First Flight #13: Baba Marta

Summary

The producers array being extremely large will make the getAllProducers function to revert and the user will not be able to view the producers.

Vulnerability Details

The vulnerability is present in the MartenitsaToken::getAllProducers function where it returns the addresses of the producers in the producers array.
But when the size of producers array is very large then it will not return anything and will only revert.

Impact

The array being very large will make the function revert and return nothing.

Tools Used

Manual Review

Recommendations

Add the startIdx and endIdx parameter to return only the addresses in the given range, such that the difference between endIdx and startIdx is not large than the threshold limit when the function reverts.