Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: fix core contracts storage check #973

Closed

Conversation

zugdev
Copy link
Contributor

@zugdev zugdev commented Oct 3, 2024

Resolves #972

@ubiquity-os-deployer
Copy link

ubiquity-os-deployer bot commented Oct 3, 2024

github-actions bot and others added 29 commits October 3, 2024 20:49
@zugdev zugdev force-pushed the fix-core-contracts-storage-check branch from b2c1983 to f768506 Compare October 3, 2024 23:50
@zugdev
Copy link
Contributor Author

zugdev commented Oct 3, 2024

this looks very ugly because of rebase, i'll do better

@zugdev zugdev closed this Oct 3, 2024
@zugdev zugdev deleted the fix-core-contracts-storage-check branch October 3, 2024 23:50
uint256 _value,
bytes calldata _data
) external onlyOwner returns (bool, bytes memory) {
(bool success, bytes memory result) = _to.call{value: _value}(_data);

Check failure

Code scanning / Semgrep OSS

Semgrep Finding: rules.solidity.security.arbitrary-low-level-call Error

An attacker may perform call() to an arbitrary address with controlled calldata
int256 collateralAmount_i256 = int256(collateralAmount);

// Update the collateral balances
collateralBorrowedBalances[msg.sender] -= collateralAmount_i256;

Check notice

Code scanning / Semgrep OSS

Semgrep Finding: rules.solidity.security.basic-arithmetic-underflow Note

Possible arithmetic underflow

// Update the collateral balances
collateralBorrowedBalances[msg.sender] -= collateralAmount_i256;
collateralTotalBorrowedBalance -= collateralAmount_i256;

Check notice

Code scanning / Semgrep OSS

Semgrep Finding: rules.solidity.security.basic-arithmetic-underflow Note

Possible arithmetic underflow
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CI: fix check_storage_layout for new contracts
4 participants