OneFlow Segmentation Fault Vulnerability in Autograd Function Component Leading to Denial-of-Service

A segmentation fault vulnerability has been identified in OneFlow version 0.9.0, specifically within the autograd function component. This vulnerability allows attackers to cause a denial-of-service condition by sending a crafted input that triggers the segmentation violation. The issue arises when the 'mark_non_differentiable' method is called on a tensor outside of a custom autograd function context, leading to a segmentation fault and core dump.

Impact

Exploitation of this vulnerability causes a segmentation fault, resulting in a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by creating an instance of 'oneflow._oneflow_internal.autograd.Function.FunctionCtx' and calling the 'mark_non_differentiable' method with a tensor, such as one filled with ones. This action, when performed outside of a custom autograd function context, will cause a segmentation fault and a core dump.