fix: add integer overflow check in noise_suppression_interface.cpp

The OpenVINO noise suppression plugin retrieves input tensor shapes from model files at lines 87 and 143 without validating dimensions against expected ranges

Author: orbisai0security

tests/test_invariant_noise_suppression_interface.cpp

@@ -0,0 +1,62 @@
+#include <gtest/gtest.h>
+#include <fstream>
+#include <string>
+#include <cstdlib>
+#include <memory>
+
+extern "C" {
+    #include "tools/plugin/modules/ov_noise_suppression/noise_suppression_interface.h"
+}
+
+class NoiseSuppressionSecurityTest : public ::testing::TestWithParam<std::vector<int64_t>> {};
+
+TEST_P(NoiseSuppressionSecurityTest, TensorShapeValidationMaintainsBounds) {
+    // Invariant: Model input tensor shapes must not cause memory corruption
+    // All allocations derived from tensor shapes must be within safe bounds
+    
+    std::vector<int64_t> dimensions = GetParam();
+    
+    // Create a minimal mock model file with specified dimensions
+    std::string model_path = "/tmp/test_model_" + std::to_string(getpid()) + ".xml";
+    std::ofstream model_file(model_path);
+    model_file << "<?xml version=\"1.0\"?><net><layers><layer id=\"0\" name=\"input\" type=\"Parameter\">";
+    model_file << "<output><port id=\"0\" precision=\"FP32\"><dim>";
+    for (size_t i = 0; i < dimensions.size(); ++i) {
+        if (i > 0) model_file << "</dim><dim>";
+        model_file << dimensions[i];
+    }
+    model_file << "</dim></port></output></layer></layers></net>";
+    model_file.close();
+    
+    struct noise_suppression_data *nd = (struct noise_suppression_data *)calloc(1, sizeof(*nd));
+    ASSERT_NE(nd, nullptr);
+    
+    // Attempt to load model - should not crash or corrupt memory
+    int result = noise_suppression_load_model(nd, model_path.c_str());
+    
+    if (result == 0 && nd->inp_shape.size() > 0) {
+        // Verify shape dimensions are within reasonable bounds
+        for (auto dim : nd->inp_shape) {
+            EXPECT_GT(dim, 0) << "Dimension must be positive";
+            EXPECT_LT(dim, 1000000) << "Dimension exceeds safe allocation limit";
+        }
+    }
+    
+    noise_suppression_destroy(nd);
+    std::remove(model_path.c_str());
+}
+
+INSTANTIATE_TEST_SUITE_P(
+    AdversarialShapes,
+    NoiseSuppressionSecurityTest,
+    ::testing::Values(
+        std::vector<int64_t>{0x7FFFFFFFFFFFFFFF, 1024},  // Integer overflow case
+        std::vector<int64_t>{0, 0},                       // Zero-size allocation
+        std::vector<int64_t>{1, 480}                      // Valid input
+    )
+);
+
+int main(int argc, char **argv) {
+    ::testing::InitGoogleTest(&argc, argv);
+    return RUN_ALL_TESTS();
+}