aurora-is-near / aurora-engine

⚙️ Aurora Engine implements an Ethereum Virtual Machine (EVM) on the NEAR Protocol.
https://doc.aurora.dev/develop/compat/evm
330 stars 82 forks source link

Fix: Lack of Checks of Array Bounds #745

Closed lempire123 closed 1 year ago

lempire123 commented 1 year ago

Several instances of lack of array bounds checks were identified in the engine-standalone-storage and engine-standalone-tracing crates.

Recommendations

Implement checks to ensure values used when slicing arrays or referencing items from arrays are within array bound- aries.

Use safer alternatives, such as .get(n..m) or .get_mut(n..m)when accessing array elements.