Submission Details
Severity:
GetActivePlayerIndex returns wrong response
[L-1] GetActivePlayerIndex returns wrong response
Description:
GetActivePlayerIndex method returns 0 idx for non existing entries in players array
Impact:
Low
Tools used:
foundry, manual
Proof of Concept:
function testThatGetActivePlayerResultsInWrongResponse() public playersEntered {
// in modifier players entered we add 4 players - 1,2,3,4
// we check for address that is not being used for sure for example 11111
address nonExistingAddressInRaffle = address(11111);
uint256 idx = puppyRaffle.getActivePlayerIndex(nonExistingAddressInRaffle);
// it returns 0 which is the index of the first player
// so in fact puppyRaffle.getActivePlayerIndex(address(11111)) is the same as puppyRaffle.getActivePlayerIndex(address(1))
assertNotEq(puppyRaffle.players(idx), nonExistingAddressInRaffle);
}
Updates
Lead Judging Commences
Hamiltonite over 1 year ago
Submission Judgement Published Assigned finding tags:
getActivePlayerIndex can say a player is both entered at slot 0 and inactive
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.