[Mlir-commits] [mlir] [mlir] Fix use-after-free bugs in {RankedTensorType|VectorType}::Builder (PR #68969)

Benjamin Maxwell llvmlistbot at llvm.org
Tue Oct 17 14:31:56 PDT 2023


================
@@ -277,7 +277,7 @@ class RankedTensorType::Builder {
     if (storage.empty())
       storage.append(shape.begin(), shape.end());
     storage.erase(storage.begin() + pos);
-    shape = {storage.data(), storage.size()};
+    shape = {};
----------------
MacDue wrote:

> if shape is not empty then storage should be empty.
> if shape is empty then storage contains the information.

Yep, the two fields are mutually exclusive :)

https://github.com/llvm/llvm-project/pull/68969


More information about the Mlir-commits mailing list