eth-sri / securify

[DEPRECATED] Security Scanner for Ethereum Smart Contracts
Apache License 2.0
216 stars 50 forks source link

Some computeResultValues implementations may not consider whether the input should be considered as signed or unsigned #96

Closed hiqua closed 2 years ago

hiqua commented 5 years ago

computeResultValues is a function implemented in every opcode, to allow the propagation of constants. In the yellow paper, some inputs are considered unsigned, while some others are considered signed, but Securify does not seem to do this distinction currently, hence probable mistakes in these propagated constants.