amyanger 87657c6297 fix(model): admit safetensors header lengths that resemble pickle markers (#5918) ...

A safetensors length prefix such as 640 encodes as 80 02 00 ..., which the
provider read as a pickle PROTO marker and refused before the safetensors
parser ran. The parser that owns the length prefix now makes the call: a
pickle-like prefix is safetensors only when byte 8 is '{' and the declared
length is within the safetensors header ceiling. Real pickles stay refused
and are never deserialized.

Fixes #5895

2026-10-23 02:22:58 +08:00

..

GgufHeader.ts

fix(engines): keep format ceilings fixed and recover the EVMole deadline (#6088)

2026-10-22 03:06:59 +08:00

ModelArtifactProvider.ts

fix(model): admit safetensors header lengths that resemble pickle markers (#5918)

2026-10-23 02:22:58 +08:00

ModelFormat.ts

fix(model): admit safetensors header lengths that resemble pickle markers (#5918)

2026-10-23 02:22:58 +08:00

ModelHeaderReader.ts

fix(engines): keep format ceilings fixed and recover the EVMole deadline (#6088)

2026-10-22 03:06:59 +08:00

ModelTensorTypes.ts

feat(model): inspect GGUF and safetensors declarations (#5603)

2026-10-21 00:50:50 +08:00

SafetensorsHeader.ts

fix(model): admit safetensors header lengths that resemble pickle markers (#5918)

2026-10-23 02:22:58 +08:00