Submission Details
Severity:
Check can be undone
Summary
Santa can change checks results after they are supposed to be final
Vulnerability Details
Santa can call checkTwice and checkList after check results already added
Impact
Decision that is considered final may be changed.
Protocol may be set inconsistent state where s_theListCheckedOnce[person] and s_theListCheckedTwice[person] doesn't match
Tools Used
Recommendations
Consider to revert checkTwice and checkList for user after checkTwice called for him
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.