Fix path traversal in xir_util dump_bin (CWE-22)

[xingy16-amd]

Summary

• dump_subgraph1() in tools/cmd_dump_code.cpp built output filenames by
  concatenating dirname with the subgraph name (sg->get_name()) and
  reg_id_to_parameter_value keys taken directly from the deserialized
  .xmodel protobuf, with no sanitization.
• A crafted .xmodel whose subgraph name / reg_id contains ../ sequences
  (or an absolute path) makes xir_util dump_bin evil.xmodel ./out/ write
  attacker-controlled bytes outside ./out/ — arbitrary file write/overwrite
  (CWE-22).
• Fix sanitizes the file component in mk_file_name() with one unified rule
  on every platform: replace path separators (/, \), the NTFS stream
  separator (:) and the characters Windows forbids (<>"|?*) with _, so
  every dumped file stays inside dirname. On Windows, reserved device names
  (CON, NUL, COM1..9, LPT1..9, ...) are additionally prefixed.
• Subgraph names derived from framework op names legitimately contain /, so
  flattening (rather than rejecting) keeps valid models working.

Test plan

• Build the tools and run xir_util dump_bin on a normal .xmodel;
  confirm .mc / .ac / .bin files are still produced under the output dir.
• Run with an .xmodel whose subgraph name contains ../../tmp/evil and
  confirm the dumped file stays inside the output dir (separators flattened
  to _) instead of escaping it.

Made with Cursor