From 047b86d0f4c0530304ab5052b74d2bd0fe7b9f5e Mon Sep 17 00:00:00 2001 From: ylwango613 <1217816127@qq.com> Date: Sat, 3 Jan 2026 14:17:17 +0800 Subject: [PATCH] Repair an integer division by zero vulnerability in ggufPadding --- fs/ggml/gguf.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/fs/ggml/gguf.go b/fs/ggml/gguf.go index e093efea1..357c7ca7f 100644 --- a/fs/ggml/gguf.go +++ b/fs/ggml/gguf.go @@ -237,6 +237,11 @@ func (llm *gguf) Decode(rs io.ReadSeeker) error { alignment := llm.kv.Uint("general.alignment", 32) + // Validate alignment + if alignment == 0 { + return fmt.Errorf("invalid general.alignment: cannot be zero") + } + offset, err := rs.Seek(0, io.SeekCurrent) if err != nil { return err