@inco/lightning 1.0.0-devnet-3 → 1.0.0-devnet-5

package/manifest.yaml

@@ -9,6 +9,21 @@ incoLightning_devnet_v12_873394282:
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00f5bad44b2a772fe6ca626a"
     verifierAddress: "0x75dE330840A8ff79C8a71b0b9bA2cAd635D1Fd88"
   deployments:
+    - name: incoLightning_12_0_1__873394282
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 12
+        minor: 0
+        patch: 1
+        shortSalt: "873394282"
+      blockNumber: "41493080"
+      deployDate: 2026-05-14T10:27:30.920Z
+      commit: v1.0.0-devnet-4
+      active: true
+      includesPreviewFeatures: false
+      executorImpl: "0xb8f7a440Ba8D1d43eD0223C27Be0259Ed0bD7183"
+      verifierImpl: "0x05d35BeA5a24fAd016FB08192c8769D1804DFA40"
     - name: incoLightning_12_0_0__873394282
       chainId: "84532"
       chainName: Base Sepolia

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inco/lightning",
-  "version": "1.0.0-devnet-3",
+  "version": "1.0.0-devnet-5",
   "repository": "https://github.com/Inco-fhevm/inco-monorepo",
   "files": [
     "src/",

package/src/Types.sol

@@ -256,6 +256,7 @@ error SliceOutOfRange(uint16 start, uint16 end, uint16 len);
 error ZeroLength();
 error ListTooLong(uint32 provided, uint16 max);
 error InvalidRange(uint16 start, uint16 end);
+error ListRangeExceedsType(uint16 end, ETypes listType);
 error ListTypeMismatch(ETypes lhs, ETypes rhs);
 error UnsupportedListType(ETypes listType);
 error UnsupportedType(ETypes actual);

package/src/lightning-parts/EList.sol

@@ -9,6 +9,7 @@ import {
     isTypeSupported,
     IndexOutOfRange,
     InvalidRange,
+    ListRangeExceedsType,
     ListTypeMismatch,
     ListTooLong,
     UnsupportedType,
@@ -332,6 +333,11 @@ abstract contract EList is IEList, EncryptedOperations, EncryptedInput, EListHan
         returns (elist result)
     {
         require(start <= end, InvalidRange(start, end));
+        // Range values [start, end) must fit within listType's bit width.
+        uint256 bitWidth = typeBitSize(listType);
+        if (bitWidth < 16) {
+            require(uint256(end) <= (uint256(1) << bitWidth), ListRangeExceedsType(end, listType));
+        }
 
         result =
             elist.wrap(createListResultHandle(EOps.EListRange, listType, end - start, abi.encodePacked(start, end)));

package/src/lightning-parts/test/Elist.t.sol

@@ -3,7 +3,7 @@ pragma solidity ^0.8;
 
 import {IncoTest} from "../../test/IncoTest.sol";
 import {ElistTester} from "../../test/EListTester.sol";
-import {ETypes, ListTooLong, elist, typeBitSize} from "../../Types.sol";
+import {ETypes, ListRangeExceedsType, ListTooLong, elist, typeBitSize} from "../../Types.sol";
 import {inco} from "../../Lib.sol";
 import {FEE, BIT_FEE, Fee} from "../Fee.sol";
 import {EList, MAX_LIST_LENGTH} from "../EList.sol";
@@ -136,6 +136,34 @@ contract TestEList is IncoTest {
         assert(elist.unwrap(maxList) != bytes32(0));
     }
 
+    // Range values [start, end) must fit within listType's bit width.
+    // Bool fits values 0..1; end=3 would include value 2 which doesn't fit.
+    function testListRange_RevertsOnBoolEndExceedsBitWidth() public {
+        vm.expectRevert(abi.encodeWithSelector(ListRangeExceedsType.selector, uint16(3), ETypes.Bool));
+        _listRange(0, 3, ETypes.Bool);
+    }
+
+    // Range values [start, end) must fit within listType's bit width.
+    // end=2 produces {0, 1} — both fit in 1 bit.
+    function testListRange_BoolBoundaryAccepted() public {
+        elist boolList = _listRange(0, 2, ETypes.Bool);
+        assert(elist.unwrap(boolList) != bytes32(0));
+    }
+
+    // Range values [start, end) must fit within listType's bit width.
+    // Empty range with end at the type's max-exclusive boundary stays valid.
+    function testListRange_BoolEmptyRangeAtMaxAccepted() public {
+        elist empty = _listRange(2, 2, ETypes.Bool);
+        assert(elist.unwrap(empty) != bytes32(0));
+    }
+
+    // Range values [start, end) must fit within listType's bit width.
+    // uint16 always fits in 160 bits; the new check must not narrow this path.
+    function testListRange_Uint160LargeEndAccepted() public {
+        elist list = _listRange(0, MAX_LIST_LENGTH, ETypes.AddressOrUint160OrBytes20);
+        assert(elist.unwrap(list) != bytes32(0));
+    }
+
     // ==================== Overflow Tests ====================
     // These tests verify that exceeding MAX_LIST_LENGTH reverts appropriately.
     // Operations use uint16 arithmetic which auto-reverts on overflow in Solidity 0.8+.

package/src/version/IncoLightningConfig.sol

@@ -13,6 +13,6 @@ uint8 constant MINOR_VERSION = 0;
 // otherwise make test_upgrade will fail
 // consequently, when we do a patch release, we don't need to pump it as it's already pumped
 // when the previous release was done
-uint8 constant PATCH_VERSION = 1;
+uint8 constant PATCH_VERSION = 2;
 
 string constant VERIFIER_NAME = "incoVerifier";