aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlex Beregszaszi <alex@rtfs.hu>2017-02-02 08:24:45 +0800
committerAlex Beregszaszi <alex@rtfs.hu>2017-02-02 08:24:45 +0800
commit697db80b48fbed596996a2dab20948f42fdb1dfb (patch)
treed0e0226662467b5c4c9243943bbf86054ca81352
parentc01f5699e673f600fe87056b414996fef2224242 (diff)
downloaddexon-solidity-697db80b48fbed596996a2dab20948f42fdb1dfb.tar.gz
dexon-solidity-697db80b48fbed596996a2dab20948f42fdb1dfb.tar.zst
dexon-solidity-697db80b48fbed596996a2dab20948f42fdb1dfb.zip
Disallow arrays with negative length
-rw-r--r--Changelog.md3
-rw-r--r--libsolidity/analysis/ReferencesResolver.cpp2
-rw-r--r--test/libsolidity/SolidityNameAndTypeResolution.cpp10
3 files changed, 15 insertions, 0 deletions
diff --git a/Changelog.md b/Changelog.md
index c1098bdf..79d2fe44 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -3,6 +3,9 @@
Features:
* Type system: Support explicit conversion of external function to address.
+Bugfixes:
+ * Type system: Disallow arrays with negative length.
+
### 0.4.9 (2017-01-31)
Features:
diff --git a/libsolidity/analysis/ReferencesResolver.cpp b/libsolidity/analysis/ReferencesResolver.cpp
index df579c3d..d589f4a0 100644
--- a/libsolidity/analysis/ReferencesResolver.cpp
+++ b/libsolidity/analysis/ReferencesResolver.cpp
@@ -130,6 +130,8 @@ void ReferencesResolver::endVisit(ArrayTypeName const& _typeName)
auto const* lengthType = dynamic_cast<RationalNumberType const*>(length->annotation().type.get());
if (!lengthType || lengthType->isFractional())
fatalTypeError(length->location(), "Invalid array length, expected integer literal.");
+ else if (lengthType->isNegative())
+ fatalTypeError(length->location(), "Array with negative length specified.");
else
_typeName.annotation().type = make_shared<ArrayType>(DataLocation::Storage, baseType, lengthType->literalValue(nullptr));
}
diff --git a/test/libsolidity/SolidityNameAndTypeResolution.cpp b/test/libsolidity/SolidityNameAndTypeResolution.cpp
index f5768022..0151d244 100644
--- a/test/libsolidity/SolidityNameAndTypeResolution.cpp
+++ b/test/libsolidity/SolidityNameAndTypeResolution.cpp
@@ -1919,6 +1919,16 @@ BOOST_AUTO_TEST_CASE(array_with_nonconstant_length)
CHECK_ERROR(text, TypeError, "");
}
+BOOST_AUTO_TEST_CASE(array_with_negative_length)
+{
+ char const* text = R"(
+ contract c {
+ function f(uint a) { uint8[-1] x; }
+ }
+ )";
+ CHECK_ERROR(text, TypeError, "Array with negative length specified");
+}
+
BOOST_AUTO_TEST_CASE(array_copy_with_different_types1)
{
char const* text = R"(