Skip to content

chore: Push a bug list #8186

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Rumata888 merged 2 commits into from
Apr 23, 2025
Merged

chore: Push a bug list #8186

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9e3b813
Push a bug list
Rumata888 Apr 23, 2025
b2319fd
fix
Rumata888 Apr 23, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions security/entomotaxy/Security Bug List.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
# Collection of bugs found in Noir compiler and standard library

This list is a collection of bugs. Its goal is to help developers, auditors and security researchers to find and fix bugs in the Noir compiler and standard library.

## List of bugs

| NoirVD-ID | Component | Short description | Type | Potential Impact | Mechanism of finding | Found with a tool? | Found internally (yes or no) | Found by | Link to issue | Link to fix | Link to description |
|-----------|-----------|-------------------|------|------------------|----------------------|-------------------|------------------------------|-----------|--------------|------------|---------------------|
| NoirVD-001 | U128 | decode_ascii function didn't validate input bytes | Soundness | Overflow of 64-bit limbs | Manual code review | No | Yes | @Rumata888 | |https://github.com/noir-lang/noir/pull/5024 | [Description](decriptions/noir_stdlib.md) |

Check warning on line 9 in security/entomotaxy/Security Bug List.md

View workflow job for this annotation

GitHub Actions / Code 

Unknown word (Rumata)
| NoirVD-002 | U128 | unconstrained_div function had infinite loop on division by zero | Completeness | Denial of service | Manual code review | No | Yes | @Rumata888 | |https://github.com/noir-lang/noir/pull/5024 | [Description](decriptions/noir_stdlib.md) |

Check warning on line 10 in security/entomotaxy/Security Bug List.md

View workflow job for this annotation

GitHub Actions / Code 

Unknown word (Rumata)
| NoirVD-003 | U128 | unconstrained_div function failed for large inputs | Completeness | Assertion failure for legitimate inputs | Manual code review | No | Yes | @Rumata888 | |https://github.com/noir-lang/noir/pull/5024 | [Description](decriptions/noir_stdlib.md) |

Check warning on line 11 in security/entomotaxy/Security Bug List.md

View workflow job for this annotation

GitHub Actions / Code 

Unknown word (Rumata)
| NoirVD-004 | U128 | wrapping_mul function had a bug in high limb calculation | Soundness | Incorrect multiplication results | Manual code review | No | Yes | @Rumata888 | |https://github.com/noir-lang/noir/pull/5024 | [Description](decriptions/noir_stdlib.md) |

Check warning on line 12 in security/entomotaxy/Security Bug List.md

View workflow job for this annotation

GitHub Actions / Code 

Unknown word (Rumata)
0 security/insectarium/noir_stdlib.md → ...ity/entomotaxy/decriptions/noir_stdlib.md
View file
Open in desktop
File renamed without changes.
Loading