OneFlow Division-by-Zero Vulnerability in the flow.floor_divide() Component Allowing Denial-of-Service

A division-by-zero vulnerability has been identified in OneFlow version 0.9.0, specifically within the flow.floor_divide() function. This vulnerability allows attackers to cause a denial-of-service (DoS) by sending a crafted input tensor that includes zero, leading to a floating-point exception, a crash, and a core dump.

Impact

Exploitation of this vulnerability causes a floating-point exception, leading to a crash and a core dump.

Reproduction

The vulnerability can be reproduced by calling the flow.floor_divide() function with a tensor containing zeros as the divisor. This will trigger a division-by-zero error, causing a floating-point exception and a core dump.