Skip to content

Release v2.0.14

Choose a tag to compare

@github-actions github-actions released this 12 Jul 22:37
· 8 commits to main since this release
208ba66

Fixed

  • array-bounds-check recall regression from 2.0.13 — the Gate 1 tightening (require array params to be index-accessed) was too aggressive: it suppressed the classic parallel-array bug where a loop is bounded by one array's .length and indexes a different array (e.g. for (i < users.length) { … isActive[i] … }) because only one array used [i] syntax. Gate 1 now flags when ≥1 array param is index-accessed AND ≥2 params participate in the iteration (index access or a name.length loop bound). Thin forwarders (no index access) stay suppressed; OpenZeppelin false positives remain at 17. (ADV-214)