oyente icon indicating copy to clipboard operation
oyente copied to clipboard

the oyente can not find issue

Open zxhubo opened this issue 6 years ago • 2 comments

I have been write a test contract,the code is

pragma solidity ^0.4.23;

contract Test{

    function t() returns (uint8){
        
        uint8 a = 255;
        uint8 b = 1;
        return a+b;
        
    }

}

then ,I installed oyente by docker,and run command :python oyente.py -s Test.sol. but the result is that this is no issue ; root@c5571baca9e7:/oyente/oyente# python oyente.py -s Test.sol WARNING:root:You are using evm version 1.8.2. The supported version is 1.7.3 WARNING:root:You are using solc version 0.4.21, The latest supported version is 0.4.19 INFO:root:contract Test.sol:Test: INFO:symExec: ============ Results =========== INFO:symExec: EVM Code Coverage: 98.7% INFO:symExec: Integer Underflow: False INFO:symExec: Integer Overflow: False INFO:symExec: Parity Multisig Bug 2: False INFO:symExec: Callstack Depth Attack Vulnerability: False INFO:symExec: Transaction-Ordering Dependence (TOD): False INFO:symExec: Timestamp Dependency: False INFO:symExec: Re-Entrancy Vulnerability: False INFO:symExec: ====== Analysis Completed ======

but this test contract have a overflow issue, why the oyent cann't find this issue.

zxhubo avatar Aug 22 '18 06:08 zxhubo

The warning is transparent as to why: WARNING:root:You are using solc version 0.4.21, The latest supported version is 0.4.19

The version of Solidity you're trying to analyze is not supported, thus appropriate checks (such as detecting the overflow) are not present.

0xHaas avatar Aug 25 '18 04:08 0xHaas

because both var a and b are real ,so no integer overflow will occur.

JsHuang avatar Oct 17 '18 06:10 JsHuang