta-cla meta-cla bot added the CLA Signed label Feb 20, 2026
@meta-codesync
Copy link
Contributor

meta-codesync bot commented Feb 20, 2026

@sh00s has exported this pull request. If you are a Meta employee, you can view the originating Diff in D93670702.

@meta-codesync
Copy link
Contributor

meta-codesync bot commented Feb 21, 2026

This pull request has been merged in 0bbf770.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants