Description:
Location in Code: The start
function.
The calculation let bidding_end = time + bidding_duration;
does not check for overflows.
Extremely large values could cause an overflow in the timestamp.
Impact:
The auction end time may be incorrect, leading to unexpected behavior.
Proof of Code:
Recommendation:
Add checks to ensure bidding_duration
is within reasonable limits.
Use safe math operations that handle overflows and underflows.
**Corrected Code: **
Define MAX_BIDDING_DURATION
as a reasonable maximum duration.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.