"""Guard the KNOWN-shallow div-by-zero sites in gguf.cpp so the fuzzer gets PAST

tensor-shape validation and explores deeper tensor-data/offset handling (where a

novel memory-corruption bug would live). These are fuzzing-depth guards, NOT a

security fix - they neutralize the disclosed V-05/V-06-class and our line-681 DoS

so distinct, higher-severity crashes can surface.

"""

import sys

p = "/opt/cyclops-v2/targets/src/llama.cpp/ggml/src/gguf.cpp"

src = open(p).read()

PATCHES = [

    ("INT64_MAX/info.t.ne[1] <= info.t.ne[0]",

     "info.t.ne[1]!=0 && INT64_MAX/info.t.ne[1] <= info.t.ne[0]"),

    ("INT64_MAX/info.t.ne[2] <= info.t.ne[0]*info.t.ne[1]",

     "info.t.ne[2]!=0 && INT64_MAX/info.t.ne[2] <= info.t.ne[0]*info.t.ne[1]"),

    ("INT64_MAX/info.t.ne[3] <= info.t.ne[0]*info.t.ne[1]*info.t.ne[2]",

     "info.t.ne[3]!=0 && INT64_MAX/info.t.ne[3] <= info.t.ne[0]*info.t.ne[1]*info.t.ne[2]"),

    ("uint64_t(ggml_nelements(&info.t)/ggml_blck_size(info.t.type)) > SIZE_MAX/ggml_type_size(info.t.type)",

     "ggml_blck_size(info.t.type)!=0 && ggml_type_size(info.t.type)!=0 && uint64_t(ggml_nelements(&info.t)/ggml_blck_size(info.t.type)) > SIZE_MAX/ggml_type_size(info.t.type)"),

    ("info.t.nb[1] = info.t.nb[0]*(info.t.ne[0]/blck_size);",

     "info.t.nb[1] = info.t.nb[0]*(blck_size?info.t.ne[0]/blck_size:0);"),

]

n = 0

for a, b in PATCHES:

    if a in src and b not in src:

        src = src.replace(a, b); n += 1

        print("patched:", a[:50])

    elif b in src:

        print("already:", a[:50])

    else:

        print("NOT FOUND:", a[:50])

open(p, "w").write(src)

print(f"applied {n} fuzz-depth guards")