Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add data corruption due to insufficient memory allocation #80

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

indeqs
Copy link
Contributor

@indeqs indeqs commented Jun 7, 2024

Related Issue

Checklist

Describe the changes you've made:

This PR adds a memory corruption vulnerability stemming from insufficient memory allocation when using YUL for memory allocation

Type of change

Select the appropriate checkbox:

  • Bug fix (fixing an issue with existing vulnerability data)
  • New feature (adding a new vulnerability or category)
  • Documentation update (improving existing information)

Copy link
Owner

@kadenzipfel kadenzipfel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm gonna come back to this, but initial thoughts are that it's highly specific to the provided example. It might even make the most sense to have the issue be generalized to just "Data Corruption" and can encompass various different ways this can occur including memory, storage, etc..

@@ -0,0 +1,175 @@
# Memory Corruption Due to Insufficient Memory Allocation

Memory corruption occurs when a program writes outside the bounds of allocated memory, potentially overwriting other important data.
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it would be more accurate to say, "Memory corruption can occur..." since it's not the only cause

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fair enough, lemme see if we can generalize this vuln type as suggested

…arity and giving a general description rather than the specific one to the ENS audit
@indeqs indeqs changed the title Add memory-corruption-due-to-insufficient-allocation.md Add data corruption due to insufficient memory allocation Jun 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Data Corruption Due to Insufficient Memory Allocation
2 participants