Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hash of pack encoded dynamic values #39

Open
luisgj opened this issue Oct 15, 2024 · 0 comments
Open

Hash of pack encoded dynamic values #39

luisgj opened this issue Oct 15, 2024 · 0 comments

Comments

@luisgj
Copy link
Contributor

luisgj commented Oct 15, 2024

OZ Report:

To satisfy EEA EthTrust Security Level [S], code MUST NOT use abi.encodePacked with consecutive variable length arguments.

The elements of each variable-length argument to abi.encodePacked are packed in order prior to hashing. Hash collisions are possible by rearranging the elements within consecutive, variable length arguments while maintaining that their concatenated order is the same. The following instances were identified:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant