xinyun/ComfyUI
1
0
Fork 0
mirror of https://git.datalinker.icu/comfyanonymous/ComfyUI synced 2026-09-05 01:57:05 +08:00
Code Issues Packages Projects Releases Wiki Activity

[fix] class pollution vulnerability

Browse Source
This commit is contained in:
superboy-zjc 2025-06-05 15:05:34 -04:00
parent d8759c772b
commit c19e49525b
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
comfy/utils.py
View File

@ -710,6 +710,8 @@ def safetensors_header(safetensors_path, max_size=100*1024*1024):
def set_attr(obj, attr, value): def set_attr(obj, attr, value):
attrs = attr.split(".") attrs = attr.split(".")
for name in attrs[:-1]: for name in attrs[:-1]:
if name.startswith("__") and name.endswith("__"):
raise ValueError("Cannot set attribute across dunder attributes")
obj = getattr(obj, name) obj = getattr(obj, name)
prev = getattr(obj, attrs[-1]) prev = getattr(obj, attrs[-1])
setattr(obj, attrs[-1], value) setattr(obj, attrs[-1], value)
@ -722,6 +724,8 @@ def copy_to_param(obj, attr, value):
# inplace update tensor instead of replacing it # inplace update tensor instead of replacing it
attrs = attr.split(".") attrs = attr.split(".")
for name in attrs[:-1]: for name in attrs[:-1]:
if name.startswith("__") and name.endswith("__"):
raise ValueError("Cannot set attribute across dunder attributes")
obj = getattr(obj, name) obj = getattr(obj, name)
prev = getattr(obj, attrs[-1]) prev = getattr(obj, attrs[-1])
prev.data.copy_(value) prev.data.copy_(value)