oasisprotocol / sapphire-paratime

Oasis Sapphire - the confidential EVM-compatible ParaTime for the Oasis Network
https://oasisprotocol.org/sapphire
Apache License 2.0
37 stars 27 forks source link

Feedback re: CBOR parsing, ensure all bytes are parsed #384

Open CedarMist opened 1 month ago

CedarMist commented 1 month ago

This was noted in an audit:

There are a few issues around CBOR parsing in Solidity: