Change description

TOD_MODULE
Nikhil Parasaram 5 years ago
parent ad805848b6
commit 5c45d7b04f
  1. 17
      mythril/analysis/modules/transaction_order_dependence.py

@ -1,5 +1,4 @@
"""This module contains the detection code for transaction order dependence """This module contains the detection code for transaction order dependence."""
calls."""
from mythril.analysis import solver from mythril.analysis import solver
from mythril.analysis.potential_issues import ( from mythril.analysis.potential_issues import (
@ -18,9 +17,7 @@ log = logging.getLogger(__name__)
DESCRIPTION = """ DESCRIPTION = """
Search for low level calls (e.g. call.value()) that forward all gas to the callee. Search for calls whose value depends on balance or storage.
Report a warning if the callee address can be set by the sender, otherwise create
an informational issue.
""" """
@ -112,12 +109,12 @@ class TransactionOrderDependence(DetectionModule):
solver.get_transaction_sequence(state, constraints) solver.get_transaction_sequence(state, constraints)
description_head = "Transaction Order dependence." description_head = (
"The value of the call is dependent on balance or storage write"
)
description_tail = ( description_tail = (
"The callee address of an external message call can be set by " "This can lead to race conditions. An attacker may be able to run a transaction after our transaction "
"the caller. Note that the callee can contain arbitrary code and may re-enter any function " "which can change the value of the call"
"in this contract. Review the business logic carefully to prevent averse effects on the "
"contract state."
) )
issue = PotentialIssue( issue = PotentialIssue(

Loading…
Cancel
Save