OneFlow Floating Point Exception Vulnerability in Reshape Component Leading to Denial of Service

A floating point exception vulnerability has been identified in OneFlow version 0.9.0, specifically within the reshape component. This vulnerability allows attackers to cause a denial of service by sending a crafted input that triggers the exception.

Impact

Exploitation of this vulnerability causes a floating point exception, leading to a denial of service condition where the application crashes or becomes unresponsive.

Reproduction

The vulnerability can be reproduced by importing the OneFlow library and creating a tensor with a sample array. Calling the reshape method on this tensor with a zero dimension triggers the floating point exception, causing the application to crash.