Skip to content

security: minimally verify live tensor FlatBuffers on 1.6 - #1404

Draft
fvaloppi-nv wants to merge 1 commit into
release/1.6.xfrom
codex/fix-1.6-flatbuffer-verification-minimal
Draft

fvaloppi-nv wants to merge 1 commit into
release/1.6.xfrom
codex/fix-1.6-flatbuffer-verification-minimal

Conversation

@fvaloppi-nv

Copy link
Copy Markdown
Contributor

Summary

  • verify live tensor FlatBuffers before typed field access or publication
  • ignore malformed final samples instead of publishing them
  • cover valid, empty, truncated, and invalid-root buffers

Scope

This is the minimal alternative to #1380 for BDSA-2026-38550. It intentionally does not change public APIs, allocation limits, logging, tracker state policy, or haptic command policy. The valid-data path remains unchanged.

Validation

  • SKIP=check-copyright-year pre-commit run --all-files
  • DCO commit hook

Native CMake/Catch2 validation could not run in the authoring environment because CMake and clang-format-14 are unavailable; CI should run the native suite.

Signed-off-by: fvaloppi-nv <fvaloppi@nvidia.com>
@coderabbitai

coderabbitai Bot commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

This branch was successfully deployed

1 active deployment
dev — eed440ad Deployed Oct 31, 2026 by fvaloppi-nv via publish-wheel #6362
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants