{
 "item_id": "ker-evm_memset",
 "kernel": "evm_memset",
 "advisory": "RUSTSEC-2021-0066",
 "crate": "evm-core",
 "pre_version": "0.21.0",
 "post_version": "0.21.1",
 "advisory_url": "https://github.com/rust-blockchain/evm",
 "title": "Denial of service on EVM execution due to memory over-allocation",
 "source_file": "src/memory.rs",
 "function": "memory_set_len",
 "signature": "pub fn memory_set_len(cur_len: usize, offset: usize, value_len: usize, target_size: Option<usize>, limit: usize) -> Result<usize, u8>",
 "spec_doc": "New length of EVM memory after writing value (value_len bytes) at offset, zero-padded to target_size (default value_len). Err if offset+target_size exceeds limit. Writing an empty value must not grow memory.",
 "bug_class": "dos_loop_or_recursion",
 "fidelity": "verbatim_logic",
 "extraction_note": "src/memory.rs Memory::set: empty value with large target_size over-allocates",
 "witness_args": "0usize, 0usize, 0usize, Some(1000usize), 1048576usize",
 "labels": {
  "buggy": "evm-core@0.21.0",
  "reference": "evm-core@0.21.1"
 }
}