mirror of https://github.com/crytic/slither
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
53 lines
1.3 KiB
53 lines
1.3 KiB
4 years ago
|
contract Bug{
|
||
|
uint totalSupply;
|
||
|
uint price;
|
||
|
address owner;
|
||
|
address operator;
|
||
|
address addr = 0x123F681646d4A755815f9CB19e1aCc8565A0c2AC;
|
||
|
event Supply(uint totalSupply);
|
||
|
event Owner(address owner);
|
||
|
|
||
|
modifier onlyAdmin {
|
||
|
require(msg.sender != owner);
|
||
|
_;
|
||
|
}
|
||
|
|
||
|
function bad0() onlyAdmin external {
|
||
|
owner = msg.sender; // Tainting
|
||
|
}
|
||
|
|
||
|
function bad1(address newOwner) onlyAdmin external {
|
||
|
owner = newOwner; // Tainting
|
||
|
}
|
||
|
|
||
|
function bad2(address newOwner) onlyAdmin external {
|
||
|
require(newOwner != address(0));
|
||
|
owner = newOwner; // Tainting
|
||
|
}
|
||
|
|
||
|
function good0(uint a) external { // Not Protected breaks detector heuristic
|
||
|
totalSupply += a;
|
||
|
}
|
||
|
|
||
|
function good1() onlyAdmin external {
|
||
|
owner = msg.sender;
|
||
|
emit Owner(owner); // Event present breaks detector heuristic
|
||
|
}
|
||
|
|
||
|
function good2() onlyAdmin external {
|
||
|
owner = addr; // No tainting breaks detector heuristic
|
||
|
}
|
||
|
|
||
|
function good3(address newOwner) onlyAdmin private { // Private functions are ignored
|
||
|
owner = newOwner;
|
||
|
}
|
||
|
|
||
|
function good4(uint newPrice) onlyAdmin public { // non-address types are ignored
|
||
|
price = newPrice;
|
||
|
}
|
||
|
|
||
|
function good5(address newOwner) onlyAdmin external {
|
||
|
operator = newOwner; // operator is not used for access control in any modifier
|
||
|
}
|
||
|
}
|