code-423n4 / 2023-01-opensea-findings

0 stars 0 forks source link

SWC-109 Uninitialized Storage Pointer #48

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Lines of code

https://github.com/ProjectOpenSea/seaport/blob/5de7302bc773d9821ba4759e47fc981680911ea0/contracts/lib/ZoneInteraction.sol#L85

Vulnerability details

Impact

Uninitialized storage variables can point to unexpected storage locations. 

Proof of Concept

// Exploitable Vulnerability
MemoryPointer callData;

Tools Used

{github}

Recommended Mitigation Steps

// Initialize variable "callData" or set the storage attribute "memory".
MemoryPointer callData = "enter dummy or start value";
0age commented 1 year ago

contested; this is not a storage variable

c4-judge commented 1 year ago

HickupHH3 marked the issue as unsatisfactory: Insufficient quality