hourhl 4a7ee3126d fix: OOB reads in UGM tokenizer (precompiled_charsmap handling) (#18750) ...

* fix: OOB reads in UGM tokenizer (precompiled_charsmap handling)

- Validate minimum size (4 bytes) before reading xcda_blob_size
- Use strnlen with bounds check instead of unsafe strlen

Both issues allow heap-buffer-overflow from malicious T5/UGM GGUF files.

* Replace unsafe strnlen() with a bounds-checked loop that scans for \0 within the remaining array size.

* move bounds checks to load

* typo merge fix

---------

Co-authored-by: hourhl <hourhl8200@gmail.com>
Co-authored-by: Sigbjørn Skjæret <1629204+CISC@users.noreply.github.com>

2026-07-08 08:02:09 +03:00

..

models

llama: fix quantized kv-cache for dsv4 (#25202)

2026-07-07 17:46:57 +08:00

CMakeLists.txt

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-adapter.cpp

hparams : refactor hparams.n_layer (#24060)

2026-06-05 11:09:36 +03:00

llama-adapter.h

llama : re-enable manual LoRA adapter free (#19983)

2026-03-18 12:03:26 +02:00

llama-arch.cpp

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-arch.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-batch.cpp

kv-cache : fix M-RoPE checkpoints (#20132)

2026-03-06 08:46:51 +02:00

llama-batch.h

fix: correct misspellings in code comments (#21217)

2026-03-31 13:50:51 +02:00

llama-chat.cpp

chat : add Granite 4.1 chat template (#23518)

2026-05-28 13:13:33 +02:00

llama-chat.h

chat : add Granite 4.1 chat template (#23518)

2026-05-28 13:13:33 +02:00

llama-context.cpp

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-context.h

spec : Support Step3.5/3.7 flash mtp3 (#24340)

2026-06-21 11:33:18 +03:00

llama-cparams.cpp

cparams : rename LLAMA_MAX_PARALLEL_SEQUENCES to LLAMA_MAX_SEQ (#14188)

2025-06-15 10:08:58 +03:00

llama-cparams.h

spec : Support Step3.5/3.7 flash mtp3 (#24340)

2026-06-21 11:33:18 +03:00

llama-ext.h

spec : Support Step3.5/3.7 flash mtp3 (#24340)

2026-06-21 11:33:18 +03:00

llama-grammar.cpp

common/grammar: fix grammar parsing issues to prevent stack overflow and hangs (#18604)

2026-03-21 18:43:35 +01:00

llama-grammar.h

common/grammar : replace problematic backtracking regex [\s\S]* (#18342)

2026-01-03 16:02:43 -06:00

llama-graph.cpp

llama: fix quantized kv-cache for dsv4 (#25202)

2026-07-07 17:46:57 +08:00

llama-graph.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-hparams.cpp

spec: fix segfault error on long prompts for eagle3 (#24707)

2026-06-17 17:29:49 +03:00

llama-hparams.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-impl.cpp

llama : correct platform-independent loading of BOOL metadata (#21428)

2026-04-06 01:40:38 +02:00

llama-impl.h

llama: fix quantized kv-cache for dsv4 (#25202)

2026-07-07 17:46:57 +08:00

llama-io.cpp

server : avoid checkpoint data host copies (#22558)

2026-05-02 18:03:25 +03:00

llama-io.h

llama : add option to save memory in device buffers (#22679)

2026-05-05 06:35:07 +03:00

llama-kv-cache-dsa.cpp

llama : add Gemma4 MTP (#23398)

2026-06-07 20:50:54 +08:00

llama-kv-cache-dsa.h

model : support for DeepseekV32ForCausalLM with generic DeepSeek Sparse Attention (DSA) implementation (#23346)

2026-05-29 10:15:17 +02:00

llama-kv-cache-dsv4.cpp

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-kv-cache-dsv4.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-kv-cache-iswa.cpp

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-kv-cache-iswa.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-kv-cache.cpp

llama: fix quantized kv-cache for dsv4 (#25202)

2026-07-07 17:46:57 +08:00

llama-kv-cache.h

DeepSeek V4 (#24162)

2026-06-29 16:58:51 +08:00

llama-kv-cells.h

kv-cache : avoid kv cells copies (#24277)

2026-06-07 21:42:54 +03:00

llama-memory-hybrid-iswa.cpp

llama : add Gemma4 MTP (#23398)

2026-06-07 20:50:54 +08:00

llama-memory-hybrid-iswa.h

llama + spec: MTP Support (#22673)

2026-05-16 20:06:23 +08:00

llama-memory-hybrid.cpp

llama : add Gemma4 MTP (#23398)

2026-06-07 20:50:54 +08:00

llama-memory-hybrid.h

llama + spec: MTP Support (#22673)

2026-05-16 20:06:23 +08:00

llama-memory-recurrent.cpp

hparams : refactor hparams.n_layer (#24060)

2026-06-05 11:09:36 +03:00

llama-memory-recurrent.h

llama : MTP clean-up (#23269)

2026-05-19 15:32:58 +03:00

llama-memory.cpp

memory : correctly handle failure in apply() (#14438)

2025-06-30 18:03:03 +03:00

llama-memory.h

llama : add Gemma4 MTP (#23398)

2026-06-07 20:50:54 +08:00

llama-mmap.cpp

Update llama-mmap to use ftello/fseeko (#22497)

2026-04-30 14:17:52 -07:00

llama-mmap.h

llama: fix llama-model-saver (#20503)

2026-03-25 12:53:16 +02:00

llama-model-loader.cpp

Add Q2_0 quantization: type definition and CPU backend (#24448)

2026-07-07 12:05:47 -07:00

llama-model-loader.h

llama + spec: MTP Support (#22673)

2026-05-16 20:06:23 +08:00

llama-model-saver.cpp

Add arch support for cohere2-MoE (#24260)

2026-06-13 19:49:00 +02:00

llama-model-saver.h

llama: fix llama-model-saver (#20503)

2026-03-25 12:53:16 +02:00

llama-model.cpp

CUDA: remove -sm row, refactor cuBLAS (#24216)

2026-07-06 20:04:53 +02:00

llama-model.h

llama : add llama_model_ftype_name() (#25134)

2026-07-02 17:26:47 +02:00

llama-quant.cpp

Add Q2_0 quantization: type definition and CPU backend (#24448)

2026-07-07 12:05:47 -07:00

llama-quant.h

llama : refactor src/llama.cpp (#10902)

2025-01-03 10:18:53 +02:00

llama-sampler.cpp

sampling : remove unconditional softmax+sort in top-n-sigma sampler (#22645)

2026-06-22 14:08:32 +03:00

llama-sampler.h

llama : rename llama-sampling to llama-sampler (#19363)

2026-02-06 07:26:54 +01:00

llama-vocab.cpp

fix: OOB reads in UGM tokenizer (precompiled_charsmap handling) (#18750)

2026-07-08 08:02:09 +03:00

llama-vocab.h

vocab : refactor normalizer flags into options struct, add strip_accents (#24371)

2026-06-11 10:36:50 +03:00

llama.cpp

llama : skip main_gpu validation when no devices are available (#23405)

2026-06-17 17:30:26 +03:00

unicode-data.cpp

server : better security control for public deployments (#9776)

2024-10-08 13:27:04 +02:00

unicode-data.h

llama : reduce compile time and binary size (#9712)

2024-10-02 15:49:55 +02:00

unicode.cpp

unicode,test: add Qwen3.5 non-backtracking tokenizer handler and regr… (#22110)

2026-05-14 11:03:40 +02:00

unicode.h

vocab: fix Gemma4 tokenizer (#21343)

2026-04-03 10:33:03 +02:00