Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hyperledger-solang/solang
main @ 475e3c8
10
Fixes
0
CVEs
HIGH
Peak severity
44.4%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
src/emit/solana.rs: most-fixed (3 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: CPI native value transfers were historically forgeable due to incorrect handling of value parameters during instruction generation, leading to potential unauthorized state modifications.
Access Control: Fallback functions on Solana targets could execute and access or modify DataAccounts without executing the necessary magic number or selector validation checks.
Integer Overflow: ABI decoding offset counters using smaller width integers could overflow during pointer calculations, leading to severe out-of-bounds reads.