Skip to content

Fix integer overflow in Vulkan multiply_integers #18681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lucylq wants to merge 1 commit into
base: main
Choose a base branch
from
+14 −15
Open

Fix integer overflow in Vulkan multiply_integers #18681

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 14 additions & 15 deletions backends/vulkan/runtime/utils/VecUtils.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@

#include <executorch/backends/vulkan/runtime/vk_api/Exception.h>

#include <c10/util/safe_numerics.h>

#include <cmath>
#include <limits>
#include <numeric>
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

<numeric> appears to be unused in this header after replacing std::accumulate with c10::mul_overflows. Consider removing the <numeric> include to avoid unnecessary dependencies/compile overhead.

Suggested change
#include <numeric>

Copilot uses AI. Check for mistakes.
Expand Down Expand Up @@ -465,24 +467,19 @@ inline ivec4 make_whcn_ivec4(const std::vector<int64_t>& arr) {
}

/*
* Wrapper around std::accumulate that accumulates values of a container of
* integral types into int64_t. Taken from `multiply_integers` in
* <c10/util/accumulate.h>
* Computes the product of integral values in a container, accumulating into
* int64_t with overflow checking. Throws on overflow.
*/
template <
typename C,
std::enable_if_t<std::is_integral<typename C::value_type>::value, int> = 0>
inline int64_t multiply_integers(const C& container) {
return std::accumulate(
container.begin(),
container.end(),
static_cast<int64_t>(1),
std::multiplies<>());
return multiply_integers(container.begin(), container.end());
}

/*
* Product of integer elements referred to by iterators; accumulates into the
* int64_t datatype. Taken from `multiply_integers` in <c10/util/accumulate.h>
* Computes the product of integral values referred to by iterators,
* accumulating into int64_t with overflow checking. Throws on overflow.
*/
template <
typename Iter,
Expand All @@ -491,11 +488,13 @@ template <
typename std::iterator_traits<Iter>::value_type>::value,
int> = 0>
inline int64_t multiply_integers(Iter begin, Iter end) {
// std::accumulate infers return type from `init` type, so if the `init` type
// is not large enough to hold the result, computation can overflow. We use
// `int64_t` here to avoid this.
return std::accumulate(
begin, end, static_cast<int64_t>(1), std::multiplies<>());
int64_t result = 1;
for (Iter it = begin; it != end; ++it) {
VK_CHECK_COND(
!c10::mul_overflows(result, static_cast<int64_t>(*it), &result),
"Integer overflow in multiply_integers");
}
return result;
}

class WorkgroupSize final {
Expand Down
Loading