| { |
| "item_id": "ker-evm_memset", |
| "kernel": "evm_memset", |
| "advisory": "RUSTSEC-2021-0066", |
| "crate": "evm-core", |
| "pre_version": "0.21.0", |
| "post_version": "0.21.1", |
| "advisory_url": "https://github.com/rust-blockchain/evm", |
| "title": "Denial of service on EVM execution due to memory over-allocation", |
| "source_file": "src/memory.rs", |
| "function": "memory_set_len", |
| "signature": "pub fn memory_set_len(cur_len: usize, offset: usize, value_len: usize, target_size: Option<usize>, limit: usize) -> Result<usize, u8>", |
| "spec_doc": "New length of EVM memory after writing value (value_len bytes) at offset, zero-padded to target_size (default value_len). Err if offset+target_size exceeds limit. Writing an empty value must not grow memory.", |
| "bug_class": "dos_loop_or_recursion", |
| "fidelity": "verbatim_logic", |
| "extraction_note": "src/memory.rs Memory::set: empty value with large target_size over-allocates", |
| "witness_args": "0usize, 0usize, 0usize, Some(1000usize), 1048576usize", |
| "labels": { |
| "buggy": "evm-core@0.21.0", |
| "reference": "evm-core@0.21.1" |
| } |
| } |
