Skip to content

Fix offset in comments #624

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 16, 2021
Merged

Fix offset in comments #624

merged 1 commit into from
Aug 16, 2021

Conversation

k1rill-fedoseev
Copy link
Member

@k1rill-fedoseev k1rill-fedoseev commented Aug 15, 2021

The function parseMessage is preceded by a comment about the offsets of the different parts within the message. It contains:
https://github.com/poanetwork/tokenbridge-contracts/blob/b3511bf0987bbfef661e28dd1a6fbe1735f90ac0/contracts/libraries/Message.sol#L18
However the correct offset is 116. The code implements it correctly.

@k1rill-fedoseev k1rill-fedoseev added the audit Items related to the security audits label Aug 15, 2021
@k1rill-fedoseev k1rill-fedoseev self-assigned this Aug 15, 2021
@akolotov akolotov added the team-august-2021 Related to items found by ChainSecurity in the audit held in August of 2021 label Aug 16, 2021
@akolotov akolotov merged commit f1deecd into develop Aug 16, 2021
@akolotov akolotov deleted the audit/august2021/5.9 branch August 16, 2021 19:16
akolotov added a commit that referenced this pull request Sep 6, 2021
This update for the `master` branch contains the changes made to address findings discovered during a security audit:
 * [Fix] Stricter preconditions for payInterest (#623)
 * [Fix] Fix offset in comments (#624)
 * [Fix] Use fixed lower call gas limit (#627)
 * [Fix] Separate XDaiForeignBridge contract with compound and GSN support (#626)
 * [Fix] Update GSN interface (#628)
 * [Fix] Block ERC20 selectors in AMB requests (#630)
 * [Other] Bump package and contracts interfaces version prior to 6.0.0 (#629)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
audit Items related to the security audits team-august-2021 Related to items found by ChainSecurity in the audit held in August of 2021
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants