reject input rank mismatch in transpose reshape

Author: aizu-m

src/subgraph/static-transpose.c

@@ -74,7 +74,15 @@ static enum xnn_status reshape_transpose_operator(
   assert(output_id < num_values);
 
   const size_t num_dims = opdata->shape1.num_dims;
-  assert(input->shape.num_dims == num_dims);
+  if (input->shape.num_dims != num_dims) {
+    xnn_log_error(
+      "failed to reshape %s operator with input ID #%" PRIu32
+      ": number of input dimensions (%zu) does not match the number of "
+      "permutation dimensions (%zu)",
+      xnn_node_type_to_string(xnn_node_type_static_transpose), input_id,
+      input->shape.num_dims, num_dims);
+    return xnn_status_invalid_parameter;
+  }
 
   switch (opdata->operator_objects[0]->type) {
     case xnn_operator_type_transpose_nd_x16: {

test/subgraph/static-transpose.cc

@@ -85,4 +85,26 @@ INSTANTIATE_TEST_SUITE_P(Transpose, TransposeQU8, rank_params);
 INSTANTIATE_TEST_SUITE_P(Transpose, TransposeF16, rank_params);
 INSTANTIATE_TEST_SUITE_P(Transpose, TransposeF32, rank_params);
 
+TEST(Transpose, reshape_rejects_input_rank_mismatch) {
+  ASSERT_EQ(xnn_status_success, xnn_initialize(nullptr /* allocator */));
+
+  // The permutation fixes the operator rank at define time. An external input
+  // may be reshaped to a different rank at runtime; the reshape must reject the
+  // mismatch instead of transposing with a stale dimension count and reading
+  // past the input buffer.
+  const std::vector<size_t> perm = {2, 0, 1};
+  SubgraphTester subgraph(2);
+  subgraph.AddInputTensor(3, xnn_datatype_fp32, 0)
+      .AddOutputTensor(3, xnn_datatype_fp32, 1)
+      .AddTranspose(perm, 0, 1);
+  if (subgraph.CreateRuntime() == xnn_status_unsupported_hardware) {
+    GTEST_SKIP();
+  }
+
+  std::vector<float> data(6, 0.0f);
+  subgraph.ReshapeExternalTensor(std::vector<size_t>({2, 3}), data.data(), 0)
+      .ReshapeRuntime();
+  EXPECT_EQ(subgraph.Status(), xnn_status_invalid_parameter);
+}
+
 }  // namespace xnnpack