Skip to content

Conversation

@munahaf
Copy link
Contributor

@munahaf munahaf commented Oct 6, 2023

In file: stylegan2_discriminator.py, method: __init__, a logical expression uses the identity operator. A new object is created inside the identity check operation and then used for matching identity. Since this is a distinct, new object, it will not have identity an match with anything else. As a result, the identity check will have a logical short circuit and the program may have unintended behavior.

The following binary operation

    data_aug is not dict()

compares a newly created object with the identity operator which will always evaluate to True.

I suggested that the logical operation should be reviewed for correctness.

Sponsorship and Support:

This work is done by the security researchers from OpenRefactory and is supported by the Open Source Security Foundation (OpenSSF): Project Alpha-Omega. Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code - and get them fixed – to improve global software supply chain security.

The bug is found by running the Intelligent Code Repair (iCR) tool by OpenRefactory and then manually triaging the results.

@munahaf munahaf force-pushed the Inappropriate_Logic-2stylegan2_discriminator.py16178564271668510936.diff branch from f35662b to e1e7c60 Compare October 6, 2023 18:05
@CLAassistant
Copy link

CLAassistant commented Oct 6, 2023

CLA assistant check
All committers have signed the CLA.

@codecov
Copy link

codecov bot commented Oct 11, 2023

Codecov Report

All modified lines are covered by tests ✅

Files Coverage Δ
...odels/editors/stylegan2/stylegan2_discriminator.py 82.00% <100.00%> (ø)

📢 Thoughts on this report? Let us know!.

Copy link
Collaborator

@zengyh1900 zengyh1900 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@zengyh1900 zengyh1900 merged commit 03e24cc into open-mmlab:main Dec 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants