Mace-cl-compiled-program.bin

MaceStatus status = MaceEngineFactory::New( engine_config, "mace-cl-compiled-program.bin", // precompiled binary input_nodes, output_nodes, &engine ); The runtime loads the binary via clCreateProgramWithBinary() → clBuildProgram() . | Risk | Description | |------|-------------| | Binary portability | The file is not portable across GPU models or drivers; deployment must match compilation environment exactly. | | Tampering | Modified binary can cause GPU hangs, illegal memory access, or wrong inference results. No built-in signature in current MACE versions. | | Reverse engineering | Kernel logic can be extracted via OpenCL binary dumping tools (e.g., clGetProgramInfo ), though obfuscated. | | Privilege boundary | Runs on GPU with read/write access to GPU buffers; does not execute CPU code, limiting ROP-style attacks. | 7. Forensic & Diagnostic Indicators To analyze this file:

# Check file type file mace-cl-compiled-program.bin # Likely output: "data" strings mace-cl-compiled-program.bin | head -20 Hex dump header xxd mace-cl-compiled-program.bin | head -10 Check for known GPU signatures hexdump -C mace-cl-compiled-program.bin | grep -i "mali|adreno|opencl" mace-cl-compiled-program.bin

[Header] - Magic number (e.g., "MACE") - Version info - Number of kernels - Device type (e.g., GPU, CL) - Target device name (e.g., "Mali-G76", "Adreno640") [Kernel List] For each kernel: - Kernel name length + name string - Binary size - Binary data (OpenCL program binary) - Work-group size recommendations - Argument metadata No built-in signature in current MACE versions

mace , cl_binary , kernel , GPU model names, OpenCL compiler options. 8. Recommendations for Handling | Scenario | Action | |----------|--------| | Deployment | Ensure target device GPU matches compilation target exactly. | | Security audit | Regenerate from trusted source; do not use untrusted .bin files. | | Debugging | Disable --enable_cl_binary to use source kernels (portable, debuggable). | | Forensics | Compare SHA256 hash against known-good build artifact. | 9. Conclusion mace-cl-compiled-program.bin is a performance-optimized, non-portable binary blob containing pre-compiled OpenCL kernels for MACE inference on specific GPU hardware. It is safe to use when generated from a trusted model pipeline and deployed on matching devices, but it lacks cryptographic integrity protection and is not human-readable. For debugging or cross-device compatibility, developers should avoid enabling CL binary compilation. End of Report CL) - Target device name (e.g.