@snovon/solast 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -0
- package/README.md +190 -0
- package/dist/api.d.ts +89 -0
- package/dist/api.js +33 -0
- package/dist/ast/resolve-return-names.d.ts +2 -0
- package/dist/ast/resolve-return-names.js +199 -0
- package/dist/ast/solc-walker.d.ts +17 -0
- package/dist/ast/solc-walker.js +497 -0
- package/dist/ast/storage-layout.d.ts +21 -0
- package/dist/ast/storage-layout.js +64 -0
- package/dist/cli.d.ts +65 -0
- package/dist/cli.js +755 -0
- package/dist/config.d.ts +9 -0
- package/dist/config.js +284 -0
- package/dist/dedup/files.d.ts +1 -0
- package/dist/dedup/files.js +74 -0
- package/dist/dedup/findings.d.ts +41 -0
- package/dist/dedup/findings.js +211 -0
- package/dist/detectors/_common/access-control.d.ts +204 -0
- package/dist/detectors/_common/access-control.js +377 -0
- package/dist/detectors/_common/ast.d.ts +139 -0
- package/dist/detectors/_common/ast.js +239 -0
- package/dist/detectors/_common/compiler-profile.d.ts +14 -0
- package/dist/detectors/_common/compiler-profile.js +66 -0
- package/dist/detectors/_common/dataflow.d.ts +75 -0
- package/dist/detectors/_common/dataflow.js +57 -0
- package/dist/detectors/_common/fhe.d.ts +7 -0
- package/dist/detectors/_common/fhe.js +40 -0
- package/dist/detectors/_common/integer-overflow-helpers.d.ts +58 -0
- package/dist/detectors/_common/integer-overflow-helpers.js +422 -0
- package/dist/detectors/_common/loop-call-stack.d.ts +9 -0
- package/dist/detectors/_common/loop-call-stack.js +132 -0
- package/dist/detectors/_common/oracle.d.ts +5 -0
- package/dist/detectors/_common/oracle.js +64 -0
- package/dist/detectors/_common/price-rate.d.ts +116 -0
- package/dist/detectors/_common/price-rate.js +446 -0
- package/dist/detectors/_common/source-text.d.ts +11 -0
- package/dist/detectors/_common/source-text.js +82 -0
- package/dist/detectors/_common/weighted-pool-invariant.d.ts +21 -0
- package/dist/detectors/_common/weighted-pool-invariant.js +105 -0
- package/dist/detectors/aave-v2-reentrancy.d.ts +7 -0
- package/dist/detectors/aave-v2-reentrancy.js +286 -0
- package/dist/detectors/access-control.d.ts +103 -0
- package/dist/detectors/access-control.js +983 -0
- package/dist/detectors/add-reentrancy-on-weth-contract.d.ts +7 -0
- package/dist/detectors/add-reentrancy-on-weth-contract.js +536 -0
- package/dist/detectors/ai-generated-randomness.d.ts +32 -0
- package/dist/detectors/ai-generated-randomness.js +239 -0
- package/dist/detectors/amm-spot-oracle-manipulation.d.ts +52 -0
- package/dist/detectors/amm-spot-oracle-manipulation.js +420 -0
- package/dist/detectors/analyzing-the-uniswap-v3-exploit.d.ts +26 -0
- package/dist/detectors/analyzing-the-uniswap-v3-exploit.js +279 -0
- package/dist/detectors/any-token-is-destroyed.d.ts +34 -0
- package/dist/detectors/any-token-is-destroyed.js +527 -0
- package/dist/detectors/anyswap-anytoken-permit-allowance-drain.d.ts +7 -0
- package/dist/detectors/anyswap-anytoken-permit-allowance-drain.js +524 -0
- package/dist/detectors/anyswap-insufficient-token-validation.d.ts +24 -0
- package/dist/detectors/anyswap-insufficient-token-validation.js +342 -0
- package/dist/detectors/approval-based-drain.d.ts +7 -0
- package/dist/detectors/approval-based-drain.js +772 -0
- package/dist/detectors/arbitrary-account-balance-transfer.d.ts +7 -0
- package/dist/detectors/arbitrary-account-balance-transfer.js +485 -0
- package/dist/detectors/arbitrary-address-spoofing-attack.d.ts +7 -0
- package/dist/detectors/arbitrary-address-spoofing-attack.js +444 -0
- package/dist/detectors/arbitrary-address-spoofing.d.ts +9 -0
- package/dist/detectors/arbitrary-address-spoofing.js +657 -0
- package/dist/detectors/arbitrary-call-error.d.ts +127 -0
- package/dist/detectors/arbitrary-call-error.js +1163 -0
- package/dist/detectors/arbitrary-call.d.ts +4 -0
- package/dist/detectors/arbitrary-call.js +11 -0
- package/dist/detectors/arbitrary-delegatecall-target.d.ts +35 -0
- package/dist/detectors/arbitrary-delegatecall-target.js +554 -0
- package/dist/detectors/arbitrary-recipient-no-access-control.d.ts +7 -0
- package/dist/detectors/arbitrary-recipient-no-access-control.js +638 -0
- package/dist/detectors/arbitrary-storage-proof-forgery.d.ts +35 -0
- package/dist/detectors/arbitrary-storage-proof-forgery.js +340 -0
- package/dist/detectors/arbitrary-transfer-from.d.ts +38 -0
- package/dist/detectors/arbitrary-transfer-from.js +339 -0
- package/dist/detectors/arbitrum-cross-chain-message-replay.d.ts +22 -0
- package/dist/detectors/arbitrum-cross-chain-message-replay.js +477 -0
- package/dist/detectors/avs-slashing-without-quorum-check.d.ts +50 -0
- package/dist/detectors/avs-slashing-without-quorum-check.js +386 -0
- package/dist/detectors/bad-debt-propagation.d.ts +13 -0
- package/dist/detectors/bad-debt-propagation.js +480 -0
- package/dist/detectors/bad-k-value-verification.d.ts +7 -0
- package/dist/detectors/bad-k-value-verification.js +512 -0
- package/dist/detectors/bad-randomness-zero-blockhash.d.ts +29 -0
- package/dist/detectors/bad-randomness-zero-blockhash.js +115 -0
- package/dist/detectors/balancer-flash-loan-manipulation.d.ts +33 -0
- package/dist/detectors/balancer-flash-loan-manipulation.js +178 -0
- package/dist/detectors/balancer-pause-guard.d.ts +33 -0
- package/dist/detectors/balancer-pause-guard.js +307 -0
- package/dist/detectors/balancer-weighted-pool-flash-loan.d.ts +42 -0
- package/dist/detectors/balancer-weighted-pool-flash-loan.js +275 -0
- package/dist/detectors/batch-transfer-overflow.d.ts +7 -0
- package/dist/detectors/batch-transfer-overflow.js +465 -0
- package/dist/detectors/beneficiary-validation.d.ts +7 -0
- package/dist/detectors/beneficiary-validation.js +696 -0
- package/dist/detectors/borrow-behalf-consent.d.ts +7 -0
- package/dist/detectors/borrow-behalf-consent.js +400 -0
- package/dist/detectors/break-continue-scope.d.ts +7 -0
- package/dist/detectors/break-continue-scope.js +194 -0
- package/dist/detectors/bridge-accounting-bypass.d.ts +65 -0
- package/dist/detectors/bridge-accounting-bypass.js +449 -0
- package/dist/detectors/bridge-business-logic-flaw-incorrect-acc.d.ts +43 -0
- package/dist/detectors/bridge-business-logic-flaw-incorrect-acc.js +394 -0
- package/dist/detectors/bridge-collateral-drain.d.ts +7 -0
- package/dist/detectors/bridge-collateral-drain.js +630 -0
- package/dist/detectors/bridge-forged-proof.d.ts +7 -0
- package/dist/detectors/bridge-forged-proof.js +754 -0
- package/dist/detectors/bridge-missing-message-nonce.d.ts +57 -0
- package/dist/detectors/bridge-missing-message-nonce.js +638 -0
- package/dist/detectors/bridge-swap-metapool-attack.d.ts +20 -0
- package/dist/detectors/bridge-swap-metapool-attack.js +230 -0
- package/dist/detectors/business-logic-flaw-flashloan-price-mani.d.ts +7 -0
- package/dist/detectors/business-logic-flaw-flashloan-price-mani.js +353 -0
- package/dist/detectors/business-logic-flaw-incorrect-recipient-balance.d.ts +7 -0
- package/dist/detectors/business-logic-flaw-incorrect-recipient-balance.js +403 -0
- package/dist/detectors/business-logic-flaw.d.ts +21 -0
- package/dist/detectors/business-logic-flaw.js +339 -0
- package/dist/detectors/business-logic.d.ts +17 -0
- package/dist/detectors/business-logic.js +22 -0
- package/dist/detectors/bypassed-insolvency-check.d.ts +30 -0
- package/dist/detectors/bypassed-insolvency-check.js +232 -0
- package/dist/detectors/bytecode-divergence-risk.d.ts +32 -0
- package/dist/detectors/bytecode-divergence-risk.js +150 -0
- package/dist/detectors/cache-array-length.d.ts +30 -0
- package/dist/detectors/cache-array-length.js +177 -0
- package/dist/detectors/cache-storage-reads.d.ts +46 -0
- package/dist/detectors/cache-storage-reads.js +323 -0
- package/dist/detectors/calldata-secret-access-control.d.ts +36 -0
- package/dist/detectors/calldata-secret-access-control.js +446 -0
- package/dist/detectors/capital-cross-contract-reentrancy.d.ts +34 -0
- package/dist/detectors/capital-cross-contract-reentrancy.js +481 -0
- package/dist/detectors/cartel-custom-approval-logic.d.ts +7 -0
- package/dist/detectors/cartel-custom-approval-logic.js +407 -0
- package/dist/detectors/ccip-receiver-missing-replay-guard.d.ts +22 -0
- package/dist/detectors/ccip-receiver-missing-replay-guard.js +413 -0
- package/dist/detectors/chain-coupling-risk.d.ts +8 -0
- package/dist/detectors/chain-coupling-risk.js +203 -0
- package/dist/detectors/chainlink-deprecated-function.d.ts +7 -0
- package/dist/detectors/chainlink-deprecated-function.js +205 -0
- package/dist/detectors/chainlink-tx-origin.d.ts +7 -0
- package/dist/detectors/chainlink-tx-origin.js +363 -0
- package/dist/detectors/check-effects-interactions.d.ts +39 -0
- package/dist/detectors/check-effects-interactions.js +783 -0
- package/dist/detectors/check-permit-missing-chainid.d.ts +27 -0
- package/dist/detectors/check-permit-missing-chainid.js +456 -0
- package/dist/detectors/classic-reentrancy.d.ts +93 -0
- package/dist/detectors/classic-reentrancy.js +645 -0
- package/dist/detectors/coinbase-morpho-wethloan-policy.d.ts +29 -0
- package/dist/detectors/coinbase-morpho-wethloan-policy.js +368 -0
- package/dist/detectors/compoundv2-inflation-attack.d.ts +7 -0
- package/dist/detectors/compoundv2-inflation-attack.js +675 -0
- package/dist/detectors/constructor-address-validation.d.ts +24 -0
- package/dist/detectors/constructor-address-validation.js +335 -0
- package/dist/detectors/constructor-interface-no-address-validation.d.ts +32 -0
- package/dist/detectors/constructor-interface-no-address-validation.js +283 -0
- package/dist/detectors/cross-chain-arbitrary-call.d.ts +7 -0
- package/dist/detectors/cross-chain-arbitrary-call.js +601 -0
- package/dist/detectors/cross-chain-input-validation.d.ts +31 -0
- package/dist/detectors/cross-chain-input-validation.js +347 -0
- package/dist/detectors/cross-chain-intent-replay.d.ts +38 -0
- package/dist/detectors/cross-chain-intent-replay.js +453 -0
- package/dist/detectors/cross-chain-intent-stale-resolution.d.ts +7 -0
- package/dist/detectors/cross-chain-intent-stale-resolution.js +463 -0
- package/dist/detectors/cross-chain-message-order-dependency.d.ts +8 -0
- package/dist/detectors/cross-chain-message-order-dependency.js +472 -0
- package/dist/detectors/cross-chain-message-replay.d.ts +8 -0
- package/dist/detectors/cross-chain-message-replay.js +568 -0
- package/dist/detectors/cross-chain-messaging.d.ts +7 -0
- package/dist/detectors/cross-chain-messaging.js +663 -0
- package/dist/detectors/cross-chain-msg-truncation.d.ts +7 -0
- package/dist/detectors/cross-chain-msg-truncation.js +453 -0
- package/dist/detectors/cross-chain-truncation.d.ts +7 -0
- package/dist/detectors/cross-chain-truncation.js +422 -0
- package/dist/detectors/cross-contract-integer-overflow.d.ts +76 -0
- package/dist/detectors/cross-contract-integer-overflow.js +554 -0
- package/dist/detectors/cross-contract-reentrancy-trusted-callee.d.ts +39 -0
- package/dist/detectors/cross-contract-reentrancy-trusted-callee.js +385 -0
- package/dist/detectors/cross-contract-reentrancy.d.ts +63 -0
- package/dist/detectors/cross-contract-reentrancy.js +631 -0
- package/dist/detectors/cross-function-reentrancy.d.ts +37 -0
- package/dist/detectors/cross-function-reentrancy.js +648 -0
- package/dist/detectors/cross-protocol-contagion.d.ts +20 -0
- package/dist/detectors/cross-protocol-contagion.js +445 -0
- package/dist/detectors/cross-protocol-oracle-collateral.d.ts +38 -0
- package/dist/detectors/cross-protocol-oracle-collateral.js +487 -0
- package/dist/detectors/cross-vm-reentrancy.d.ts +7 -0
- package/dist/detectors/cross-vm-reentrancy.js +484 -0
- package/dist/detectors/decimals-mismatch.d.ts +89 -0
- package/dist/detectors/decimals-mismatch.js +451 -0
- package/dist/detectors/deferred-state-update.d.ts +16 -0
- package/dist/detectors/deferred-state-update.js +35 -0
- package/dist/detectors/deflationary-token.d.ts +27 -0
- package/dist/detectors/deflationary-token.js +751 -0
- package/dist/detectors/delegate-transfer-unrestricted-caller.d.ts +44 -0
- package/dist/detectors/delegate-transfer-unrestricted-caller.js +410 -0
- package/dist/detectors/delegatecall-fallback-reentrancy-bypass.d.ts +14 -0
- package/dist/detectors/delegatecall-fallback-reentrancy-bypass.js +241 -0
- package/dist/detectors/delegatecall-in-loops.d.ts +7 -0
- package/dist/detectors/delegatecall-in-loops.js +129 -0
- package/dist/detectors/delegatecall-init-owner-mutator.d.ts +8 -0
- package/dist/detectors/delegatecall-init-owner-mutator.js +655 -0
- package/dist/detectors/delegatecall-init.d.ts +7 -0
- package/dist/detectors/delegatecall-init.js +769 -0
- package/dist/detectors/delegatecall-untrusted-implementation.d.ts +41 -0
- package/dist/detectors/delegatecall-untrusted-implementation.js +888 -0
- package/dist/detectors/delegated-authorization-bypass.d.ts +7 -0
- package/dist/detectors/delegated-authorization-bypass.js +370 -0
- package/dist/detectors/denial-of-service.d.ts +117 -0
- package/dist/detectors/denial-of-service.js +947 -0
- package/dist/detectors/division-before-multiplication.d.ts +7 -0
- package/dist/detectors/division-before-multiplication.js +303 -0
- package/dist/detectors/dn404-mirror-access-control.d.ts +26 -0
- package/dist/detectors/dn404-mirror-access-control.js +315 -0
- package/dist/detectors/doge-flashloan.d.ts +29 -0
- package/dist/detectors/doge-flashloan.js +329 -0
- package/dist/detectors/donate-inflation-exchangerate-roundin.d.ts +7 -0
- package/dist/detectors/donate-inflation-exchangerate-roundin.js +621 -0
- package/dist/detectors/donation-share-inflation.d.ts +24 -0
- package/dist/detectors/donation-share-inflation.js +466 -0
- package/dist/detectors/dont-let-eth-get-rekt.d.ts +84 -0
- package/dist/detectors/dont-let-eth-get-rekt.js +1151 -0
- package/dist/detectors/dos-unbounded-loop-external-call-revert.d.ts +37 -0
- package/dist/detectors/dos-unbounded-loop-external-call-revert.js +541 -0
- package/dist/detectors/eip1167-proxy-reentrancy.d.ts +7 -0
- package/dist/detectors/eip1167-proxy-reentrancy.js +508 -0
- package/dist/detectors/eip4626-vault-reentrancy.d.ts +32 -0
- package/dist/detectors/eip4626-vault-reentrancy.js +312 -0
- package/dist/detectors/eip5792-auth-replay.d.ts +45 -0
- package/dist/detectors/eip5792-auth-replay.js +519 -0
- package/dist/detectors/eip712-domain-separator.d.ts +42 -0
- package/dist/detectors/eip712-domain-separator.js +524 -0
- package/dist/detectors/eip712-signature-verification.d.ts +49 -0
- package/dist/detectors/eip712-signature-verification.js +689 -0
- package/dist/detectors/eip7702-auth-replay.d.ts +7 -0
- package/dist/detectors/eip7702-auth-replay.js +768 -0
- package/dist/detectors/eip7702-cross-chain-replay.d.ts +27 -0
- package/dist/detectors/eip7702-cross-chain-replay.js +307 -0
- package/dist/detectors/eip7702-delegated-eoa-approval-race.d.ts +39 -0
- package/dist/detectors/eip7702-delegated-eoa-approval-race.js +413 -0
- package/dist/detectors/eip7702-delegation-reentrancy.d.ts +21 -0
- package/dist/detectors/eip7702-delegation-reentrancy.js +705 -0
- package/dist/detectors/eip7702-delegation-risk.d.ts +7 -0
- package/dist/detectors/eip7702-delegation-risk.js +745 -0
- package/dist/detectors/eip7702-eoa-assumption.d.ts +57 -0
- package/dist/detectors/eip7702-eoa-assumption.js +461 -0
- package/dist/detectors/erc1155-batch-missing-per-id-approval.d.ts +23 -0
- package/dist/detectors/erc1155-batch-missing-per-id-approval.js +343 -0
- package/dist/detectors/erc1155-reentrancy.d.ts +31 -0
- package/dist/detectors/erc1155-reentrancy.js +217 -0
- package/dist/detectors/erc1271-stub-implementation.d.ts +21 -0
- package/dist/detectors/erc1271-stub-implementation.js +268 -0
- package/dist/detectors/erc20-safe-wrapper-return-unchecked.d.ts +43 -0
- package/dist/detectors/erc20-safe-wrapper-return-unchecked.js +368 -0
- package/dist/detectors/erc20-unchecked-non-standard-return.d.ts +55 -0
- package/dist/detectors/erc20-unchecked-non-standard-return.js +454 -0
- package/dist/detectors/erc2612-permit-frontrunning.d.ts +23 -0
- package/dist/detectors/erc2612-permit-frontrunning.js +246 -0
- package/dist/detectors/erc2771-context-spoofing.d.ts +41 -0
- package/dist/detectors/erc2771-context-spoofing.js +510 -0
- package/dist/detectors/erc4337-validation-storage-access.d.ts +35 -0
- package/dist/detectors/erc4337-validation-storage-access.js +232 -0
- package/dist/detectors/erc4626-totalassets-stub.d.ts +17 -0
- package/dist/detectors/erc4626-totalassets-stub.js +216 -0
- package/dist/detectors/erc6909-balance-overflow.d.ts +7 -0
- package/dist/detectors/erc6909-balance-overflow.js +688 -0
- package/dist/detectors/erc6909-operator-scope.d.ts +49 -0
- package/dist/detectors/erc6909-operator-scope.js +494 -0
- package/dist/detectors/erc721-unchecked-transfer.d.ts +38 -0
- package/dist/detectors/erc721-unchecked-transfer.js +364 -0
- package/dist/detectors/erc7579-module-install-without-threshold.d.ts +40 -0
- package/dist/detectors/erc7579-module-install-without-threshold.js +338 -0
- package/dist/detectors/erc7683-fill-validation.d.ts +53 -0
- package/dist/detectors/erc7683-fill-validation.js +758 -0
- package/dist/detectors/erc7683-intent-resolution.d.ts +7 -0
- package/dist/detectors/erc7683-intent-resolution.js +457 -0
- package/dist/detectors/erc777-callback-reentrancy.d.ts +8 -0
- package/dist/detectors/erc777-callback-reentrancy.js +439 -0
- package/dist/detectors/erc777-reentrancy.d.ts +7 -0
- package/dist/detectors/erc777-reentrancy.js +488 -0
- package/dist/detectors/erc777-tokens-to-send-reentrancy.d.ts +47 -0
- package/dist/detectors/erc777-tokens-to-send-reentrancy.js +674 -0
- package/dist/detectors/estuary-token-flaw.d.ts +16 -0
- package/dist/detectors/estuary-token-flaw.js +547 -0
- package/dist/detectors/euler-debt-token-manipulation.d.ts +32 -0
- package/dist/detectors/euler-debt-token-manipulation.js +347 -0
- package/dist/detectors/exploiting-a-vulnerability-in-curve-fina.d.ts +29 -0
- package/dist/detectors/exploiting-a-vulnerability-in-curve-fina.js +210 -0
- package/dist/detectors/fallback-delegatecall-reentrancy.d.ts +14 -0
- package/dist/detectors/fallback-delegatecall-reentrancy.js +236 -0
- package/dist/detectors/farm-business-logic-flaw-lack-of-access.d.ts +7 -0
- package/dist/detectors/farm-business-logic-flaw-lack-of-access.js +665 -0
- package/dist/detectors/fee-mechanism-exploitation.d.ts +20 -0
- package/dist/detectors/fee-mechanism-exploitation.js +400 -0
- package/dist/detectors/fee-on-transfer-balance-mismatch.d.ts +49 -0
- package/dist/detectors/fee-on-transfer-balance-mismatch.js +394 -0
- package/dist/detectors/fhe-encrypted-input-validation.d.ts +29 -0
- package/dist/detectors/fhe-encrypted-input-validation.js +210 -0
- package/dist/detectors/fhe-handle-leakage.d.ts +44 -0
- package/dist/detectors/fhe-handle-leakage.js +315 -0
- package/dist/detectors/fhe-oz-pattern-misuse.d.ts +26 -0
- package/dist/detectors/fhe-oz-pattern-misuse.js +311 -0
- package/dist/detectors/fhe-state-leakage.d.ts +8 -0
- package/dist/detectors/fhe-state-leakage.js +400 -0
- package/dist/detectors/fi-bridges.d.ts +33 -0
- package/dist/detectors/fi-bridges.js +428 -0
- package/dist/detectors/finance-access-control-price-oracle-man.d.ts +9 -0
- package/dist/detectors/finance-access-control-price-oracle-man.js +640 -0
- package/dist/detectors/finance-bridge-address0safetransferfrom.d.ts +8 -0
- package/dist/detectors/finance-bridge-address0safetransferfrom.js +574 -0
- package/dist/detectors/finance-business-logic-in-mint.d.ts +54 -0
- package/dist/detectors/finance-business-logic-in-mint.js +687 -0
- package/dist/detectors/finance-erc667-reentrancy.d.ts +7 -0
- package/dist/detectors/finance-erc667-reentrancy.js +509 -0
- package/dist/detectors/finance-flashloan-price-oracle-manipul.d.ts +7 -0
- package/dist/detectors/finance-flashloan-price-oracle-manipul.js +546 -0
- package/dist/detectors/finance-flashloan-reentrancy.d.ts +7 -0
- package/dist/detectors/finance-flashloan-reentrancy.js +547 -0
- package/dist/detectors/finance-swap-metapool-attack.d.ts +19 -0
- package/dist/detectors/finance-swap-metapool-attack.js +321 -0
- package/dist/detectors/flashloan-price-manipulation.d.ts +7 -0
- package/dist/detectors/flashloan-price-manipulation.js +950 -0
- package/dist/detectors/flashloan-reentrancy-rari.d.ts +28 -0
- package/dist/detectors/flashloan-reentrancy-rari.js +577 -0
- package/dist/detectors/flashloan-reentrancy.d.ts +7 -0
- package/dist/detectors/flashloan-reentrancy.js +383 -0
- package/dist/detectors/flashloan-token-migrate.d.ts +7 -0
- package/dist/detectors/flashloan-token-migrate.js +274 -0
- package/dist/detectors/force-fed-eth-state-corruption.d.ts +32 -0
- package/dist/detectors/force-fed-eth-state-corruption.js +293 -0
- package/dist/detectors/free-mint-bug.d.ts +41 -0
- package/dist/detectors/free-mint-bug.js +483 -0
- package/dist/detectors/front-running-orderbook-state-update.d.ts +37 -0
- package/dist/detectors/front-running-orderbook-state-update.js +471 -0
- package/dist/detectors/front-running-shared-collateral-write.d.ts +41 -0
- package/dist/detectors/front-running-shared-collateral-write.js +508 -0
- package/dist/detectors/fusion-v1-settlement-arbitrary-yul-calld.d.ts +30 -0
- package/dist/detectors/fusion-v1-settlement-arbitrary-yul-calld.js +354 -0
- package/dist/detectors/generalized-frontrunning.d.ts +7 -0
- package/dist/detectors/generalized-frontrunning.js +836 -0
- package/dist/detectors/governance-flash-loan.d.ts +62 -0
- package/dist/detectors/governance-flash-loan.js +452 -0
- package/dist/detectors/governance-flashloan-vote.d.ts +41 -0
- package/dist/detectors/governance-flashloan-vote.js +272 -0
- package/dist/detectors/halborn-security-report-aave-v3.d.ts +6 -0
- package/dist/detectors/halborn-security-report-aave-v3.js +357 -0
- package/dist/detectors/incorrect-access-control.d.ts +26 -0
- package/dist/detectors/incorrect-access-control.js +328 -0
- package/dist/detectors/incorrect-burn-accounting.d.ts +10 -0
- package/dist/detectors/incorrect-burn-accounting.js +387 -0
- package/dist/detectors/incorrect-dividends-calculation.d.ts +27 -0
- package/dist/detectors/incorrect-dividends-calculation.js +524 -0
- package/dist/detectors/incorrect-dividends.d.ts +27 -0
- package/dist/detectors/incorrect-dividends.js +485 -0
- package/dist/detectors/incorrect-input-validation.d.ts +23 -0
- package/dist/detectors/incorrect-input-validation.js +312 -0
- package/dist/detectors/incorrect-signature-verification.d.ts +26 -0
- package/dist/detectors/incorrect-signature-verification.js +530 -0
- package/dist/detectors/infinite-loop.d.ts +7 -0
- package/dist/detectors/infinite-loop.js +440 -0
- package/dist/detectors/infinite-number-of-loans.d.ts +13 -0
- package/dist/detectors/infinite-number-of-loans.js +565 -0
- package/dist/detectors/inheritance-override.d.ts +26 -0
- package/dist/detectors/inheritance-override.js +320 -0
- package/dist/detectors/initialization-access-control.d.ts +8 -0
- package/dist/detectors/initialization-access-control.js +659 -0
- package/dist/detectors/insecure-randomness.d.ts +73 -0
- package/dist/detectors/insecure-randomness.js +610 -0
- package/dist/detectors/insufficient-access-control-trusted-param.d.ts +39 -0
- package/dist/detectors/insufficient-access-control-trusted-param.js +356 -0
- package/dist/detectors/insufficient-dvn-threshold.d.ts +32 -0
- package/dist/detectors/insufficient-dvn-threshold.js +585 -0
- package/dist/detectors/integer-overflow-detector.d.ts +45 -0
- package/dist/detectors/integer-overflow-detector.js +284 -0
- package/dist/detectors/integer-overflow.d.ts +95 -0
- package/dist/detectors/integer-overflow.js +344 -0
- package/dist/detectors/integer-underflow.d.ts +7 -0
- package/dist/detectors/integer-underflow.js +422 -0
- package/dist/detectors/intent-settlement-balance-manipulation.d.ts +22 -0
- package/dist/detectors/intent-settlement-balance-manipulation.js +548 -0
- package/dist/detectors/l1-to-l2-message-reentrancy.d.ts +7 -0
- package/dist/detectors/l1-to-l2-message-reentrancy.js +545 -0
- package/dist/detectors/l2-withdrawal-validation.d.ts +8 -0
- package/dist/detectors/l2-withdrawal-validation.js +303 -0
- package/dist/detectors/lack-of-access-control.d.ts +7 -0
- package/dist/detectors/lack-of-access-control.js +425 -0
- package/dist/detectors/lack-of-calldata-validation.d.ts +16 -0
- package/dist/detectors/lack-of-calldata-validation.js +914 -0
- package/dist/detectors/lack-of-input-validation-reentrancy.d.ts +7 -0
- package/dist/detectors/lack-of-input-validation-reentrancy.js +637 -0
- package/dist/detectors/lack-of-slippage-control.d.ts +7 -0
- package/dist/detectors/lack-of-slippage-control.js +513 -0
- package/dist/detectors/lack-of-slippage-protection.d.ts +7 -0
- package/dist/detectors/lack-of-slippage-protection.js +474 -0
- package/dist/detectors/lack-of-validation-data.d.ts +23 -0
- package/dist/detectors/lack-of-validation-data.js +391 -0
- package/dist/detectors/lack-of-validation-pool.d.ts +7 -0
- package/dist/detectors/lack-of-validation-pool.js +492 -0
- package/dist/detectors/lack-of-validation-userdata.d.ts +7 -0
- package/dist/detectors/lack-of-validation-userdata.js +583 -0
- package/dist/detectors/lack-of-validation.d.ts +27 -0
- package/dist/detectors/lack-of-validation.js +609 -0
- package/dist/detectors/layerzero-dvn-quorum-missing.d.ts +22 -0
- package/dist/detectors/layerzero-dvn-quorum-missing.js +464 -0
- package/dist/detectors/layerzero-v2-unverified-origin.d.ts +40 -0
- package/dist/detectors/layerzero-v2-unverified-origin.js +368 -0
- package/dist/detectors/liquidation-accounting-desync.d.ts +14 -0
- package/dist/detectors/liquidation-accounting-desync.js +145 -0
- package/dist/detectors/liquidation-gain-manipulation.d.ts +42 -0
- package/dist/detectors/liquidation-gain-manipulation.js +606 -0
- package/dist/detectors/liquidation-price-rounding-advantage.d.ts +26 -0
- package/dist/detectors/liquidation-price-rounding-advantage.js +283 -0
- package/dist/detectors/liquidity-poisoning.d.ts +25 -0
- package/dist/detectors/liquidity-poisoning.js +339 -0
- package/dist/detectors/loans-malicious-proposal-price-oracle.d.ts +44 -0
- package/dist/detectors/loans-malicious-proposal-price-oracle.js +813 -0
- package/dist/detectors/logic-flaw.d.ts +186 -0
- package/dist/detectors/logic-flaw.js +3356 -0
- package/dist/detectors/manipulation-of-funds.d.ts +31 -0
- package/dist/detectors/manipulation-of-funds.js +304 -0
- package/dist/detectors/merkl-unsafe-claim-callback.d.ts +22 -0
- package/dist/detectors/merkl-unsafe-claim-callback.js +94 -0
- package/dist/detectors/mev-boost-timestamp.d.ts +7 -0
- package/dist/detectors/mev-boost-timestamp.js +318 -0
- package/dist/detectors/mev-merge-exploit.d.ts +29 -0
- package/dist/detectors/mev-merge-exploit.js +397 -0
- package/dist/detectors/mev-sandwich-vulnerability.d.ts +24 -0
- package/dist/detectors/mev-sandwich-vulnerability.js +648 -0
- package/dist/detectors/mev-slot-manipulation.d.ts +36 -0
- package/dist/detectors/mev-slot-manipulation.js +691 -0
- package/dist/detectors/mevbot-insufficient-validation.d.ts +48 -0
- package/dist/detectors/mevbot-insufficient-validation.js +574 -0
- package/dist/detectors/migration-rebalance-without-bound.d.ts +7 -0
- package/dist/detectors/migration-rebalance-without-bound.js +514 -0
- package/dist/detectors/mint-hardcoded-asset-parity.d.ts +31 -0
- package/dist/detectors/mint-hardcoded-asset-parity.js +356 -0
- package/dist/detectors/miscalculation-on-spendallowance.d.ts +7 -0
- package/dist/detectors/miscalculation-on-spendallowance.js +188 -0
- package/dist/detectors/misconfiguration.d.ts +27 -0
- package/dist/detectors/misconfiguration.js +410 -0
- package/dist/detectors/missing-access-control-caller-supplied-auth.d.ts +7 -0
- package/dist/detectors/missing-access-control-caller-supplied-auth.js +550 -0
- package/dist/detectors/missing-access-control-receiver-payout.d.ts +7 -0
- package/dist/detectors/missing-access-control-receiver-payout.js +460 -0
- package/dist/detectors/missing-access-control-role-or-transferfrom.d.ts +7 -0
- package/dist/detectors/missing-access-control-role-or-transferfrom.js +663 -0
- package/dist/detectors/missing-access-control.d.ts +19 -0
- package/dist/detectors/missing-access-control.js +781 -0
- package/dist/detectors/missing-sequencer-uptime-check.d.ts +30 -0
- package/dist/detectors/missing-sequencer-uptime-check.js +348 -0
- package/dist/detectors/missing-storage-gap.d.ts +19 -0
- package/dist/detectors/missing-storage-gap.js +193 -0
- package/dist/detectors/missing-swap-deadline-slippage.d.ts +31 -0
- package/dist/detectors/missing-swap-deadline-slippage.js +231 -0
- package/dist/detectors/missing-zk-proof-verification.d.ts +60 -0
- package/dist/detectors/missing-zk-proof-verification.js +547 -0
- package/dist/detectors/my-experience-with-yearn-finance.d.ts +7 -0
- package/dist/detectors/my-experience-with-yearn-finance.js +552 -0
- package/dist/detectors/network-bridge-ronin.d.ts +7 -0
- package/dist/detectors/network-bridge-ronin.js +408 -0
- package/dist/detectors/network-bridge.d.ts +7 -0
- package/dist/detectors/network-bridge.js +444 -0
- package/dist/detectors/network-underflow.d.ts +7 -0
- package/dist/detectors/network-underflow.js +517 -0
- package/dist/detectors/nft-denial-of-service.d.ts +7 -0
- package/dist/detectors/nft-denial-of-service.js +223 -0
- package/dist/detectors/nft-marketplace-order-reentrancy.d.ts +7 -0
- package/dist/detectors/nft-marketplace-order-reentrancy.js +427 -0
- package/dist/detectors/nft-token-standard-access-control.d.ts +7 -0
- package/dist/detectors/nft-token-standard-access-control.js +455 -0
- package/dist/detectors/oracle-manipulation-amm-spot-price.d.ts +42 -0
- package/dist/detectors/oracle-manipulation-amm-spot-price.js +321 -0
- package/dist/detectors/oracle-manipulation-liquidity-withdrawal.d.ts +27 -0
- package/dist/detectors/oracle-manipulation-liquidity-withdrawal.js +192 -0
- package/dist/detectors/oracle-manipulation.d.ts +90 -0
- package/dist/detectors/oracle-manipulation.js +1023 -0
- package/dist/detectors/oracle-vortex-manipulation.d.ts +30 -0
- package/dist/detectors/oracle-vortex-manipulation.js +473 -0
- package/dist/detectors/overpriced-asset-in-oracle.d.ts +41 -0
- package/dist/detectors/overpriced-asset-in-oracle.js +420 -0
- package/dist/detectors/oz-access-control-roles.d.ts +33 -0
- package/dist/detectors/oz-access-control-roles.js +359 -0
- package/dist/detectors/pair-manipulation-transfer-hook.d.ts +38 -0
- package/dist/detectors/pair-manipulation-transfer-hook.js +366 -0
- package/dist/detectors/parameter-access-control.d.ts +47 -0
- package/dist/detectors/parameter-access-control.js +511 -0
- package/dist/detectors/parameter-manipulation.d.ts +7 -0
- package/dist/detectors/parameter-manipulation.js +505 -0
- package/dist/detectors/parity-multisig-delegatecall.d.ts +7 -0
- package/dist/detectors/parity-multisig-delegatecall.js +707 -0
- package/dist/detectors/permissionless-claim-amm-spot-pricing.d.ts +7 -0
- package/dist/detectors/permissionless-claim-amm-spot-pricing.js +351 -0
- package/dist/detectors/permit-future-dated-deadline.d.ts +31 -0
- package/dist/detectors/permit-future-dated-deadline.js +339 -0
- package/dist/detectors/phishing-attack-bybit.d.ts +37 -0
- package/dist/detectors/phishing-attack-bybit.js +513 -0
- package/dist/detectors/post-insolvency-check.d.ts +7 -0
- package/dist/detectors/post-insolvency-check.js +277 -0
- package/dist/detectors/precision-loss-vulnerability.d.ts +7 -0
- package/dist/detectors/precision-loss-vulnerability.js +472 -0
- package/dist/detectors/precision-truncation.d.ts +8 -0
- package/dist/detectors/precision-truncation.js +425 -0
- package/dist/detectors/price-dependency-veth.d.ts +41 -0
- package/dist/detectors/price-dependency-veth.js +588 -0
- package/dist/detectors/price-feed-verification.d.ts +7 -0
- package/dist/detectors/price-feed-verification.js +557 -0
- package/dist/detectors/price-manipulation-reentrancy.d.ts +32 -0
- package/dist/detectors/price-manipulation-reentrancy.js +445 -0
- package/dist/detectors/price-manipulation-via-reentranc.d.ts +7 -0
- package/dist/detectors/price-manipulation-via-reentranc.js +569 -0
- package/dist/detectors/price-oracle-manipulation.d.ts +25 -0
- package/dist/detectors/price-oracle-manipulation.js +530 -0
- package/dist/detectors/project-instant-rewards-unlocked.d.ts +6 -0
- package/dist/detectors/project-instant-rewards-unlocked.js +462 -0
- package/dist/detectors/protocol-reentrancy.d.ts +7 -0
- package/dist/detectors/protocol-reentrancy.js +457 -0
- package/dist/detectors/proxy-init-race.d.ts +11 -0
- package/dist/detectors/proxy-init-race.js +634 -0
- package/dist/detectors/proxy-storage-slot-collision.d.ts +7 -0
- package/dist/detectors/proxy-storage-slot-collision.js +135 -0
- package/dist/detectors/public-internal-function.d.ts +39 -0
- package/dist/detectors/public-internal-function.js +233 -0
- package/dist/detectors/quote-silent-zero.d.ts +25 -0
- package/dist/detectors/quote-silent-zero.js +156 -0
- package/dist/detectors/readonly-reentrancy.d.ts +9 -0
- package/dist/detectors/readonly-reentrancy.js +108 -0
- package/dist/detectors/receipt-redemption-missing-validation.d.ts +31 -0
- package/dist/detectors/receipt-redemption-missing-validation.js +453 -0
- package/dist/detectors/reentrancy-balance.d.ts +36 -0
- package/dist/detectors/reentrancy-balance.js +577 -0
- package/dist/detectors/reentrancy-business-logic-game.d.ts +36 -0
- package/dist/detectors/reentrancy-business-logic-game.js +616 -0
- package/dist/detectors/reentrancy-on-sell-nft.d.ts +23 -0
- package/dist/detectors/reentrancy-on-sell-nft.js +510 -0
- package/dist/detectors/reflection-token-balance-desync.d.ts +28 -0
- package/dist/detectors/reflection-token-balance-desync.js +246 -0
- package/dist/detectors/registry-engine.d.ts +34 -0
- package/dist/detectors/registry-engine.js +388 -0
- package/dist/detectors/rollup-unvalidated-state-update.d.ts +35 -0
- package/dist/detectors/rollup-unvalidated-state-update.js +286 -0
- package/dist/detectors/s-horizon-bridge-private-key-compromis.d.ts +8 -0
- package/dist/detectors/s-horizon-bridge-private-key-compromis.js +615 -0
- package/dist/detectors/share-price-manipulation.d.ts +7 -0
- package/dist/detectors/share-price-manipulation.js +653 -0
- package/dist/detectors/signature-replay.d.ts +30 -0
- package/dist/detectors/signature-replay.js +367 -0
- package/dist/detectors/simpleswap-unverified-approval.d.ts +27 -0
- package/dist/detectors/simpleswap-unverified-approval.js +198 -0
- package/dist/detectors/single-spot-oracle-collateral-valuation.d.ts +22 -0
- package/dist/detectors/single-spot-oracle-collateral-valuation.js +419 -0
- package/dist/detectors/skim-token-balance.d.ts +7 -0
- package/dist/detectors/skim-token-balance.js +788 -0
- package/dist/detectors/sky-oft-governance-payload.d.ts +7 -0
- package/dist/detectors/sky-oft-governance-payload.js +515 -0
- package/dist/detectors/sky-oft-governance-truncation.d.ts +32 -0
- package/dist/detectors/sky-oft-governance-truncation.js +377 -0
- package/dist/detectors/solana-evm-bridge-truncation.d.ts +7 -0
- package/dist/detectors/solana-evm-bridge-truncation.js +638 -0
- package/dist/detectors/solhint-unchecked-low-level-call.d.ts +74 -0
- package/dist/detectors/solhint-unchecked-low-level-call.js +463 -0
- package/dist/detectors/stablecoin-pair-spot-oracle.d.ts +7 -0
- package/dist/detectors/stablecoin-pair-spot-oracle.js +364 -0
- package/dist/detectors/staked-rate-as-oracle.d.ts +44 -0
- package/dist/detectors/staked-rate-as-oracle.js +497 -0
- package/dist/detectors/stale-oracle.d.ts +63 -0
- package/dist/detectors/stale-oracle.js +649 -0
- package/dist/detectors/starkware-proof-validation-gap.d.ts +18 -0
- package/dist/detectors/starkware-proof-validation-gap.js +629 -0
- package/dist/detectors/steth-transfer-reentrancy.d.ts +8 -0
- package/dist/detectors/steth-transfer-reentrancy.js +317 -0
- package/dist/detectors/storage-collision-malicious-proposal.d.ts +27 -0
- package/dist/detectors/storage-collision-malicious-proposal.js +386 -0
- package/dist/detectors/timestamp-manipulation.d.ts +49 -0
- package/dist/detectors/timestamp-manipulation.js +383 -0
- package/dist/detectors/token-access-control.d.ts +7 -0
- package/dist/detectors/token-access-control.js +544 -0
- package/dist/detectors/token-incorrect-signature-verification.d.ts +23 -0
- package/dist/detectors/token-incorrect-signature-verification.js +434 -0
- package/dist/detectors/token-transfer-logic-flaw.d.ts +33 -0
- package/dist/detectors/token-transfer-logic-flaw.js +267 -0
- package/dist/detectors/transfer-double-debit-pool-recipient.d.ts +7 -0
- package/dist/detectors/transfer-double-debit-pool-recipient.js +542 -0
- package/dist/detectors/treasury-reentrancy.d.ts +7 -0
- package/dist/detectors/treasury-reentrancy.js +442 -0
- package/dist/detectors/tstore-poison.d.ts +32 -0
- package/dist/detectors/tstore-poison.js +417 -0
- package/dist/detectors/tstore-race-condition.d.ts +7 -0
- package/dist/detectors/tstore-race-condition.js +632 -0
- package/dist/detectors/types.d.ts +85 -0
- package/dist/detectors/types.js +20 -0
- package/dist/detectors/unauthorized-payer-transferfrom.d.ts +66 -0
- package/dist/detectors/unauthorized-payer-transferfrom.js +339 -0
- package/dist/detectors/unauthorized-transferfrom-shell.d.ts +7 -0
- package/dist/detectors/unauthorized-transferfrom-shell.js +504 -0
- package/dist/detectors/unauthorized-transferfrom.d.ts +16 -0
- package/dist/detectors/unauthorized-transferfrom.js +838 -0
- package/dist/detectors/unbound-zk-verifier-input.d.ts +7 -0
- package/dist/detectors/unbound-zk-verifier-input.js +445 -0
- package/dist/detectors/unbounded-share-price-collateral-oracle.d.ts +48 -0
- package/dist/detectors/unbounded-share-price-collateral-oracle.js +566 -0
- package/dist/detectors/uncapped-reward-emission.d.ts +7 -0
- package/dist/detectors/uncapped-reward-emission.js +493 -0
- package/dist/detectors/unchecked-call-forwarding.d.ts +31 -0
- package/dist/detectors/unchecked-call-forwarding.js +330 -0
- package/dist/detectors/unchecked-external-call-unconditional-state-mutation.d.ts +18 -0
- package/dist/detectors/unchecked-external-call-unconditional-state-mutation.js +311 -0
- package/dist/detectors/unchecked-external-call.d.ts +66 -0
- package/dist/detectors/unchecked-external-call.js +389 -0
- package/dist/detectors/unchecked-oft-return.d.ts +13 -0
- package/dist/detectors/unchecked-oft-return.js +118 -0
- package/dist/detectors/unguarded-governance-execution.d.ts +35 -0
- package/dist/detectors/unguarded-governance-execution.js +422 -0
- package/dist/detectors/unguarded-governance-executor.d.ts +35 -0
- package/dist/detectors/unguarded-governance-executor.js +349 -0
- package/dist/detectors/unindexed-event-address.d.ts +7 -0
- package/dist/detectors/unindexed-event-address.js +268 -0
- package/dist/detectors/uninitialized-implementation.d.ts +27 -0
- package/dist/detectors/uninitialized-implementation.js +333 -0
- package/dist/detectors/uninitialized-storage-pointer.d.ts +7 -0
- package/dist/detectors/uninitialized-storage-pointer.js +110 -0
- package/dist/detectors/uniswap-skim-token-balance-attack.d.ts +8 -0
- package/dist/detectors/uniswap-skim-token-balance-attack.js +331 -0
- package/dist/detectors/uniswap-v4-hook-state-manipulation.d.ts +7 -0
- package/dist/detectors/uniswap-v4-hook-state-manipulation.js +296 -0
- package/dist/detectors/unprotected-admin-or-fund-sink.d.ts +7 -0
- package/dist/detectors/unprotected-admin-or-fund-sink.js +643 -0
- package/dist/detectors/unprotected-dex-swap.d.ts +43 -0
- package/dist/detectors/unprotected-dex-swap.js +334 -0
- package/dist/detectors/unprotected-initializer.d.ts +7 -0
- package/dist/detectors/unprotected-initializer.js +707 -0
- package/dist/detectors/unprotected-pair-initializer.d.ts +22 -0
- package/dist/detectors/unprotected-pair-initializer.js +359 -0
- package/dist/detectors/unprotected-upgrade-function.d.ts +7 -0
- package/dist/detectors/unprotected-upgrade-function.js +180 -0
- package/dist/detectors/unreachable-code-0.8.28.d.ts +19 -0
- package/dist/detectors/unreachable-code-0.8.28.js +206 -0
- package/dist/detectors/unsafe-proxy-storage.d.ts +7 -0
- package/dist/detectors/unsafe-proxy-storage.js +436 -0
- package/dist/detectors/unsafe-transient-storage.d.ts +7 -0
- package/dist/detectors/unsafe-transient-storage.js +1052 -0
- package/dist/detectors/unsafe-tx-origin.d.ts +9 -0
- package/dist/detectors/unsafe-tx-origin.js +179 -0
- package/dist/detectors/unsigned-validity-window.d.ts +20 -0
- package/dist/detectors/unsigned-validity-window.js +220 -0
- package/dist/detectors/unvalidated-interface-address.d.ts +25 -0
- package/dist/detectors/unvalidated-interface-address.js +377 -0
- package/dist/detectors/uups-uninitialized-storage.d.ts +9 -0
- package/dist/detectors/uups-uninitialized-storage.js +366 -0
- package/dist/detectors/v2-error-k-value-attack.d.ts +33 -0
- package/dist/detectors/v2-error-k-value-attack.js +276 -0
- package/dist/detectors/v2-k-invariant-bypass.d.ts +33 -0
- package/dist/detectors/v2-k-invariant-bypass.js +283 -0
- package/dist/detectors/v4-hook-reentrancy.d.ts +9 -0
- package/dist/detectors/v4-hook-reentrancy.js +488 -0
- package/dist/detectors/vault-inflation-rounding.d.ts +23 -0
- package/dist/detectors/vault-inflation-rounding.js +477 -0
- package/dist/detectors/vault-share-price-manipulation.d.ts +7 -0
- package/dist/detectors/vault-share-price-manipulation.js +332 -0
- package/dist/detectors/vortex-interaction-guard.d.ts +45 -0
- package/dist/detectors/vortex-interaction-guard.js +275 -0
- package/dist/detectors/vortex-protocol-reentrancy-guard.d.ts +27 -0
- package/dist/detectors/vortex-protocol-reentrancy-guard.js +408 -0
- package/dist/detectors/vulnerable-price-dependency.d.ts +41 -0
- package/dist/detectors/vulnerable-price-dependency.js +473 -0
- package/dist/detectors/weak-random-mint.d.ts +37 -0
- package/dist/detectors/weak-random-mint.js +271 -0
- package/dist/detectors/withdraw-be-to-withdraw.d.ts +26 -0
- package/dist/detectors/withdraw-be-to-withdraw.js +329 -0
- package/dist/detectors/wrong-function-visibility.d.ts +29 -0
- package/dist/detectors/wrong-function-visibility.js +147 -0
- package/dist/detectors/wrong-price-calculation.d.ts +42 -0
- package/dist/detectors/wrong-price-calculation.js +387 -0
- package/dist/detectors/yearn-vault-v2-share-price-manipulation.d.ts +32 -0
- package/dist/detectors/yearn-vault-v2-share-price-manipulation.js +248 -0
- package/dist/detectors/zero-fee.d.ts +7 -0
- package/dist/detectors/zero-fee.js +596 -0
- package/dist/detectors/zetachain-gateway-hack-analysis.d.ts +7 -0
- package/dist/detectors/zetachain-gateway-hack-analysis.js +629 -0
- package/dist/detectors/zk-rollup-da-gap.d.ts +8 -0
- package/dist/detectors/zk-rollup-da-gap.js +322 -0
- package/dist/detectors/zksync-batch-validation.d.ts +8 -0
- package/dist/detectors/zksync-batch-validation.js +461 -0
- package/dist/detectors/zksync-era-rollup-state-update.d.ts +60 -0
- package/dist/detectors/zksync-era-rollup-state-update.js +360 -0
- package/dist/detectors/zksync-simulation-drift.d.ts +35 -0
- package/dist/detectors/zksync-simulation-drift.js +309 -0
- package/dist/exit-codes.d.ts +15 -0
- package/dist/exit-codes.js +18 -0
- package/dist/formatters/github-actions.d.ts +2 -0
- package/dist/formatters/github-actions.js +61 -0
- package/dist/formatters/sarif.d.ts +24 -0
- package/dist/formatters/sarif.js +670 -0
- package/dist/formatters/text.d.ts +14 -0
- package/dist/formatters/text.js +152 -0
- package/dist/fp-rates.json +70 -0
- package/dist/identity/diff-baseline.d.ts +16 -0
- package/dist/identity/diff-baseline.js +152 -0
- package/dist/identity/hashing.d.ts +39 -0
- package/dist/identity/hashing.js +96 -0
- package/dist/index.d.ts +174 -0
- package/dist/index.js +358 -0
- package/dist/parallel-scan.d.ts +66 -0
- package/dist/parallel-scan.js +227 -0
- package/dist/registry.d.ts +17 -0
- package/dist/registry.js +118 -0
- package/dist/rules/glob.d.ts +5 -0
- package/dist/rules/glob.js +76 -0
- package/dist/rules/suppressions.d.ts +23 -0
- package/dist/rules/suppressions.js +136 -0
- package/dist/rules/tiers.d.ts +23 -0
- package/dist/rules/tiers.js +341 -0
- package/dist/scan-worker.d.ts +1 -0
- package/dist/scan-worker.js +61 -0
- package/dist/scan.d.ts +24 -0
- package/dist/scan.js +558 -0
- package/dist/semantic/contracts.d.ts +10 -0
- package/dist/semantic/contracts.js +141 -0
- package/dist/semantic/diagnostics.d.ts +29 -0
- package/dist/semantic/diagnostics.js +25 -0
- package/dist/semantic/eog.d.ts +56 -0
- package/dist/semantic/eog.js +545 -0
- package/dist/semantic/imports.d.ts +88 -0
- package/dist/semantic/imports.js +246 -0
- package/dist/semantic/index.d.ts +2 -0
- package/dist/semantic/index.js +8 -0
- package/dist/semantic/inheritance.d.ts +33 -0
- package/dist/semantic/inheritance.js +137 -0
- package/dist/semantic/model.d.ts +95 -0
- package/dist/semantic/model.js +232 -0
- package/dist/semantic/taint-tracker.d.ts +49 -0
- package/dist/semantic/taint-tracker.js +410 -0
- package/dist/semantic/types.d.ts +119 -0
- package/dist/semantic/types.js +18 -0
- package/dist/severity.d.ts +10 -0
- package/dist/severity.js +78 -0
- package/package.json +52 -0
|
@@ -0,0 +1,783 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CheckEffectsInteractionsDetector = void 0;
|
|
4
|
+
const ast_1 = require("./_common/ast");
|
|
5
|
+
const RULE_ID = 'check-effects-interactions';
|
|
6
|
+
const PATTERN_EAI = `${RULE_ID}/effect-after-interaction`;
|
|
7
|
+
const PATTERN_CAE = `${RULE_ID}/check-after-effect`;
|
|
8
|
+
const ASSIGN_OPS = new Set([
|
|
9
|
+
'=', '+=', '-=', '*=', '/=', '%=',
|
|
10
|
+
'&=', '|=', '^=', '<<=', '>>=', '>>>=',
|
|
11
|
+
]);
|
|
12
|
+
const UNARY_MUTATORS = new Set(['++', '--', 'delete']);
|
|
13
|
+
const LOW_LEVEL_CALL_MEMBERS = new Set([
|
|
14
|
+
'call', 'delegatecall', 'staticcall', 'send', 'transfer',
|
|
15
|
+
]);
|
|
16
|
+
const BUILTIN_BASE_IDENTIFIERS = new Set([
|
|
17
|
+
'msg', 'block', 'tx', 'abi', 'super', 'this', 'address', 'payable',
|
|
18
|
+
'type', 'bytes', 'string', 'keccak256', 'sha256', 'ripemd160', 'ecrecover',
|
|
19
|
+
'assert', 'require', 'revert', 'gasleft',
|
|
20
|
+
]);
|
|
21
|
+
class CheckEffectsInteractionsDetector {
|
|
22
|
+
id = RULE_ID;
|
|
23
|
+
patternKey = RULE_ID;
|
|
24
|
+
supportedAstKinds = ['parser'];
|
|
25
|
+
currentFile = '';
|
|
26
|
+
typeKinds = {
|
|
27
|
+
interfaces: new Set(),
|
|
28
|
+
contracts: new Set(),
|
|
29
|
+
libraries: new Set(),
|
|
30
|
+
structs: new Set(),
|
|
31
|
+
enums: new Set(),
|
|
32
|
+
};
|
|
33
|
+
scanAst(ast, file, _sourceText, ctxArg) {
|
|
34
|
+
this.currentFile = file;
|
|
35
|
+
const results = [];
|
|
36
|
+
if (!ast || ast.type !== 'SourceUnit')
|
|
37
|
+
return results;
|
|
38
|
+
this.typeKinds = this.collectTypeKinds(ast);
|
|
39
|
+
const contractsByName = this.collectContractsByName(ast);
|
|
40
|
+
// SemanticModel adoption (roadmap 3.3 / Slice 3). After the local
|
|
41
|
+
// per-contract walk, also analyze inherited functions whose AST
|
|
42
|
+
// lives in a base contract — potentially in another file the per-
|
|
43
|
+
// contract walk doesn't reach. When undefined the detector falls
|
|
44
|
+
// back to the pre-Slice-3 in-file-only behaviour.
|
|
45
|
+
const semantic = ctxArg?.semantic;
|
|
46
|
+
for (const child of ast.children || []) {
|
|
47
|
+
if (child?.type !== 'ContractDefinition')
|
|
48
|
+
continue;
|
|
49
|
+
if (child.kind === 'interface' || child.kind === 'library')
|
|
50
|
+
continue;
|
|
51
|
+
const stateVars = this.collectStateVariables(child, contractsByName);
|
|
52
|
+
const stateTypes = this.collectStateVarTypes(child, contractsByName);
|
|
53
|
+
const internalSummaries = this.summarizeInternalFunctions(child, stateVars, stateTypes);
|
|
54
|
+
const localFnNames = new Set();
|
|
55
|
+
for (const sub of child.subNodes || []) {
|
|
56
|
+
if (sub?.type !== 'FunctionDefinition')
|
|
57
|
+
continue;
|
|
58
|
+
if (typeof sub.name === 'string' && sub.name)
|
|
59
|
+
localFnNames.add(sub.name);
|
|
60
|
+
if (!sub.body)
|
|
61
|
+
continue;
|
|
62
|
+
if (sub.isConstructor)
|
|
63
|
+
continue;
|
|
64
|
+
if (sub.kind === 'constructor')
|
|
65
|
+
continue;
|
|
66
|
+
const mutability = String(sub.stateMutability || '').toLowerCase();
|
|
67
|
+
if (mutability === 'view' || mutability === 'pure')
|
|
68
|
+
continue;
|
|
69
|
+
const findings = this.analyzeFunction(child, sub, stateVars, stateTypes, internalSummaries);
|
|
70
|
+
results.push(...findings);
|
|
71
|
+
}
|
|
72
|
+
// === SemanticModel adoption (Slice 3) ===
|
|
73
|
+
//
|
|
74
|
+
// Walk the contract's MRO for inherited externally-callable
|
|
75
|
+
// FunctionDefinitions and run the same CEI analysis against their
|
|
76
|
+
// bodies — using the DECLARING contract's state-vars + internal
|
|
77
|
+
// summaries so cross-MRO writes and helpers resolve correctly.
|
|
78
|
+
// Findings anchor at the CURRENT contract's definition line (the
|
|
79
|
+
// surface a caller reaches); instance_key keeps findingIds distinct
|
|
80
|
+
// when a derived contract inherits multiple CEI-violating
|
|
81
|
+
// functions on the same anchor line.
|
|
82
|
+
if (semantic) {
|
|
83
|
+
const myId = `${file}::${child.name || ''}`;
|
|
84
|
+
const myInfo = semantic.contracts.get(myId);
|
|
85
|
+
if (myInfo && myInfo.bases.length > 0) {
|
|
86
|
+
const childName = child.name || '<anonymous>';
|
|
87
|
+
const anchorLoc = (child?.loc?.start || { line: 1, column: 0 });
|
|
88
|
+
for (const inheritedFn of semantic.inheritedFunctions(myId)) {
|
|
89
|
+
if (inheritedFn.contractId === myId)
|
|
90
|
+
continue;
|
|
91
|
+
if (!inheritedFn.name)
|
|
92
|
+
continue;
|
|
93
|
+
if (localFnNames.has(inheritedFn.name))
|
|
94
|
+
continue;
|
|
95
|
+
const fnNode = inheritedFn.node;
|
|
96
|
+
if (!fnNode)
|
|
97
|
+
continue;
|
|
98
|
+
if (!fnNode.body)
|
|
99
|
+
continue;
|
|
100
|
+
if (fnNode.isConstructor)
|
|
101
|
+
continue;
|
|
102
|
+
if (String(fnNode.kind || '').toLowerCase() === 'constructor')
|
|
103
|
+
continue;
|
|
104
|
+
const visibility = String(fnNode.visibility || '').toLowerCase();
|
|
105
|
+
if (visibility !== 'public' && visibility !== 'external')
|
|
106
|
+
continue;
|
|
107
|
+
const mutability = String(fnNode.stateMutability || '').toLowerCase();
|
|
108
|
+
if (mutability === 'view' || mutability === 'pure')
|
|
109
|
+
continue;
|
|
110
|
+
const declarer = semantic.contracts.get(inheritedFn.contractId);
|
|
111
|
+
if (!declarer || !declarer.node)
|
|
112
|
+
continue;
|
|
113
|
+
// Use the declaring contract's state-vars + internal-summary
|
|
114
|
+
// vocabulary so writes/helpers inside the inherited body
|
|
115
|
+
// resolve. `collectStateVariables` walks bases of the
|
|
116
|
+
// declarer (with `contractsByName` as the lookup table) —
|
|
117
|
+
// here we pass the local map; it will simply skip
|
|
118
|
+
// unresolved cross-file bases for the declarer (lenient,
|
|
119
|
+
// mirrors pre-Slice-3 behaviour for in-file inheritance).
|
|
120
|
+
const declarerStateVars = this.collectStateVariables(declarer.node, contractsByName);
|
|
121
|
+
const declarerStateTypes = this.collectStateVarTypes(declarer.node, contractsByName);
|
|
122
|
+
const declarerInternals = this.summarizeInternalFunctions(declarer.node, declarerStateVars, declarerStateTypes);
|
|
123
|
+
const inheritedFindings = this.analyzeFunction(child, fnNode, declarerStateVars, declarerStateTypes, declarerInternals);
|
|
124
|
+
// Patch each inherited finding to anchor at the derived
|
|
125
|
+
// contract's def line + carry an instance_key discriminator
|
|
126
|
+
// so collisions on (file, line, ruleId) don't lose findings
|
|
127
|
+
// in computeFindingId. Same pattern as Slice 2a/2b.
|
|
128
|
+
const declarerName = declarer.name || '<unknown>';
|
|
129
|
+
for (const f of inheritedFindings) {
|
|
130
|
+
f.line = anchorLoc.line;
|
|
131
|
+
f.column = anchorLoc.column;
|
|
132
|
+
f.sourceLocation = { line: anchorLoc.line, column: anchorLoc.column };
|
|
133
|
+
f.instance_key = `${childName}::${inheritedFn.name}`;
|
|
134
|
+
f.message =
|
|
135
|
+
`Check-effects-interactions violation in inherited function '${inheritedFn.name}' ` +
|
|
136
|
+
`(from ${declarerName}): state mutation occurs after an external interaction, reachable ` +
|
|
137
|
+
`through ${childName} via inheritance.`;
|
|
138
|
+
}
|
|
139
|
+
results.push(...inheritedFindings);
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
}
|
|
144
|
+
return results;
|
|
145
|
+
}
|
|
146
|
+
analyzeFunction(contract, fn, stateVars, stateTypes, internalSummaries) {
|
|
147
|
+
const localVars = this.collectLocals(fn);
|
|
148
|
+
const localTypes = this.collectLocalTypes(fn);
|
|
149
|
+
const state = {
|
|
150
|
+
sawInteraction: false,
|
|
151
|
+
sawEffect: false,
|
|
152
|
+
effectAfterInteraction: null,
|
|
153
|
+
checkAfterEffect: null,
|
|
154
|
+
};
|
|
155
|
+
const ctx = { stateVars, stateTypes, localVars, localTypes, internalSummaries };
|
|
156
|
+
this.walkForCEI(fn.body, state, ctx, false);
|
|
157
|
+
const findings = [];
|
|
158
|
+
const fnName = fn.name || (fn.isConstructor ? '<constructor>' : '<anonymous>');
|
|
159
|
+
if (state.effectAfterInteraction && !this.functionHasReentrancyGuard(fn)) {
|
|
160
|
+
findings.push(this.makeFinding(contract, fnName, state.effectAfterInteraction.loc, 'effect-after-interaction', `Check-effects-interactions violation in '${fnName}': state mutation occurs after an external interaction.`));
|
|
161
|
+
}
|
|
162
|
+
if (state.checkAfterEffect) {
|
|
163
|
+
findings.push(this.makeFinding(contract, fnName, state.checkAfterEffect.loc, 'check-after-effect', `Check-effects-interactions violation in '${fnName}': state-dependent check occurs after a state effect.`));
|
|
164
|
+
}
|
|
165
|
+
return findings;
|
|
166
|
+
}
|
|
167
|
+
// Recursive source-ordered walk so interactions and effects are sequenced by
|
|
168
|
+
// their actual position in the AST — including across nested control flow
|
|
169
|
+
// such as `if (cond) { external.call(...); state = x; }`, where both the
|
|
170
|
+
// call and the write live inside the same statement node.
|
|
171
|
+
walkForCEI(node, state, ctx, effectsGuarded) {
|
|
172
|
+
if (!node || typeof node !== 'object')
|
|
173
|
+
return;
|
|
174
|
+
if (node.type === 'EmitStatement')
|
|
175
|
+
return;
|
|
176
|
+
if (node.type === 'IfStatement') {
|
|
177
|
+
if (node.condition)
|
|
178
|
+
this.walkForCEI(node.condition, state, ctx, effectsGuarded);
|
|
179
|
+
const trueBranchGuarded = effectsGuarded || (!!node.trueBody && this.blockEndsWithRevertOrThrow(node.trueBody));
|
|
180
|
+
const falseBranchGuarded = effectsGuarded || (!!node.falseBody && this.blockEndsWithRevertOrThrow(node.falseBody));
|
|
181
|
+
if (node.trueBody)
|
|
182
|
+
this.walkForCEI(node.trueBody, state, ctx, trueBranchGuarded);
|
|
183
|
+
if (node.falseBody)
|
|
184
|
+
this.walkForCEI(node.falseBody, state, ctx, falseBranchGuarded);
|
|
185
|
+
return;
|
|
186
|
+
}
|
|
187
|
+
if (node.type === 'VariableDeclarationStatement') {
|
|
188
|
+
if (node.initialValue)
|
|
189
|
+
this.walkForCEI(node.initialValue, state, ctx, effectsGuarded);
|
|
190
|
+
return;
|
|
191
|
+
}
|
|
192
|
+
if (node.type === 'FunctionCall') {
|
|
193
|
+
const directName = this.getDirectCallName(node.expression);
|
|
194
|
+
if (directName === 'require' || directName === 'assert') {
|
|
195
|
+
const args = node.arguments || [];
|
|
196
|
+
const condition = args[0];
|
|
197
|
+
if (condition &&
|
|
198
|
+
this.containsStateReadInCheck(condition, ctx)) {
|
|
199
|
+
if (state.sawEffect && !state.checkAfterEffect) {
|
|
200
|
+
state.checkAfterEffect = { loc: this.locOf(node) };
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
for (const arg of args) {
|
|
204
|
+
this.walkForCEI(arg, state, ctx, effectsGuarded);
|
|
205
|
+
}
|
|
206
|
+
return;
|
|
207
|
+
}
|
|
208
|
+
if (this.isExternalCallExpression(node, ctx.stateVars, ctx.stateTypes, ctx.localVars, ctx.localTypes)) {
|
|
209
|
+
for (const arg of node.arguments || []) {
|
|
210
|
+
this.walkForCEI(arg, state, ctx, effectsGuarded);
|
|
211
|
+
}
|
|
212
|
+
state.sawInteraction = true;
|
|
213
|
+
return;
|
|
214
|
+
}
|
|
215
|
+
if (directName) {
|
|
216
|
+
const summary = ctx.internalSummaries.get(directName);
|
|
217
|
+
if (summary?.performsInteraction) {
|
|
218
|
+
for (const arg of node.arguments || []) {
|
|
219
|
+
this.walkForCEI(arg, state, ctx, effectsGuarded);
|
|
220
|
+
}
|
|
221
|
+
state.sawInteraction = true;
|
|
222
|
+
return;
|
|
223
|
+
}
|
|
224
|
+
}
|
|
225
|
+
for (const child of this.childNodes(node)) {
|
|
226
|
+
this.walkForCEI(child, state, ctx, effectsGuarded);
|
|
227
|
+
}
|
|
228
|
+
return;
|
|
229
|
+
}
|
|
230
|
+
if (node.type === 'BinaryOperation' && ASSIGN_OPS.has(node.operator)) {
|
|
231
|
+
if (this.refersToStateStorage(node.left, ctx.stateVars, ctx.localVars)) {
|
|
232
|
+
if (node.right)
|
|
233
|
+
this.walkForCEI(node.right, state, ctx, effectsGuarded);
|
|
234
|
+
state.sawEffect = true;
|
|
235
|
+
if (state.sawInteraction && !state.effectAfterInteraction && !effectsGuarded) {
|
|
236
|
+
state.effectAfterInteraction = { loc: this.locOf(node) };
|
|
237
|
+
}
|
|
238
|
+
if (node.left)
|
|
239
|
+
this.walkForCEI(node.left, state, ctx, effectsGuarded);
|
|
240
|
+
return;
|
|
241
|
+
}
|
|
242
|
+
}
|
|
243
|
+
if (node.type === 'UnaryOperation' && UNARY_MUTATORS.has(node.operator)) {
|
|
244
|
+
if (this.refersToStateStorage(node.subExpression, ctx.stateVars, ctx.localVars)) {
|
|
245
|
+
state.sawEffect = true;
|
|
246
|
+
if (state.sawInteraction && !state.effectAfterInteraction && !effectsGuarded) {
|
|
247
|
+
state.effectAfterInteraction = { loc: this.locOf(node) };
|
|
248
|
+
}
|
|
249
|
+
return;
|
|
250
|
+
}
|
|
251
|
+
}
|
|
252
|
+
for (const child of this.childNodes(node)) {
|
|
253
|
+
this.walkForCEI(child, state, ctx, effectsGuarded);
|
|
254
|
+
}
|
|
255
|
+
}
|
|
256
|
+
isExternalCallExpression(call, stateVars, stateTypes, localVars, localTypes) {
|
|
257
|
+
let callee = call?.expression;
|
|
258
|
+
if (callee?.type === 'NameValueExpression')
|
|
259
|
+
callee = callee.expression;
|
|
260
|
+
if (callee?.type === 'MemberAccess') {
|
|
261
|
+
const member = String(callee.memberName || '').toLowerCase();
|
|
262
|
+
if (LOW_LEVEL_CALL_MEMBERS.has(member))
|
|
263
|
+
return true;
|
|
264
|
+
// Treat `base.member(...)` as an external interaction when `base` is a
|
|
265
|
+
// state variable, OR a parameter / local whose declared type resolves to
|
|
266
|
+
// an interface, contract, or `address` / `address payable`. Continue to
|
|
267
|
+
// suppress builtins (`msg`, `block`, ...) and bases whose type is a
|
|
268
|
+
// local struct, enum, library, mapping, array, or non-address elementary
|
|
269
|
+
// — those are not external callees. When type information is missing
|
|
270
|
+
// for a non-builtin base, lean toward flagging: missing CEI detections
|
|
271
|
+
// are the bug we are fixing here.
|
|
272
|
+
const baseName = this.simpleIdentifierName(callee.expression);
|
|
273
|
+
if (baseName) {
|
|
274
|
+
if (BUILTIN_BASE_IDENTIFIERS.has(baseName))
|
|
275
|
+
return false;
|
|
276
|
+
if (stateVars.has(baseName)) {
|
|
277
|
+
const cls = this.classifyBaseType(stateTypes.get(baseName));
|
|
278
|
+
if (cls === 'safe')
|
|
279
|
+
return false;
|
|
280
|
+
return true;
|
|
281
|
+
}
|
|
282
|
+
if (localVars.has(baseName)) {
|
|
283
|
+
const cls = this.classifyBaseType(localTypes.get(baseName));
|
|
284
|
+
if (cls === 'safe')
|
|
285
|
+
return false;
|
|
286
|
+
return true;
|
|
287
|
+
}
|
|
288
|
+
}
|
|
289
|
+
else {
|
|
290
|
+
// Inline cast pattern: `IFace(addr).method(...)` or `address(x).method(...)`.
|
|
291
|
+
// Recognize only when the cast resolves to a contract, interface, or
|
|
292
|
+
// address-like type — keep unknown casts conservative so they do not
|
|
293
|
+
// become broad false positives.
|
|
294
|
+
const baseExpr = callee.expression;
|
|
295
|
+
if (baseExpr?.type === 'FunctionCall' && Array.isArray(baseExpr.arguments) && baseExpr.arguments.length === 1) {
|
|
296
|
+
const cls = this.classifyCastCallee(baseExpr.expression);
|
|
297
|
+
if (cls === 'external')
|
|
298
|
+
return true;
|
|
299
|
+
}
|
|
300
|
+
}
|
|
301
|
+
}
|
|
302
|
+
return false;
|
|
303
|
+
}
|
|
304
|
+
classifyCastCallee(expr) {
|
|
305
|
+
if (!expr || typeof expr !== 'object')
|
|
306
|
+
return 'unknown';
|
|
307
|
+
if (expr.type === 'ElementaryTypeName') {
|
|
308
|
+
const name = String(expr.name || '').toLowerCase();
|
|
309
|
+
return name === 'address' ? 'external' : 'safe';
|
|
310
|
+
}
|
|
311
|
+
if (expr.type === 'UserDefinedTypeName') {
|
|
312
|
+
return this.classifyBaseType(expr);
|
|
313
|
+
}
|
|
314
|
+
if (expr.type === 'Identifier') {
|
|
315
|
+
const name = String(expr.name || '');
|
|
316
|
+
if (this.typeKinds.interfaces.has(name))
|
|
317
|
+
return 'external';
|
|
318
|
+
if (this.typeKinds.contracts.has(name))
|
|
319
|
+
return 'external';
|
|
320
|
+
if (this.typeKinds.libraries.has(name))
|
|
321
|
+
return 'safe';
|
|
322
|
+
if (this.typeKinds.structs.has(name))
|
|
323
|
+
return 'safe';
|
|
324
|
+
if (this.typeKinds.enums.has(name))
|
|
325
|
+
return 'safe';
|
|
326
|
+
if (name === 'address' || name === 'payable')
|
|
327
|
+
return 'external';
|
|
328
|
+
return 'unknown';
|
|
329
|
+
}
|
|
330
|
+
return 'unknown';
|
|
331
|
+
}
|
|
332
|
+
classifyBaseType(typeName) {
|
|
333
|
+
if (!typeName || typeof typeName !== 'object')
|
|
334
|
+
return 'unknown';
|
|
335
|
+
if (typeName.type === 'ElementaryTypeName') {
|
|
336
|
+
const name = String(typeName.name || '').toLowerCase();
|
|
337
|
+
return name === 'address' ? 'external' : 'safe';
|
|
338
|
+
}
|
|
339
|
+
if (typeName.type === 'UserDefinedTypeName') {
|
|
340
|
+
const namePath = String(typeName.namePath || '');
|
|
341
|
+
const head = namePath.split('.')[0];
|
|
342
|
+
if (this.typeKinds.interfaces.has(head))
|
|
343
|
+
return 'external';
|
|
344
|
+
if (this.typeKinds.contracts.has(head))
|
|
345
|
+
return 'external';
|
|
346
|
+
if (this.typeKinds.libraries.has(head))
|
|
347
|
+
return 'safe';
|
|
348
|
+
if (this.typeKinds.structs.has(head))
|
|
349
|
+
return 'safe';
|
|
350
|
+
if (this.typeKinds.enums.has(head))
|
|
351
|
+
return 'safe';
|
|
352
|
+
return 'unknown';
|
|
353
|
+
}
|
|
354
|
+
if (typeName.type === 'ArrayTypeName' || typeName.type === 'Mapping' || typeName.type === 'FunctionTypeName') {
|
|
355
|
+
return 'safe';
|
|
356
|
+
}
|
|
357
|
+
return 'unknown';
|
|
358
|
+
}
|
|
359
|
+
containsStateRead(node, stateVars, localVars) {
|
|
360
|
+
if (!node || typeof node !== 'object')
|
|
361
|
+
return false;
|
|
362
|
+
if (node.type === 'Identifier') {
|
|
363
|
+
const name = String(node.name || '');
|
|
364
|
+
if (BUILTIN_BASE_IDENTIFIERS.has(name))
|
|
365
|
+
return false;
|
|
366
|
+
if (localVars.has(name))
|
|
367
|
+
return false;
|
|
368
|
+
if (stateVars.has(name))
|
|
369
|
+
return true;
|
|
370
|
+
return false;
|
|
371
|
+
}
|
|
372
|
+
if (node.type === 'IndexAccess') {
|
|
373
|
+
if (this.containsStateRead(node.base, stateVars, localVars))
|
|
374
|
+
return true;
|
|
375
|
+
if (this.containsStateRead(node.index, stateVars, localVars))
|
|
376
|
+
return true;
|
|
377
|
+
return false;
|
|
378
|
+
}
|
|
379
|
+
if (node.type === 'MemberAccess') {
|
|
380
|
+
// Recurse into base only; member name itself isn't a free identifier.
|
|
381
|
+
return this.containsStateRead(node.expression, stateVars, localVars);
|
|
382
|
+
}
|
|
383
|
+
for (const child of this.childNodes(node)) {
|
|
384
|
+
if (this.containsStateRead(child, stateVars, localVars))
|
|
385
|
+
return true;
|
|
386
|
+
}
|
|
387
|
+
return false;
|
|
388
|
+
}
|
|
389
|
+
refersToStateStorage(expr, stateVars, localVars) {
|
|
390
|
+
if (!expr || typeof expr !== 'object')
|
|
391
|
+
return false;
|
|
392
|
+
if (expr.type === 'Identifier') {
|
|
393
|
+
const name = String(expr.name || '');
|
|
394
|
+
if (localVars.has(name))
|
|
395
|
+
return false;
|
|
396
|
+
return stateVars.has(name);
|
|
397
|
+
}
|
|
398
|
+
if (expr.type === 'IndexAccess')
|
|
399
|
+
return this.refersToStateStorage(expr.base, stateVars, localVars);
|
|
400
|
+
if (expr.type === 'MemberAccess')
|
|
401
|
+
return this.refersToStateStorage(expr.expression, stateVars, localVars);
|
|
402
|
+
if (expr.type === 'TupleExpression') {
|
|
403
|
+
for (const c of expr.components || []) {
|
|
404
|
+
if (this.refersToStateStorage(c, stateVars, localVars))
|
|
405
|
+
return true;
|
|
406
|
+
}
|
|
407
|
+
}
|
|
408
|
+
return false;
|
|
409
|
+
}
|
|
410
|
+
blockEndsWithRevertOrThrow(block) {
|
|
411
|
+
if (!block || typeof block !== 'object')
|
|
412
|
+
return false;
|
|
413
|
+
const stmts = block.type === 'Block' ? (block.statements || []) : [block];
|
|
414
|
+
for (const s of stmts) {
|
|
415
|
+
if (this.statementIsRevertOrThrow(s))
|
|
416
|
+
return true;
|
|
417
|
+
}
|
|
418
|
+
return false;
|
|
419
|
+
}
|
|
420
|
+
statementIsRevertOrThrow(stmt) {
|
|
421
|
+
if (!stmt || typeof stmt !== 'object')
|
|
422
|
+
return false;
|
|
423
|
+
if (stmt.type === 'RevertStatement')
|
|
424
|
+
return true;
|
|
425
|
+
if (stmt.type === 'ThrowStatement')
|
|
426
|
+
return true;
|
|
427
|
+
if (stmt.type === 'ExpressionStatement') {
|
|
428
|
+
const expr = stmt.expression;
|
|
429
|
+
if (expr?.type === 'FunctionCall') {
|
|
430
|
+
const name = this.getDirectCallName(expr.expression);
|
|
431
|
+
if (name === 'revert')
|
|
432
|
+
return true;
|
|
433
|
+
}
|
|
434
|
+
}
|
|
435
|
+
return false;
|
|
436
|
+
}
|
|
437
|
+
summarizeInternalFunctions(contract, stateVars, stateTypes) {
|
|
438
|
+
const summaries = new Map();
|
|
439
|
+
for (const sub of contract.subNodes || []) {
|
|
440
|
+
if (sub?.type !== 'FunctionDefinition')
|
|
441
|
+
continue;
|
|
442
|
+
if (!sub.body)
|
|
443
|
+
continue;
|
|
444
|
+
if (sub.isConstructor)
|
|
445
|
+
continue;
|
|
446
|
+
const name = sub.name;
|
|
447
|
+
if (!name)
|
|
448
|
+
continue;
|
|
449
|
+
const localVars = this.collectLocals(sub);
|
|
450
|
+
const localTypes = this.collectLocalTypes(sub);
|
|
451
|
+
const performsInteraction = this.bodyContainsExternalCall(sub.body, stateVars, stateTypes, localVars, localTypes);
|
|
452
|
+
summaries.set(name, { name, performsInteraction });
|
|
453
|
+
}
|
|
454
|
+
return summaries;
|
|
455
|
+
}
|
|
456
|
+
bodyContainsExternalCall(node, stateVars, stateTypes, localVars, localTypes) {
|
|
457
|
+
if (!node || typeof node !== 'object')
|
|
458
|
+
return false;
|
|
459
|
+
if (node.type === 'FunctionCall' && this.isExternalCallExpression(node, stateVars, stateTypes, localVars, localTypes)) {
|
|
460
|
+
return true;
|
|
461
|
+
}
|
|
462
|
+
for (const child of this.childNodes(node)) {
|
|
463
|
+
if (this.bodyContainsExternalCall(child, stateVars, stateTypes, localVars, localTypes))
|
|
464
|
+
return true;
|
|
465
|
+
}
|
|
466
|
+
return false;
|
|
467
|
+
}
|
|
468
|
+
// Recognize functions that are protected by a reentrancy guard so the
|
|
469
|
+
// Euler-style effect-after-interaction diagnostic does not flag them as
|
|
470
|
+
// false positives. Only suppresses the EAI sub-pattern; check-after-effect
|
|
471
|
+
// remains a structural ordering issue worth reporting even under a guard.
|
|
472
|
+
functionHasReentrancyGuard(fn) {
|
|
473
|
+
const modifiers = fn?.modifiers || [];
|
|
474
|
+
for (const mod of modifiers) {
|
|
475
|
+
const name = String(mod?.name || '');
|
|
476
|
+
if (this.isReentrancyGuardModifierName(name))
|
|
477
|
+
return true;
|
|
478
|
+
}
|
|
479
|
+
return this.bodyHasInlineMutexPattern(fn?.body);
|
|
480
|
+
}
|
|
481
|
+
isReentrancyGuardModifierName(name) {
|
|
482
|
+
if (!name)
|
|
483
|
+
return false;
|
|
484
|
+
const exact = new Set([
|
|
485
|
+
'nonReentrant', '_nonReentrant', 'noReentrant',
|
|
486
|
+
'lock', 'locked', 'mutex',
|
|
487
|
+
]);
|
|
488
|
+
if (exact.has(name))
|
|
489
|
+
return true;
|
|
490
|
+
// Narrow substring match limited to clear guard terms — avoids false
|
|
491
|
+
// suppression on unrelated identifiers while catching custom names like
|
|
492
|
+
// `noReentrancy`, `withMutex`, etc.
|
|
493
|
+
const lower = name.toLowerCase();
|
|
494
|
+
if (lower.includes('reentran'))
|
|
495
|
+
return true;
|
|
496
|
+
if (lower.includes('mutex'))
|
|
497
|
+
return true;
|
|
498
|
+
return false;
|
|
499
|
+
}
|
|
500
|
+
// Detects a simple inline mutex: `require(!<g>, ...)` somewhere in the
|
|
501
|
+
// top-level body together with both `<g> = true;` and `<g> = false;` writes
|
|
502
|
+
// to the same identifier. Intentionally conservative — does not try to
|
|
503
|
+
// prove that the guard is set before / cleared after the external call.
|
|
504
|
+
bodyHasInlineMutexPattern(body) {
|
|
505
|
+
if (!body || body.type !== 'Block')
|
|
506
|
+
return false;
|
|
507
|
+
const stmts = body.statements || [];
|
|
508
|
+
const guardNames = new Set();
|
|
509
|
+
for (const stmt of stmts) {
|
|
510
|
+
if (stmt?.type !== 'ExpressionStatement')
|
|
511
|
+
continue;
|
|
512
|
+
const expr = stmt.expression;
|
|
513
|
+
if (expr?.type !== 'FunctionCall')
|
|
514
|
+
continue;
|
|
515
|
+
if (this.getDirectCallName(expr.expression) !== 'require')
|
|
516
|
+
continue;
|
|
517
|
+
const arg0 = expr.arguments?.[0];
|
|
518
|
+
if (arg0?.type !== 'UnaryOperation' || arg0.operator !== '!')
|
|
519
|
+
continue;
|
|
520
|
+
const guardName = this.simpleIdentifierName(arg0.subExpression);
|
|
521
|
+
if (guardName)
|
|
522
|
+
guardNames.add(guardName);
|
|
523
|
+
}
|
|
524
|
+
if (guardNames.size === 0)
|
|
525
|
+
return false;
|
|
526
|
+
for (const guardName of guardNames) {
|
|
527
|
+
let setTrue = false;
|
|
528
|
+
let setFalse = false;
|
|
529
|
+
for (const s of stmts) {
|
|
530
|
+
if (s?.type !== 'ExpressionStatement')
|
|
531
|
+
continue;
|
|
532
|
+
const e = s.expression;
|
|
533
|
+
if (e?.type !== 'BinaryOperation' || e.operator !== '=')
|
|
534
|
+
continue;
|
|
535
|
+
if (this.simpleIdentifierName(e.left) !== guardName)
|
|
536
|
+
continue;
|
|
537
|
+
const lit = e.right;
|
|
538
|
+
if (lit?.type === 'BooleanLiteral') {
|
|
539
|
+
if (lit.value === true)
|
|
540
|
+
setTrue = true;
|
|
541
|
+
else if (lit.value === false)
|
|
542
|
+
setFalse = true;
|
|
543
|
+
}
|
|
544
|
+
}
|
|
545
|
+
if (setTrue && setFalse)
|
|
546
|
+
return true;
|
|
547
|
+
}
|
|
548
|
+
return false;
|
|
549
|
+
}
|
|
550
|
+
containsStateReadInCheck(node, ctx) {
|
|
551
|
+
if (!node || typeof node !== 'object')
|
|
552
|
+
return false;
|
|
553
|
+
if (node.type === 'FunctionCall') {
|
|
554
|
+
if (this.isExternalCallExpression(node, ctx.stateVars, ctx.stateTypes, ctx.localVars, ctx.localTypes)) {
|
|
555
|
+
for (const arg of node.arguments || []) {
|
|
556
|
+
if (this.containsStateReadInCheck(arg, ctx))
|
|
557
|
+
return true;
|
|
558
|
+
}
|
|
559
|
+
return false;
|
|
560
|
+
}
|
|
561
|
+
}
|
|
562
|
+
return this.containsStateRead(node, ctx.stateVars, ctx.localVars);
|
|
563
|
+
}
|
|
564
|
+
collectStateVariables(contract, contractsByName, visited = new Set()) {
|
|
565
|
+
const set = new Set();
|
|
566
|
+
const contractName = String(contract?.name || '');
|
|
567
|
+
if (contractName) {
|
|
568
|
+
if (visited.has(contractName))
|
|
569
|
+
return set;
|
|
570
|
+
visited.add(contractName);
|
|
571
|
+
}
|
|
572
|
+
for (const sub of contract.subNodes || []) {
|
|
573
|
+
if (sub?.type !== 'StateVariableDeclaration')
|
|
574
|
+
continue;
|
|
575
|
+
for (const v of sub.variables || []) {
|
|
576
|
+
if (v?.name)
|
|
577
|
+
set.add(v.name);
|
|
578
|
+
}
|
|
579
|
+
}
|
|
580
|
+
for (const base of contract.baseContracts || []) {
|
|
581
|
+
const baseName = this.baseContractName(base);
|
|
582
|
+
if (!baseName)
|
|
583
|
+
continue;
|
|
584
|
+
const baseContract = contractsByName.get(baseName);
|
|
585
|
+
if (!baseContract)
|
|
586
|
+
continue;
|
|
587
|
+
for (const name of this.collectStateVariables(baseContract, contractsByName, visited)) {
|
|
588
|
+
set.add(name);
|
|
589
|
+
}
|
|
590
|
+
}
|
|
591
|
+
return set;
|
|
592
|
+
}
|
|
593
|
+
collectStateVarTypes(contract, contractsByName, visited = new Set()) {
|
|
594
|
+
const map = new Map();
|
|
595
|
+
const contractName = String(contract?.name || '');
|
|
596
|
+
if (contractName) {
|
|
597
|
+
if (visited.has(contractName))
|
|
598
|
+
return map;
|
|
599
|
+
visited.add(contractName);
|
|
600
|
+
}
|
|
601
|
+
for (const sub of contract.subNodes || []) {
|
|
602
|
+
if (sub?.type !== 'StateVariableDeclaration')
|
|
603
|
+
continue;
|
|
604
|
+
for (const v of sub.variables || []) {
|
|
605
|
+
if (v?.name)
|
|
606
|
+
map.set(v.name, v.typeName);
|
|
607
|
+
}
|
|
608
|
+
}
|
|
609
|
+
for (const base of contract.baseContracts || []) {
|
|
610
|
+
const baseName = this.baseContractName(base);
|
|
611
|
+
if (!baseName)
|
|
612
|
+
continue;
|
|
613
|
+
const baseContract = contractsByName.get(baseName);
|
|
614
|
+
if (!baseContract)
|
|
615
|
+
continue;
|
|
616
|
+
for (const [name, type] of this.collectStateVarTypes(baseContract, contractsByName, visited)) {
|
|
617
|
+
if (!map.has(name))
|
|
618
|
+
map.set(name, type);
|
|
619
|
+
}
|
|
620
|
+
}
|
|
621
|
+
return map;
|
|
622
|
+
}
|
|
623
|
+
collectContractsByName(ast) {
|
|
624
|
+
const map = new Map();
|
|
625
|
+
for (const child of ast.children || []) {
|
|
626
|
+
if (child?.type === 'ContractDefinition' && child.name) {
|
|
627
|
+
map.set(child.name, child);
|
|
628
|
+
}
|
|
629
|
+
}
|
|
630
|
+
return map;
|
|
631
|
+
}
|
|
632
|
+
baseContractName(base) {
|
|
633
|
+
const namePath = base?.baseName?.namePath;
|
|
634
|
+
if (namePath)
|
|
635
|
+
return String(namePath).split('.').pop() || '';
|
|
636
|
+
const name = base?.baseName?.name;
|
|
637
|
+
if (name)
|
|
638
|
+
return String(name).split('.').pop() || '';
|
|
639
|
+
return '';
|
|
640
|
+
}
|
|
641
|
+
collectLocals(fn) {
|
|
642
|
+
const set = new Set();
|
|
643
|
+
for (const p of fn.parameters || []) {
|
|
644
|
+
if (p?.name)
|
|
645
|
+
set.add(p.name);
|
|
646
|
+
}
|
|
647
|
+
for (const p of fn.returnParameters || []) {
|
|
648
|
+
if (p?.name)
|
|
649
|
+
set.add(p.name);
|
|
650
|
+
}
|
|
651
|
+
this.harvestLocalsRecursive(fn.body, set);
|
|
652
|
+
return set;
|
|
653
|
+
}
|
|
654
|
+
collectLocalTypes(fn) {
|
|
655
|
+
const map = new Map();
|
|
656
|
+
for (const p of fn.parameters || []) {
|
|
657
|
+
if (p?.name)
|
|
658
|
+
map.set(p.name, p.typeName);
|
|
659
|
+
}
|
|
660
|
+
for (const p of fn.returnParameters || []) {
|
|
661
|
+
if (p?.name)
|
|
662
|
+
map.set(p.name, p.typeName);
|
|
663
|
+
}
|
|
664
|
+
this.harvestLocalTypesRecursive(fn.body, map);
|
|
665
|
+
return map;
|
|
666
|
+
}
|
|
667
|
+
harvestLocalsRecursive(node, set) {
|
|
668
|
+
if (!node || typeof node !== 'object')
|
|
669
|
+
return;
|
|
670
|
+
if (node.type === 'VariableDeclarationStatement') {
|
|
671
|
+
for (const v of node.variables || []) {
|
|
672
|
+
if (v?.name)
|
|
673
|
+
set.add(v.name);
|
|
674
|
+
}
|
|
675
|
+
}
|
|
676
|
+
for (const child of this.childNodes(node)) {
|
|
677
|
+
this.harvestLocalsRecursive(child, set);
|
|
678
|
+
}
|
|
679
|
+
}
|
|
680
|
+
harvestLocalTypesRecursive(node, map) {
|
|
681
|
+
if (!node || typeof node !== 'object')
|
|
682
|
+
return;
|
|
683
|
+
if (node.type === 'VariableDeclarationStatement') {
|
|
684
|
+
for (const v of node.variables || []) {
|
|
685
|
+
if (v?.name)
|
|
686
|
+
map.set(v.name, v.typeName);
|
|
687
|
+
}
|
|
688
|
+
}
|
|
689
|
+
for (const child of this.childNodes(node)) {
|
|
690
|
+
this.harvestLocalTypesRecursive(child, map);
|
|
691
|
+
}
|
|
692
|
+
}
|
|
693
|
+
collectTypeKinds(ast) {
|
|
694
|
+
const interfaces = new Set();
|
|
695
|
+
const contracts = new Set();
|
|
696
|
+
const libraries = new Set();
|
|
697
|
+
const structs = new Set();
|
|
698
|
+
const enums = new Set();
|
|
699
|
+
const visit = (children) => {
|
|
700
|
+
for (const node of children || []) {
|
|
701
|
+
if (!node || typeof node !== 'object')
|
|
702
|
+
continue;
|
|
703
|
+
if (node.type === 'ContractDefinition' && node.name) {
|
|
704
|
+
if (node.kind === 'interface')
|
|
705
|
+
interfaces.add(node.name);
|
|
706
|
+
else if (node.kind === 'library')
|
|
707
|
+
libraries.add(node.name);
|
|
708
|
+
else if (node.kind === 'contract')
|
|
709
|
+
contracts.add(node.name);
|
|
710
|
+
if (Array.isArray(node.subNodes))
|
|
711
|
+
visit(node.subNodes);
|
|
712
|
+
}
|
|
713
|
+
else if (node.type === 'StructDefinition' && node.name) {
|
|
714
|
+
structs.add(node.name);
|
|
715
|
+
}
|
|
716
|
+
else if (node.type === 'EnumDefinition' && node.name) {
|
|
717
|
+
enums.add(node.name);
|
|
718
|
+
}
|
|
719
|
+
}
|
|
720
|
+
};
|
|
721
|
+
visit(ast.children);
|
|
722
|
+
return { interfaces, contracts, libraries, structs, enums };
|
|
723
|
+
}
|
|
724
|
+
getDirectCallName(expr) {
|
|
725
|
+
if (!expr || typeof expr !== 'object')
|
|
726
|
+
return '';
|
|
727
|
+
if (expr.type === 'Identifier')
|
|
728
|
+
return String(expr.name || '');
|
|
729
|
+
return '';
|
|
730
|
+
}
|
|
731
|
+
simpleIdentifierName(expr) {
|
|
732
|
+
if (!expr || typeof expr !== 'object')
|
|
733
|
+
return '';
|
|
734
|
+
if (expr.type === 'Identifier')
|
|
735
|
+
return String(expr.name || '');
|
|
736
|
+
return '';
|
|
737
|
+
}
|
|
738
|
+
locOf(node) {
|
|
739
|
+
const { line, column } = (0, ast_1.assertLoc)(node);
|
|
740
|
+
return { line, column };
|
|
741
|
+
}
|
|
742
|
+
childNodes(node) {
|
|
743
|
+
const out = [];
|
|
744
|
+
for (const [key, value] of Object.entries(node)) {
|
|
745
|
+
if (key === 'loc' || key === 'range' || key === 'typeName')
|
|
746
|
+
continue;
|
|
747
|
+
if (Array.isArray(value)) {
|
|
748
|
+
for (const item of value) {
|
|
749
|
+
if (item && typeof item === 'object')
|
|
750
|
+
out.push(item);
|
|
751
|
+
}
|
|
752
|
+
}
|
|
753
|
+
else if (value && typeof value === 'object') {
|
|
754
|
+
out.push(value);
|
|
755
|
+
}
|
|
756
|
+
}
|
|
757
|
+
return out;
|
|
758
|
+
}
|
|
759
|
+
makeFinding(contract, functionName, loc, sub, message) {
|
|
760
|
+
const contractName = contract?.name || '';
|
|
761
|
+
const pattern = sub === 'effect-after-interaction' ? PATTERN_EAI : PATTERN_CAE;
|
|
762
|
+
return {
|
|
763
|
+
file: this.currentFile,
|
|
764
|
+
contract: contractName,
|
|
765
|
+
'function': functionName,
|
|
766
|
+
line: loc.line,
|
|
767
|
+
column: loc.column,
|
|
768
|
+
pattern,
|
|
769
|
+
confidence: 'high',
|
|
770
|
+
ruleId: RULE_ID,
|
|
771
|
+
severity: 'warning',
|
|
772
|
+
message,
|
|
773
|
+
contractName,
|
|
774
|
+
functionName,
|
|
775
|
+
sourceLocation: { line: loc.line, column: loc.column },
|
|
776
|
+
trace: sub,
|
|
777
|
+
findingId: '',
|
|
778
|
+
contractHash: '',
|
|
779
|
+
};
|
|
780
|
+
}
|
|
781
|
+
}
|
|
782
|
+
exports.CheckEffectsInteractionsDetector = CheckEffectsInteractionsDetector;
|
|
783
|
+
//# sourceMappingURL=check-effects-interactions.js.map
|