OneFlow Segmentation Fault Vulnerability in Broadcasting/Type Conversion

A vulnerability in OneFlow version 0.9.0 allows for improper input validation, leading to a segmentation fault. This issue arises when a Python sequence is added to native code during broadcasting or type conversion, causing a shape inconsistency that results in a crash.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing the application to crash.

Reproduction

The vulnerability can be reproduced by calling the 'flow.eye' function to create a tensor, and then adding a diagonal sequence to it. This operation causes a shape mismatch that triggers the segmentation fault.