Submission Details
Severity:
compiler crash du to ASTTokens instantiation
Summary
Instantiating the asttokens.ASTTokens class causes the compiler to crash even for a valid contract.
Vulnerability Details
Suppose the following program:
#@version ^0.3.9
import test5 as T
b: public(uint256)
event Transfer:
random: indexed(uint256)
shi: uint256
def transfer():
log Transfer(T(self).b(), 10)
return
Compiling it causes the following error:
IndexError: list index out of range
The crash happens after executing the line:
https://github.com/vyperlang/vyper/blob/3b310d5292c4d1448e673d7b3adb223f9353260e/vyper/ast/annotation.py#L272
Impact
A valid program can't be compiled.
Tools Used
Manual testing.
Recommendations
We don't know what is the true cause of the crash and thus can't provide recommendation.
Updates
Lead Judging Commences
patrickalphac over 1 year ago
Submission Judgement Published Assigned finding tags:
compiler crash du to ASTTokens instantiation
Prize pool breakdown
Total prize
160,000 USDC
nSLOC
14,64411 USDC / LOC
150,000 USDC
10,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.