diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/bugs.json | 12 | ||||
| -rw-r--r-- | docs/bugs_by_version.json | 25 | ||||
| -rw-r--r-- | docs/control-structures.rst | 3 | ||||
| -rw-r--r-- | docs/solidity-by-example.rst | 6 |
4 files changed, 40 insertions, 6 deletions
diff --git a/docs/bugs.json b/docs/bugs.json index 4fd73492..ac322a48 100644 --- a/docs/bugs.json +++ b/docs/bugs.json @@ -1,14 +1,22 @@ [ { + "name": "DelegateCallReturnValue", + "summary": "The low-level .delegatecall() does not return the execution outcome, but converts the value returned by the functioned called to a boolean instead.", + "description": "The return value of the low-level .delegatecall() function is taken from a position in memory, where the call data or the return data resides. This value is interpreted as a boolean and put onto the stack. This means if the called function returns at least 32 zero bytes, .delegatecall() returns false even if the call was successuful.", + "introduced": "0.3.0", + "fixed": "0.4.15", + "severity": "low" + }, + { "name": "ECRecoverMalformedInput", - "summary": "The ecrecover() builtin can return garbage for malformed input.", + "summary": "The ecrecover() builtin can return garbage for malformed input.", "description": "The ecrecover precompile does not properly signal failure for malformed input (especially in the 'v' argument) and thus the Solidity function can return data that was previously present in the return area in memory.", "fixed": "0.4.14", "severity": "medium" }, { "name": "SkipEmptyStringLiteral", - "summary": "If \"\" is used in a function call, the following function arguments will not be correctly passed to the function.", + "summary": "If \"\" is used in a function call, the following function arguments will not be correctly passed to the function.", "description": "If the empty string literal \"\" is used as an argument in a function call, it is skipped by the encoder. This has the effect that the encoding of all arguments following this is shifted left by 32 bytes and thus the function call data is corrupted.", "fixed": "0.4.12", "severity": "low" diff --git a/docs/bugs_by_version.json b/docs/bugs_by_version.json index 1a5b4f5f..f3e42f91 100644 --- a/docs/bugs_by_version.json +++ b/docs/bugs_by_version.json @@ -182,6 +182,7 @@ }, "0.3.0": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -198,6 +199,7 @@ }, "0.3.1": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -213,6 +215,7 @@ }, "0.3.2": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -228,6 +231,7 @@ }, "0.3.3": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -242,6 +246,7 @@ }, "0.3.4": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -256,6 +261,7 @@ }, "0.3.5": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -270,6 +276,7 @@ }, "0.3.6": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -282,6 +289,7 @@ }, "0.4.0": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -294,6 +302,7 @@ }, "0.4.1": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -306,6 +315,7 @@ }, "0.4.10": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction" @@ -314,6 +324,7 @@ }, "0.4.11": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral" ], @@ -321,22 +332,27 @@ }, "0.4.12": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput" ], "released": "2017-07-03" }, "0.4.13": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput" ], "released": "2017-07-06" }, "0.4.14": { - "bugs": [], + "bugs": [ + "DelegateCallReturnValue" + ], "released": "2017-07-31" }, "0.4.2": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -348,6 +364,7 @@ }, "0.4.3": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -358,6 +375,7 @@ }, "0.4.4": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -367,6 +385,7 @@ }, "0.4.5": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -377,6 +396,7 @@ }, "0.4.6": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction", @@ -386,6 +406,7 @@ }, "0.4.7": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction" @@ -394,6 +415,7 @@ }, "0.4.8": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction" @@ -402,6 +424,7 @@ }, "0.4.9": { "bugs": [ + "DelegateCallReturnValue", "ECRecoverMalformedInput", "SkipEmptyStringLiteral", "ConstantOptimizerSubtraction" diff --git a/docs/control-structures.rst b/docs/control-structures.rst index a7af69f5..796e9238 100644 --- a/docs/control-structures.rst +++ b/docs/control-structures.rst @@ -393,6 +393,9 @@ When exceptions happen in a sub-call, they "bubble up" (i.e. exceptions are reth and the low-level functions ``call``, ``delegatecall`` and ``callcode`` -- those return ``false`` in case of an exception instead of "bubbling up". +.. warning:: + The low-level ``call``, ``delegatecall`` and ``callcode`` will return success if the calling account is non-existent, as part of the design of EVM. Existence must be checked prior to calling if desired. + Catching exceptions is not yet possible. In the following example, you can see how ``require`` can be used to easily check conditions on inputs diff --git a/docs/solidity-by-example.rst b/docs/solidity-by-example.rst index 71d27192..dde4495b 100644 --- a/docs/solidity-by-example.rst +++ b/docs/solidity-by-example.rst @@ -277,9 +277,9 @@ activate themselves. if (highestBidder != 0) { // Sending back the money by simply using // highestBidder.send(highestBid) is a security risk - // because it can be prevented by the caller by e.g. - // raising the call stack to 1023. It is always safer - // to let the recipients withdraw their money themselves. + // because it could execute an untrusted contract. + // It is always safer to let the recipients + // withdraw their money themselves. pendingReturns[highestBidder] += highestBid; } highestBidder = msg.sender; |