[错误][放松] 使用超出范围的索引进行分割: 类型层限制,但 topi 计算出负值的范围? bad_alloc / uint 错误 / 静默超大 (OOB 读) 输出,具体取决于配置

Expected behavior

Indices outside [0, axis_length) should be rejected when the op is built (or at legalization), consistently across pipelines. ONNX Split requires indices within the axis extent (and non-decreasing); out-of-range indices are an input error, not a reason to allocate 2^64 bytes or to return a larger-than-input tensor. Notably, the unsorted-but-in-range case is already correctly rejected by an ICHECK in split_indices_array — only the range check is missing.