From 2b0ea6c8343faa6653b9fd65c628db012c51a734 Mon Sep 17 00:00:00 2001 From: Tianlei Wu Date: Wed, 9 Oct 2024 17:24:46 -0700 Subject: [PATCH] Fix security warning: use sha256 instead of md5 (#22373) ### Description Fix S360 warning: Use of unapproved hash algorithm or API MD5. --- .../transformers/models/stable_diffusion/engine_builder.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/onnxruntime/python/tools/transformers/models/stable_diffusion/engine_builder.py b/onnxruntime/python/tools/transformers/models/stable_diffusion/engine_builder.py index 0b6d325803..7609ae10fc 100644 --- a/onnxruntime/python/tools/transformers/models/stable_diffusion/engine_builder.py +++ b/onnxruntime/python/tools/transformers/models/stable_diffusion/engine_builder.py @@ -117,7 +117,7 @@ class EngineBuilder: model_name = model_name + "_" + "_".join(self.pipeline_info.controlnet) if hash_source: - model_name += "_" + hashlib.md5("\t".join(hash_source).encode("utf-8")).hexdigest()[:8] + model_name += "_" + hashlib.sha256("\t".join(hash_source).encode("utf-8")).hexdigest()[:8] # TODO: When we support original VAE, we shall save custom VAE to another directory.