[Security] Harden message sanitization (#58832)
Signed-off-by: DarkLight1337 <tlleungac@connect.ust.hk>
Cyrus Leung committed
Sep 27, 2026 at 00:28 UTC
379e9a1ea8a5995464d9bf775bcd36bb03a0995f
2 files changed
+5
-1
tests/entrypoints/serve/exception_handling/test_error_sanitization.py
+4
@@ -18,6 +18,10 @@ def test_sanitize_message():
18
sanitize_message("<_io.BytesIO object at 0x7a95e299e750>")
19
== "<_io.BytesIO object>"
20
)
21
+ assert (
22
+ sanitize_message("<PIL.Image.Image image mode=RGB size=2x2 at 0x7D52EAF07BF0>")
23
+ == "<PIL.Image.Image image mode=RGB size=2x2>"
24
+ )
25
26
27
class TestSanitizeMessageFilePaths:
vllm/entrypoints/serve/exception_handling/utils.py
+1
-1
@@ -6,7 +6,7 @@ import regex as re
6
7
def sanitize_message(message: str) -> str:
8
"""Strip memory addresses, tracebacks, and file paths from error messages."""
9
- message = re.sub(r" at 0x[0-9a-f]+>", ">", message)
9
+ message = re.sub(r" at 0x[0-9a-fA-F]+>", ">", message)
10
message = re.sub(r'\n?\s*File "[^"]+", line \d+, in \S+(\n\s+.*)?', "", message)
11
message = re.sub(
12
r"/(?:home|usr|opt|var|tmp|root|lib|mnt|srv)(?:/[\w.\-]+)+", "<path>", message