b11972

common, mtmd: bound control vector layer indices and M-RoPE position loops (#31336)

• common: bound control vector layer indices by the model layer count

A direction tensor layer index is parsed from the tensor name with no
upper bound, and the buffer size and write offset are computed in int.
A large index overflows both, so the accumulation writes before the
start of the buffer.

Pass the model layer count to the loader, reject indices above it like
the existing zero index check, and compute the sizes in size_t.

• mtmd: fill M-RoPE positions by whole merge tiles

The position loops of the Qwen-VL, GLM, PaddleOCR and Qwen2.5-VL
encoders hardcode a 2x2 merge inside a stride of n_merge, so a patch
grid that is not a multiple of the merge writes past the positions
buffer. Iterate over whole merge tiles with n_merge inner steps, which
bounds the writes by the patch count and gives the same positions on
aligned grids.

PaddleOCR also requires a merge aligned image at graph build, as the
Qwen-VL family already does.

Website:

• https://llama.app

Attestations:

• https://github.com/ggml-org/llama.cpp/attestations/61041957

macOS/iOS:

• macOS Apple Silicon (arm64)
• macOS Apple Silicon (arm64, KleidiAI enabled) DISABLED
• macOS Intel (x64)
• iOS XCFramework

Linux:

• Ubuntu x64 (CPU)
• Ubuntu arm64 (CPU)
• Ubuntu s390x (CPU)
• Ubuntu 26.04 s390x (CPU)
• Ubuntu 26.04 s390x (zDNN)
• Ubuntu x64 (Vulkan)
• Ubuntu arm64 (Vulkan)
• Ubuntu x64 (CUDA 12) - CUDA 12.8 libraries
• Ubuntu x64 (CUDA 13) - CUDA 13.4 libraries
• Ubuntu arm64 (CUDA 13) - CUDA 13.4 libraries
• Ubuntu x64 (ROCm 10.0)
• Ubuntu x64 (OpenVINO)
• Ubuntu x64 (SYCL FP32)
• Ubuntu x64 (SYCL FP16)
• Linux arm64 (Snapdragon: CPU, Adreno GPU, Hexagon NPU) - setup guide

Android:

• Android arm64 (CPU)
• Android arm64 (Snapdragon: CPU, Adreno GPU, Hexagon NPU) - setup guide

Windows:

• Windows x64 (CPU)
• Windows arm64 (CPU)
• Windows arm64 (OpenCL Adreno)
• Windows x64 (CUDA 12) - CUDA 12.4 DLLs
• Windows x64 (CUDA 13) - CUDA 13.4 DLLs
• Windows arm64 (CUDA 13) - CUDA 13.4 DLLs
• Windows x64 (Vulkan)
• Windows arm64 (Vulkan)
• Windows x64 (OpenVINO)
• Windows x64 (SYCL)
• Windows x64 (ROCm 10.0)

openEuler:

• DISABLED
• openEuler x86 (310p)
• openEuler x86 (910b, ACL Graph)
• openEuler aarch64 (310p)
• openEuler aarch64 (910b, ACL Graph)

UI:

• UI