Fix integer overflow coverity issues in CPU plugin: 1548297, 1548502,…

… 1548522
openvinotoolkit · Jan 3, 2025 · 4d4bb57 · 4d4bb57
1 parent 548786a
commit 4d4bb57
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/src/plugins/intel_cpu/src/nodes/adaptive_pooling.cpp b/src/plugins/intel_cpu/src/nodes/adaptive_pooling.cpp
@@ -191,7 +191,7 @@ void AdaptivePooling::execute(dnnl::stream strm) {
     auto dstStrides = getChildEdgeAt(0)->getMemory().getDescWithType<BlockedMemoryDesc>()->getStrides();
 
     // unified strides array
-    const size_t tailDimsOffset = (isTailCFmt ? -1 : 0);
+    const ptrdiff_t tailDimsOffset = (isTailCFmt ? -1 : 0);
     const size_t inStrides[5] = {srcStrides[0],
                                  (isTailCFmt ? 1 : srcStrides[1]),
                                  (spatialDimsCount == 3 ? srcStrides[2 + tailDimsOffset] : 0),

diff --git a/src/plugins/intel_cpu/src/nodes/batch_to_space.cpp b/src/plugins/intel_cpu/src/nodes/batch_to_space.cpp
@@ -156,6 +156,7 @@ void BatchToSpace::batchToSpaceKernel() {
     size_t channels = (inShape5D[1] / blockSize);
     channels = channels == 0 ? 1 : channels;
     const size_t workAmount = inShape5D[0] * channels;
+    OPENVINO_ASSERT(workAmount > 0, "BatchToSpace layer has unsupported work amount == 0");
 
     parallel_nt(0, [&](const int ithr, const int nthr) {
         size_t start(0lu), end(0lu);

diff --git a/src/plugins/intel_cpu/src/nodes/subgraph.cpp b/src/plugins/intel_cpu/src/nodes/subgraph.cpp
@@ -740,6 +740,8 @@ Subgraph::ControlFlowPasses Subgraph::getControlFlowPasses() const {
 
 uint8_t Subgraph::getBroadcastingMask(const std::vector<VectorDims>& input_shapes) {
     uint8_t mask = 0;
+    OPENVINO_ASSERT(broadcastable_inputs.size() <= sizeof(mask) * CHAR_BIT,
+                    "Incorrect size of broadcastable inputs of Subgraph");
     for (const auto& broadcastable_input : broadcastable_inputs) {
         const auto& shape = input_shapes[broadcastable_input.first];
         mask = mask << 1;