CVE-2021-41214: Reference binding to `nullptr` in `tf.ragged.cross`

(updated )

The shape inference code for tf.ragged.cross has an undefined behavior due to binding a reference to nullptr. In the following scenario, this results in a crash:

import tensorflow as tf

@tf.function
def test():
y = tf.ragged.cross([tf.ragged.constant([['1']]),'2'])
return y

test()

References

Detect and mitigate CVE-2021-41214 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →