neo-devpack-solidity 0.22.0

Production-focused Solidity-to-NeoVM compilation system
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

//! Security Analysis Module
//!
//! Detects potential security vulnerabilities in Solidity code.

use crate::error::{ErrorCode, FixSuggestion, SourceLocation};

/// Security issue severity
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum SecuritySeverity {
    Critical,
    High,
    Medium,
    Low,
    Info,
}

/// A detected security issue
#[derive(Debug, Clone)]
pub struct SecurityIssue {
    pub severity: SecuritySeverity,
    pub code: ErrorCode,
    pub message: String,
    pub location: SourceLocation,
    pub suggestion: Option<FixSuggestion>,
}

impl SecurityIssue {
    pub fn critical(code: ErrorCode, msg: impl Into<String>, loc: SourceLocation) -> Self {
        Self {
            severity: SecuritySeverity::Critical,
            code,
            message: msg.into(),
            location: loc,
            suggestion: None,
        }
    }

    pub fn high(code: ErrorCode, msg: impl Into<String>, loc: SourceLocation) -> Self {
        Self {
            severity: SecuritySeverity::High,
            code,
            message: msg.into(),
            location: loc,
            suggestion: None,
        }
    }

    pub fn with_suggestion(mut self, s: FixSuggestion) -> Self {
        self.suggestion = Some(s);
        self
    }
}

/// Security checker
#[derive(Default)]
pub struct SecurityChecker {
    issues: Vec<SecurityIssue>,
}

impl SecurityChecker {
    pub fn new() -> Self {
        Self::default()
    }

    pub fn add_issue(&mut self, issue: SecurityIssue) {
        self.issues.push(issue);
    }

    pub fn issues(&self) -> &[SecurityIssue] {
        &self.issues
    }

    pub fn has_critical(&self) -> bool {
        self.issues
            .iter()
            .any(|i| i.severity == SecuritySeverity::Critical)
    }

    pub fn has_high(&self) -> bool {
        self.issues
            .iter()
            .any(|i| i.severity == SecuritySeverity::High)
    }

    pub fn count_by_severity(&self, sev: SecuritySeverity) -> usize {
        self.issues.iter().filter(|i| i.severity == sev).count()
    }

    pub fn clear(&mut self) {
        self.issues.clear();
    }
}