Problem: invalid model ftype values reached ggml_ftype_to_ggml_type() and triggered GGML_ASSERT, aborting instead of returning a load error.
Change: validate normalized hparams.ftype in whisper_model_load() before calling ggml_ftype_to_ggml_type().
Test: added test-model-load, which writes a minimal invalid model header with ftype = 5 and expects whisper_init_from_file_with_params() to fail cleanly.
Verification I ran: git diff --check; direct compiled and ran test-model-load.
CMake/CTest note: not run because cmake was unavailable in this environment.
Michael Sam