File size: 1,066 Bytes
4951e76 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 | {
"item_id": "ker-evm_memset",
"kernel": "evm_memset",
"advisory": "RUSTSEC-2021-0066",
"crate": "evm-core",
"pre_version": "0.21.0",
"post_version": "0.21.1",
"advisory_url": "https://github.com/rust-blockchain/evm",
"title": "Denial of service on EVM execution due to memory over-allocation",
"source_file": "src/memory.rs",
"function": "memory_set_len",
"signature": "pub fn memory_set_len(cur_len: usize, offset: usize, value_len: usize, target_size: Option<usize>, limit: usize) -> Result<usize, u8>",
"spec_doc": "New length of EVM memory after writing value (value_len bytes) at offset, zero-padded to target_size (default value_len). Err if offset+target_size exceeds limit. Writing an empty value must not grow memory.",
"bug_class": "dos_loop_or_recursion",
"fidelity": "verbatim_logic",
"extraction_note": "src/memory.rs Memory::set: empty value with large target_size over-allocates",
"witness_args": "0usize, 0usize, 0usize, Some(1000usize), 1048576usize",
"labels": {
"buggy": "evm-core@0.21.0",
"reference": "evm-core@0.21.1"
}
} |