MindSpore hfftn and rfft2 segmentation fault
Segmentation faults occur in MindSpore 2.5.0 when calling FFT functions hfftn and rfft2 with empty axes parameters, potentially enabling denial of service attacks.
What happened
Segmentation faults occur when calling mindspore.numpy.fft.hfftn() with empty axes parameter on a 2x2 int32 tensor, and when calling mindspore.numpy.fft.rfft2() with empty axes parameter on a 1x1x1x1x1 int32 tensor in MindSpore 2.5.0.
The issue was reported to the MindSpore project on 2025-03-23.
Reported impact
The segmentation faults could enable a denial of service attack by causing the application to crash.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.