Skip to content

Conversation

director-of-chaos
Copy link
Contributor

@director-of-chaos director-of-chaos commented Jun 7, 2024

Related Issue

Checklist

Describe the changes you've made:

This PR adds a memory corruption vulnerability stemming from insufficient memory allocation when using YUL for memory allocation

Type of change

Select the appropriate checkbox:

  • Bug fix (fixing an issue with existing vulnerability data)
  • New feature (adding a new vulnerability or category)
  • Documentation update (improving existing information)

Copy link
Owner

@kadenzipfel kadenzipfel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm gonna come back to this, but initial thoughts are that it's highly specific to the provided example. It might even make the most sense to have the issue be generalized to just "Data Corruption" and can encompass various different ways this can occur including memory, storage, etc..

@@ -0,0 +1,175 @@
# Memory Corruption Due to Insufficient Memory Allocation

Memory corruption occurs when a program writes outside the bounds of allocated memory, potentially overwriting other important data.
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it would be more accurate to say, "Memory corruption can occur..." since it's not the only cause

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fair enough, lemme see if we can generalize this vuln type as suggested

…arity and giving a general description rather than the specific one to the ENS audit
@director-of-chaos director-of-chaos changed the title Add memory-corruption-due-to-insufficient-allocation.md Add data corruption due to insufficient memory allocation Jun 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Data Corruption Due to Insufficient Memory Allocation
2 participants