Avoid potential overflow in num_words

ethereum / evmone

Fast Ethereum Virtual Machine implementation

Apache License 2.0

865 stars 287 forks source link

Open yperbasis opened 5 months ago

chfast commented 5 months ago

Does this fix practical issues or just static analysis warnings?

yperbasis commented 5 months ago

Does this fix practical issues or just static analysis warnings?

It fixes a potential vulnerability in the cost of precomplies (e.g. sha256_analyze), albeit those are only used for tests at the moment.