Uploaded image for project: 'Apache Arrow'
  1. Apache Arrow
  2. ARROW-11470

[C++] Overflow occurs on integer multiplications in ComputeRowMajorStrides, ComputeColumnMajorStrides, and CheckTensorStridesValidity

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 4.0.0
    • C++

    Description

      OSS-Fuzz reports the integer multiplication in ComputeRowMajorStrides function occurs overflow.

      https://oss-fuzz.com/testcase-detail/6232257264222208

      The same issue exists in ComputeColumnMajorStrides.

      Moreover the similar overflow issue is occurred in CalculateValueOffset function called from CheckTensorStridesValidity function.

      https://oss-fuzz.com/testcase-detail/6583463383793664

      Attachments

        Activity

          People

            mrkn Kenta Murata
            mrkn Kenta Murata
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 4h 50m
                4h 50m