diff options
author | AUTOMATIC1111 <16777216c@gmail.com> | 2022-10-11 21:50:19 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-10-11 21:50:19 +0300 |
commit | 419e539fe33e5bd1f7c7f55b477f955f6bdfc822 (patch) | |
tree | 131ea9501cefd29b7e5cb4b3e1ea36d76c64beb6 /modules/safe.py | |
parent | 2536ecbb1790da2af0d61b6a26f38732cba665cd (diff) | |
parent | d7474a5185df2af84a93a12bc7e140d24e0fc516 (diff) | |
download | stable-diffusion-webui-gfx803-419e539fe33e5bd1f7c7f55b477f955f6bdfc822.tar.gz |
Merge branch 'learning_rate-scheduling' into learnschedule
Diffstat (limited to 'modules/safe.py')
-rw-r--r-- | modules/safe.py | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/modules/safe.py b/modules/safe.py index 05917463..20be16a5 100644 --- a/modules/safe.py +++ b/modules/safe.py @@ -10,6 +10,7 @@ import torch import numpy
import _codecs
import zipfile
+import re
# PyTorch 1.13 and later have _TypedStorage renamed to TypedStorage
@@ -54,11 +55,27 @@ class RestrictedUnpickler(pickle.Unpickler): raise pickle.UnpicklingError(f"global '{module}/{name}' is forbidden")
+allowed_zip_names = ["archive/data.pkl", "archive/version"]
+allowed_zip_names_re = re.compile(r"^archive/data/\d+$")
+
+
+def check_zip_filenames(filename, names):
+ for name in names:
+ if name in allowed_zip_names:
+ continue
+ if allowed_zip_names_re.match(name):
+ continue
+
+ raise Exception(f"bad file inside {filename}: {name}")
+
+
def check_pt(filename):
try:
# new pytorch format is a zip file
with zipfile.ZipFile(filename) as z:
+ check_zip_filenames(filename, z.namelist())
+
with z.open('archive/data.pkl') as file:
unpickler = RestrictedUnpickler(file)
unpickler.load()
|