Skip to content

llamafu_image_process overflow #1

Description

@theofficejackpot

llamafu_image_process allocates malloc(n_embd * sizeof(float)) and then passes
that buffer to clip_image_batch_encode, which writes n_output_tokens × n_embd
floats — for a typical vision tower that's hundreds of times the allocation.

cheers, thanks for the initial!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions