RustFund

First Flight #36
Beginner FriendlyRust
100 EXP
View results
Submission Details
Severity: high
Invalid

Typo in dealine_set field name

Summary

The struct Fund has a field named dealine_set, which appears to be a misspelling of deadline_set. This can cause unexpected behavior when trying to access or modify this field.

Vulnerability Details

  • The field is defined as pub dealine_set: bool, in the Fund struct.

  • In set_deadline, the code checks if fund.dealine_set {, which refers to the incorrect field name.

  • This means that deadline_set is never actually modified or used correctly.

Impact

  • The deadline-setting functionality will not work as intended.

  • The contract might allow multiple deadline changes due to the incorrect field reference.

Recommendations

  • Rename dealine_set to deadline_set in the Fund struct.

  • Update all references to dealine_set throughout the program.

Updates

Appeal created

bube Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

[Invalid] Wrong naming of `deadline_set`

This is strong informational finding, there is no impact for the protocol. The variable is the same on all places.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.