-
Notifications
You must be signed in to change notification settings - Fork 110
Description
Greetings,
We are some security researchers who have built a scanner to detect known security weaknesses. For your repository, we have found instances of CODE_INJECTION in the following locations:
Location-1:
Line 60 in 7735edc
| Base.unsafe_convert(::Type{Ptr{Cvoid}}, s::Status) = s.ptr |
Location-2:
Line 359 in 7735edc
| Base.unsafe_convert(::Type{Ptr{Cvoid}}, o::SessionOptions) = o.ptr |
Location-3:
Line 490 in 7735edc
| Base.unsafe_convert(::Type{Ptr{Cvoid}}, s::Session) = s.ptr |
Location-4:
Line 532 in 7735edc
| Base.unsafe_convert(::Type{Ptr{Cvoid}}, devices::DeviceList) = devices.ptr |
Location-5:
Line 586 in 7735edc
| array = unsafe_wrap(Array, struct_.data, (struct_.len,)) |
Location-6:
Line 666 in 7735edc
| Base.unsafe_convert(::Type{Ptr{Cvoid}}, t::RawTensor) = t.ptr |
Location-7:
Line 714 in 7735edc
| copy(unsafe_wrap(Array, dst[], Int(dst_len[]))) |
Location-8:
Line 1404 in 7735edc
| array = unsafe_wrap(Array, convert(Ptr{UInt8}, data), sizeof(t)) |
Location-9:
Line 1416 in 7735edc
| convert_major_order(unsafe_wrap(Array, data, size(t)|>reverse)) |
Location-10:
Line 1418 in 7735edc
| copy(unsafe_wrap(Array, data, size(t))) |
Please give us feedback. Do you think these are valid instances on security weaknesses? Will you fix them?