KronosSlott
  • Altcoin
  • Bitcoin
  • Blockchain
  • Ethereum
  • Litecoin
  • Gambling

Subscribe to Updates

Get the latest Crypto news from kronosslott.

What's Hot

Trader Predicts This New Play to Earn Crypto Game Could Be the Next Decentraland or The Sandbox

January 28, 2023

Price Prediction for Casper Ending January Through February 2023

January 28, 2023

Bitcoin Price Holds Above $23,000 – Consolidation or Accumulation?

January 28, 2023
Facebook Twitter Instagram
  • Affiliate Disclosure
  • Anti Spam Policy
  • Cookie Policy
  • Privacy Policy
  • Terms & Conditions
Facebook Twitter Instagram
KronosSlott
  • Altcoin
  • Bitcoin
  • Blockchain
  • Ethereum
  • Litecoin
  • Gambling
KronosSlott
Home » Solidity Bugfix Release | Ethereum Foundation Blog

Solidity Bugfix Release | Ethereum Foundation Blog

adminBy adminOctober 10, 2022No Comments3 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
The Devcon VI Manual | Ethereum Foundation Blog
Share
Facebook Twitter LinkedIn Pinterest Email


The latest version 0.4.25 release of Solidity fixes
two important bugs.
Another important bug has already been fixed in version 0.4.22 but it was only discovered recently that the bug existed.

Note that the Ethereum Foundation runs a bounty program for the code generator part of Solidity.

Cleanup of Exponent in Exponentiation

  • Likelihood of occurrence: very low
  • Exploitability: high
  • Discoverability by tests: low
  • Fixed in version: 0.4.25

Summary: Using short types in the exponent of an exponentiation operation can lead to invalid results.

The Solidity language allows integer types that are shorter than 256 bits, even though the Ethereum Virtual Machine
only knows types of exactly 256 bits. Because of that, higher order bits need to be set to zero from time to time.
For many operations, it is not relevant whether those bits are set to zero or not (addition is one example).
Because of that, the Solidity compiler delays this cleanup until it is needed in order to save gas.

In the very special circumstance that the exponent of the ** operator has a type that is shorter
than 256 bits, but not shorter than the type of the base and contains dirty higher order bits,
this can lead to an incorrect result. Note that literal exponents like in x ** 2 as well as
the case where the type of the base is uint256 or int256 are unaffected.

Note that a function parameter can have dirty higher order bits if called by a malicious entity,
and the same is true for data returned from functions of contracts deployed by malicious entities.

After having screened a large number of contracts, we deem this bug to affect only a very tiny number of
smart contracts, if any at all, because the regular uses of the exponentiation operator do not lead to the bug.

This bug was found by nweller.

Memory Corruption in Multi-Dimensional Array Decoder

  • Likelihood of occurrence: low
  • Exploitability: medium
  • Discoverability by tests: high
  • Introduced in version: 0.1.4
  • Fixed in version: 0.4.22

Summary: Calling functions of other contracts that return multi-dimensional fixed-size arrays results in memory corruption.

If Solidity code calls a function that returns a multi-dimensional fixed-size array,
the returned ABI-encoded data has to be converted to Solidity’s internal representation
of arrays. In Solidity, multi-dimensional arrays are implemented as arrays of
memory pointers, while in the ABI, the data is encoded inline.
The decoder did not take this difference into account with the result that the returned
elements are interpreted as memory pointers and thus can cause memory
corruption if the return values are accessed. Calling functions with multi-dimensional
fixed-size array arguments is unaffected as is returning fixed-size arrays from function calls
if they are not used in a Solidity contract.
The bug is only in the component that decodes a multi-dimensional fixed-size array
that is returned from a function call from Solidity.

This bug was found by jmahhh.

Invalid Encoding of Structs in Events

  • Likelihood of occurrence: low
  • Exploitability: low
  • Discoverability by tests: high
  • Introduced in version: 0.4.17
  • Fixed in version: 0.4.25

Summary: Structs as event parameters are not handled properly.

Structs were not meant to be supported as event parameters without the new ABI encoder.
The compiler did accept them nevertheless, but encoded their memory address instead of their actual value.
Even with the new ABI encoder, structs cannot be indexed event parameters.

Now, structs are properly disallowed for the old encoder and if they are indexed also for the new encoder.



Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
admin
  • Website

Related Posts

EF-Supported Teams: Research & Development Roundup

December 29, 2022

KZG Ceremony Grant Round | Ethereum Foundation Blog

December 15, 2022

Merge Data Challenge Results | Ethereum Foundation Blog

December 5, 2022

Comments are closed.

Don't Miss

Trader Predicts This New Play to Earn Crypto Game Could Be the Next Decentraland or The Sandbox

Blockchain January 28, 2023

Join Our Telegram channel to stay up to date on breaking news coverage Analyst Jacob…

Price Prediction for Casper Ending January Through February 2023

January 28, 2023

Bitcoin Price Holds Above $23,000 – Consolidation or Accumulation?

January 28, 2023

Biggest Crypto Gainers Today – January 27

January 28, 2023
Stay In Touch
  • Facebook
  • Twitter
  • Pinterest
  • Instagram
  • YouTube
  • Vimeo
Our Picks

Trader Predicts This New Play to Earn Crypto Game Could Be the Next Decentraland or The Sandbox

January 28, 2023

Price Prediction for Casper Ending January Through February 2023

January 28, 2023

Bitcoin Price Holds Above $23,000 – Consolidation or Accumulation?

January 28, 2023

Biggest Crypto Gainers Today – January 27

January 28, 2023

Subscribe to Updates

Get the latest Crypto news from kronosslott.

About Us
About Us

Your source for the serious news. This website is crafted specifically to for crazy and hot cryptonews. Visit our main page for more tons of news.

We're social. Connect with us:

Facebook Twitter Pinterest YouTube WhatsApp
Categories
  • Altcoin (4)
  • Bitcoin (2,020)
  • Blockchain (771)
  • Ethereum (320)
  • Gambling (2,082)
  • Litecoin (55)
  • NFTs (2)
Our Picks

Trader Predicts This New Play to Earn Crypto Game Could Be the Next Decentraland or The Sandbox

January 28, 2023

Price Prediction for Casper Ending January Through February 2023

January 28, 2023

Bitcoin Price Holds Above $23,000 – Consolidation or Accumulation?

January 28, 2023
©2022 –Kronosslott. All Rights Reserved. Kronosslott.com is an independent i-Gaming news site and casino comparison service. Every effort is made to ensure that the bonus offers listed here are accurate and up-to-date. However, we accept no responsibility for inaccuracies or errors. It is your responsibility to confirm the terms of any promotion you choose to accept. Looking to Advertise with us? Kronosslott is always looking for new partnerships. To Inquire please email kronosslott@gmail.com

Type above and press Enter to search. Press Esc to cancel.