No check for zero address while updating owner #83
Labels
bug
Something isn't working
duplicate
This issue or pull request already exists
QA (Quality Assurance)
Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax
sponsor disputed
Sponsor cannot duplicate the issue, or otherwise disagrees this is an issue
wontfix
out of scope, a non-issue, or something already addressed
Lines of code
https://github.com/code-423n4/2022-07-ens/blob/main/contracts/dnssec-oracle/Owned.sol#L19
Vulnerability details
Impact
No check for zero address, allows somebody to set owner as zero-address, this will make the
DNSSECImpl
contract unusable.Proof of Concept
https://github.com/code-423n4/2022-07-ens/blob/main/contracts/dnssec-oracle/Owned.sol#L19
Tools Used
Manual
Recommended Mitigation Steps
The text was updated successfully, but these errors were encountered: