OneFlow Segmentation Fault Vulnerability in Column Stack Component Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in OneFlow version 0.9.0. The issue arises in the 'flow.column_stack' component, where a segmentation violation occurs when the function is called with a list containing a OneFlow tensor and a NumPy array. This type mismatch leads to a segmentation fault and a core dump, causing a crash in the application.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing a crash of the OneFlow application.

Reproduction

To reproduce this vulnerability, use OneFlow version 0.9.0 and call the 'flow.column_stack' function with a list that includes a OneFlow tensor (such as one filled with ones) and a NumPy array (like a 2D array). This will trigger the segmentation fault and core dump.