mirror of
https://github.com/invoke-ai/InvokeAI
synced 2024-08-30 20:32:17 +00:00
e0e01f6c50
Prior to this commit, all models would be loaded with the extremely unsafe `torch.load` method, except those with the exact extension `.safetensors`. Even a change in casing (eg. `saFetensors`, `Safetensors`, etc) would cause the file to be loaded with torch.load instead of the much safer `safetensors.toch.load_file`. If a malicious actor renamed an infected `.ckpt` to something like `.SafeTensors` or `.SAFETENSORS` an unsuspecting user would think they are loading a safe .safetensor, but would in fact be parsing an unsafe pickle file, and executing an attacker's payload. This commit fixes this vulnerability by reversing the loading-method decision logic to only use the unsafe `torch.load` when the file extension is exactly `.ckpt`. |
||
|---|---|---|
| .. | ||
| config | ||
| generator | ||
| image_util | ||
| model_management | ||
| prompting | ||
| restoration | ||
| stable_diffusion | ||
| training | ||
| util | ||
| web | ||
| __init__.py | ||
| args.py | ||
| generate.py | ||
| globals.py | ||
| safety_checker.py | ||