CVE-2023-29941: llvm-project commit a0138390 was discovered to contain a segmentation fault via the component...
5.5
Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The primary evidence comes from the vulnerability description itself and the detailed stack trace provided in the linked GitHub issue #59988. The description pinpoints 'matchAndRewriteSortOpmlir::sparse_tensor::SortOp' as the vulnerable component. The stack trace further corroborates this and lists other functions in the direct call path leading to the crash, such as 'SortRewriter::matchAndRewrite' and 'getMangledSortHelperFunc'. Although the specific commit (a0138390) mentioned in the CVE is not the fixing commit and its diff is unrelated to MLIR, the issue report provides a clear path to the functions involved in the segmentation fault. The fixing commit (9c15789333801f73910f7aaac56f9e97f799899a) could not be fetched, so the analysis relies on the issue details and the initial vulnerability report. The file path is inferred based on common MLIR project structure and the nature of the functions (sparse tensor transformations).