Tracking: imprecision of data dependencies on structures and arrays

[gakonst]

echo "pragma solidity ^0.5.3;

contract C {
    struct S { uint x; }

    function x() external pure returns (address) {
        S memory s;
        s.x = 1;
    }
}" > a.sol && slither a.sol

INFO:Detectors:
s in C.x() (a.sol#7) is a local variable never initialiazed
Reference: https://github.com/crytic/slither/wiki/Detector-Documentation#uninitialized-local-variables
INFO:Slither:a.sol analyzed (1 contracts with 38 detectors), 1 result(s) found

Returns that s is never initialized, when in fact we populate all of its fields in the following line Related to https://github.com/crytic/slither/issues/270 and https://github.com/crytic/slither/issues/112 probably

[montyly]

Hi @gakonst,

Thank you for reporting this FP.

I think it is related to the current limitation of our IR, and the way it handles structure/mapping. It should be fixed once our IR refactoring is done (https://github.com/crytic/slither/pull/346)

[jurajpiar]

Any advance on this?

[0xalpharush]

• [ ] https://github.com/crytic/slither/issues/1436
• [ ] https://github.com/crytic/slither/issues/884
• [ ] https://github.com/crytic/slither/issues/778