Skip to content

Conversation

brimigs
Copy link
Contributor

@brimigs brimigs commented Aug 31, 2023

In red-bank:contracts/params/src/query.rs:23 and line 50, the query_all_asset_params and query_all_vault_configs functions do not perform maximum validations for the caller-specified limit parameter. If the caller specified the limit parameter to a very large value, the query might fail due to an out-of-gas error.

We recommend performing maximum limit validations similar to red-bank:contracts/address-provider/src/contract.rs:153.

@piobab piobab changed the title add-max-limit MP-3311. Oak no. 20. Aug 31, 2023
@piobab piobab self-requested a review August 31, 2023 08:25
@piobab piobab merged commit 2789f10 into release/mars-v2 Aug 31, 2023
@piobab piobab deleted the add-max-validation branch September 14, 2023 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants