aboutsummaryrefslogtreecommitdiffstats
path: root/docs/bugs.json
diff options
context:
space:
mode:
authorLeonardo Alt <leo@ethereum.org>2018-08-03 19:55:44 +0800
committerchriseth <chris@ethereum.org>2018-08-14 21:57:38 +0800
commit55e67e41f9356e4953a57d8a15808e1c7d391686 (patch)
tree368286d5f45ab87bf91a054a5ce20ea7dd918662 /docs/bugs.json
parente1bb6848976c7a54baa19e3e61f9aeeb58f55f5a (diff)
downloaddexon-solidity-55e67e41f9356e4953a57d8a15808e1c7d391686.tar.gz
dexon-solidity-55e67e41f9356e4953a57d8a15808e1c7d391686.tar.zst
dexon-solidity-55e67e41f9356e4953a57d8a15808e1c7d391686.zip
Update bug list and add regular expression to bug list and add test.
Diffstat (limited to 'docs/bugs.json')
-rw-r--r--docs/bugs.json11
1 files changed, 6 insertions, 5 deletions
diff --git a/docs/bugs.json b/docs/bugs.json
index cec6a5cd..3f20077f 100644
--- a/docs/bugs.json
+++ b/docs/bugs.json
@@ -1,11 +1,12 @@
[
{
- "name": "PublicLibFunctionsDoNotReturnNestedArrays",
- "summary": "Calls to public library functions (internal functions are safe) that return nested arrays return only zeroes.",
- "description": "The compiler does not complain about public library functions (internal functions are safe) returning nested arrays, but it also does not return it correctly. Thus, the function caller receives only zeroes.",
- "introduced": "0.4.11",
+ "name": "NestedArrayFunctionCallDecoder",
+ "summary": "Calling functions that return multi-dimensional fixed-size arrays can result in memory corruption.",
+ "description": "If Solidity code calls a function that returns a multi-dimensional fixed-size array, array elements are incorrectly interpreted as memory pointers and thus can cause memory corruption if the return values are accessed. Calling functions with multi-dimensional fixed-size arrays is unaffected as is returning fixed-size arrays from function calls. The regular expression only checks if such functions are present, not if they are called, which is required for the contract to be affected.",
+ "introduced": "0.1.4",
"fixed": "0.4.22",
- "severity": "low"
+ "severity": "medium",
+ "check": {"regex-source": "returns[^;{]*\\[\\s*[^\\] \\t\\r\\n\\v\\f][^\\]]*\\]\\s*\\[\\s*[^\\] \\t\\r\\n\\v\\f][^\\]]*\\][^{;]*[;{]"}
},
{
"name": "OneOfTwoConstructorsSkipped",