-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix undefined behavior in integer advanced indexing and indexing functions #1894
Conversation
…ent `ssize_t` Previously, indices were directly cast to `ssize_t` before being clipped or wrapped, causing values to overflow or underflow and giving unreliable results ClipIndex and WrapIndex remade as structs which check the bounds of `ssize_t` against the bounds of the indices type then choose to cast to the appropriate type, before performing clipping and/or wrapping ClipIndex and WrapIndex structs have also been moved to a separate header file, `libtensor/include/utils/indexing_utils.hpp`
Moved common constexpr variables out of branches. Replaced `static constexpr` with `constexpr`. Since these are defined in procedure scope, `static` is not required. Introduced typed temporary variables, so that type deduction for `sycl::min`, `sycl::max`, `sycl::clamp` can work and removed explicit use of their template parameter. Added explicit static_cast on value of `projected` variable computed as IndT type.
This is possible because ProjectorT is literal type (no state and default constructor).
Deleted rendered PR docs from intelpython.github.com/dpctl, latest should be updated shortly. 🤞 |
Array API standard conformance tests for dpctl=0.19.0dev0=py310hdf72452_209 ran successfully. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGMT! Thank you for fixing this and adding tests @ndgrigorian
Array API standard conformance tests for dpctl=0.19.0dev0=py310hdf72452_212 ran successfully. |
This PR proposes a solution to undefined behavior that could occur in some edge cases with integer advanced indexing, where indices OOB for
ssize_t
(akastd::ptrdiff_t
) would be cast directly tossize_t
and overflow or underflow.As
ssize_t
/std::ptrdiff_t
is defined to be a signed type with the same size assize_t
, this means that on 32-bit systems, overflow/underflow could occur for even smaller values.This PR also re-organizes
integer_advanced_indexing.hpp
by reducing namespace clutter, and moves the rewrittenClipIndex
andWrapIndex
structs into a separate header file. This enables them to be re-used more easily in extensions.