From a5fa0f9edf291810f1a33c74641d7b00227b835a Mon Sep 17 00:00:00 2001 From: Sarah Lacard Date: Sat, 2 May 2026 11:45:33 -0600 Subject: [PATCH] =?UTF-8?q?blue:=20catches=20KG#252=20=E2=80=94=20=5F=5Fse?= =?UTF-8?q?t=5Fname=5F=5F=20descriptor=20caching=20bypass?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- kernelguard.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/kernelguard.py b/kernelguard.py index f086847..5f5e831 100644 --- a/kernelguard.py +++ b/kernelguard.py @@ -3025,6 +3025,15 @@ def detect_precision_downgrade(code: str | SubmissionFacts) -> list[dict]: return matches +def detect_set_name_cache(code: str | SubmissionFacts) -> list[dict]: + facts = ensure_submission_facts(code) + code = facts.raw_code + if re.search(r'def\s+__set_name__\s*\(', code) and re.search(r'def\s+__get__\s*\(', code): + if re.search(r'__set_name__.*?\w+\s*=\s*\{\}', code, re.DOTALL): + return [{"pattern": "SET_NAME_CACHE", "severity": "critical", "evidence": "__set_name__ descriptor with __get__ dict cache (metadata-tag caching bypass)"}] + return [] + + # --------------------------------------------------------------------------- # Score anomaly detection # --------------------------------------------------------------------------- @@ -3653,6 +3662,10 @@ class RulePolicy: "NEAR_CLONE_SPAM", "administrative", "support", SUSPICIOUS_ONLY, (), (), "downgrade", ), + "SET_NAME_CACHE": RulePolicy( + "SET_NAME_CACHE", "result_reuse", "hard", AUTO_FILTER, (), + (), "keep", + ), } BASE_SCORE_CONFIG = { @@ -3790,6 +3803,7 @@ def support_only_patterns(matched_patterns: list[dict]) -> bool: detect_thread_injection, detect_lazy_tensor, detect_precision_downgrade, + detect_set_name_cache, ] BASE_DETECTOR_SPECS = [ @@ -3827,6 +3841,7 @@ def support_only_patterns(matched_patterns: list[dict]) -> bool: ("thread_injection", detect_thread_injection), ("lazy_tensor", detect_lazy_tensor), ("precision_downgrade", detect_precision_downgrade), + ("set_name_cache", detect_set_name_cache), ] VALID_RULE_OUTCOMES = {AUTO_FILTER, SUSPICIOUS_ONLY, TELEMETRY_ONLY}