https://gitlab.com/nomadic-labs/mi-cho-coq
Revision 936d209e8ce8cce3fd0b0e96692afc2c5730d094 authored by Raphaël Cauderlier on 06 February 2021, 22:41:46 UTC, committed by Raphaël Cauderlier on 07 February 2021, 17:37:21 UTC
There are 3 cases where Dexter emits more than an operation at once. In two of them, a potential attacker is called first. If this attacker can produce DFS calls it may be able to access Dextex before the FA1.2 is updated so some invariants might be broken. We haven't managed to use DFS calls to attack Dexter but always calling uncontrolled contracts last in the operation list is always safer.
1 parent 55e0921
- HEAD
- refs/heads/51-verify-dexter-2-dexter-fa1-2lqt-dexter-1-5
- refs/heads/Julien@adding_contracts
- refs/heads/arvid@ci-build-refactor-cache
- refs/heads/arvid@ci-rethinking
- refs/heads/arvid@cpmm-verification
- refs/heads/arvid@cpmm2-verification
- refs/heads/arvid@dexter-lemmas-and-refactorings
- refs/heads/arvid@dexter-verification-parsing-test
- refs/heads/arvid@dexter-verification-stringfix
- refs/heads/arvid@dexter-verification-updates-20200928-coq8.08
- refs/heads/arvid@dexter_fa12lqt-verification__addLiquidity
- refs/heads/arvid@dexter_fa12lqt-verification__removeLiquidity
- refs/heads/arvid@fragment_typer_and_ott_typing
- refs/heads/arvid@guillaume-claret@dexter_fa12lqt-verification
- refs/heads/arvid@guillaume-claret@dexter_fa12lqt-verification-bis
- refs/heads/arvid@opaque-tez-experiments
- refs/heads/arvid@rafoo@simplify-eval_precond-rebased
- refs/heads/arvid@re-organize-contracts_coq
- refs/heads/backport-opam-package-changes-from-upstream
- refs/heads/bb@dexter-verification
- refs/heads/chain-modelisation-guestbook
- refs/heads/colin-dexter_fa12lqt-verification
- refs/heads/contract_spend
- refs/heads/dev
- refs/heads/dexter-dfs-compat
- refs/heads/dexter-fa2-verification-hackish
- refs/heads/dexter-verification
- refs/heads/dexter-verification-approve
- refs/heads/dexter-verification-cleanup-lemmas
- refs/heads/dexter-verification-rebase
- refs/heads/dexter_fa12lqt-verification
- refs/heads/entrypoints
- refs/heads/guillaume-claret-add-entrypoint-to-self
- refs/heads/guillaume-claret-full-eval-function
- refs/heads/guillaume-claret-gadts-without-annotations
- refs/heads/guillaume-claret-integrate-coq-of-ocaml-output
- refs/heads/guillaume-claret-semantics-injection
- refs/heads/guillaume-claret@dexter_fa12lqt-verification
- refs/heads/guillaume-claret@dexter_fa12lqt-verification-benchmark-token-to-token
- refs/heads/guillaume-claret@dexter_fa12lqt-verification-experiments
- refs/heads/guillaume-claret@dexter_fa12lqt-verification-string-eqb
- refs/heads/improve_multisig
- refs/heads/internship_report
- refs/heads/intership_presentation
- refs/heads/julien@entrypoint_notations
- refs/heads/julien@gasoline_inconsistent_universe
- refs/heads/julien@mutually_calling_contracts
- refs/heads/kristina-fa12-verification-rebase
- refs/heads/kristina@fa12-verification-rebase
- refs/heads/kristina@fa2
- refs/heads/manager-contract-do-entry
- refs/heads/master
- refs/heads/merge-contract
- refs/heads/merge-contract_multithreaded_simpl
- refs/heads/merge_with_shared_storage
- refs/heads/michelson_fragment
- refs/heads/miguelito
- refs/heads/old_merge_with_shared_storage
- refs/heads/old_merge_with_shared_storage_WIP
- refs/heads/old_merge_with_shared_storage_use
- refs/heads/old_resiliable_contract_
- refs/heads/proto-proposal
- refs/heads/rafoo@concert_integration
- refs/heads/rafoo@dexter_fa12lqt-verification
- refs/heads/rafoo@dexter_perf_experiment
- refs/heads/rafoo@map_extra_lemmas
- refs/heads/rafoo@mutez_opacity
- refs/heads/rafoo@primitives
- refs/heads/rafoo@semantics-projections
- refs/heads/rafoo@slides_inria_day
- refs/heads/rafoo@talk_nl_seminar
- refs/heads/rafoo@tpbc
- refs/heads/rafoo@transparent_set_remove
- refs/heads/rafoo@tzt
- refs/heads/raphael@precond_iter
- refs/heads/raphael@tuto
- refs/heads/return2sender
- refs/heads/self_in_origination
- refs/heads/specialised-multisig
- refs/heads/stateful
- refs/heads/yrg@cpmm2-economic-properties
- refs/heads/yrg@cpmm2-new-version
- refs/heads/yrg@dexter_fa12lqt-verification-XtzToToken
- refs/heads/yrg@dexter_fa12lqt-verification-set-manager
- refs/heads/yrg@dexter_fa12lqt-verification-tokenToXtz
- refs/heads/yrg@dexter_fa12lqt-verification-update-spec
- refs/heads/yrg@make-mutez-more-readable
- refs/heads/yrg@optimize-micheline-lexer
- refs/heads/yrg@optimize-micheline-lexical-analysis
- refs/heads/yrg@refactor-make-mutez-more-readable
- refs/heads/yrg@verify-vesting
- refs/heads/yrg@wip-cpmm2-economic-properties
- refs/heads/zhenlei@cancellable_contract
- refs/heads/zhenlei@internship_report
- refs/heads/zhenlei@merge_shared_tree
- refs/merge-requests/1/head
- refs/merge-requests/100/head
- refs/merge-requests/100/merge
- refs/merge-requests/101/head
- refs/merge-requests/102/head
- refs/merge-requests/102/merge
- refs/merge-requests/103/head
- refs/merge-requests/103/merge
- refs/merge-requests/104/head
- refs/merge-requests/104/merge
- refs/merge-requests/105/head
- refs/merge-requests/105/merge
- refs/merge-requests/106/head
- refs/merge-requests/106/merge
- refs/merge-requests/107/head
- refs/merge-requests/107/merge
- refs/merge-requests/108/head
- refs/merge-requests/108/merge
- refs/merge-requests/109/head
- refs/merge-requests/109/merge
- refs/merge-requests/11/head
- refs/merge-requests/11/merge
- refs/merge-requests/110/head
- refs/merge-requests/110/merge
- refs/merge-requests/111/head
- refs/merge-requests/111/merge
- refs/merge-requests/112/head
- refs/merge-requests/112/merge
- refs/merge-requests/113/head
- refs/merge-requests/113/merge
- refs/merge-requests/114/head
- refs/merge-requests/114/merge
- refs/merge-requests/115/head
- refs/merge-requests/115/merge
- refs/merge-requests/116/head
- refs/merge-requests/116/merge
- refs/merge-requests/117/head
- refs/merge-requests/117/merge
- refs/merge-requests/118/head
- refs/merge-requests/118/merge
- refs/merge-requests/119/head
- refs/merge-requests/119/merge
- refs/merge-requests/12/head
- refs/merge-requests/120/head
- refs/merge-requests/120/merge
- refs/merge-requests/121/head
- refs/merge-requests/121/merge
- refs/merge-requests/122/head
- refs/merge-requests/122/merge
- refs/merge-requests/123/head
- refs/merge-requests/123/merge
- refs/merge-requests/124/head
- refs/merge-requests/124/merge
- refs/merge-requests/125/head
- refs/merge-requests/125/merge
- refs/merge-requests/126/head
- refs/merge-requests/126/merge
- refs/merge-requests/127/head
- refs/merge-requests/127/merge
- refs/merge-requests/128/head
- refs/merge-requests/128/merge
- refs/merge-requests/129/head
- refs/merge-requests/129/merge
- refs/merge-requests/13/head
- refs/merge-requests/130/head
- refs/merge-requests/130/merge
- refs/merge-requests/131/head
- refs/merge-requests/131/merge
- refs/merge-requests/132/head
- refs/merge-requests/132/merge
- refs/merge-requests/15/head
- refs/merge-requests/16/head
- refs/merge-requests/17/head
- refs/merge-requests/18/head
- refs/merge-requests/19/head
- refs/merge-requests/2/head
- refs/merge-requests/21/head
- refs/merge-requests/22/head
- refs/merge-requests/23/head
- refs/merge-requests/25/head
- refs/merge-requests/26/head
- refs/merge-requests/27/head
- refs/merge-requests/27/merge
- refs/merge-requests/28/head
- refs/merge-requests/28/merge
- refs/merge-requests/3/head
- refs/merge-requests/32/head
- refs/merge-requests/32/merge
- refs/merge-requests/33/head
- refs/merge-requests/35/head
- refs/merge-requests/35/merge
- refs/merge-requests/4/head
- refs/merge-requests/40/head
- refs/merge-requests/40/merge
- refs/merge-requests/43/head
- refs/merge-requests/43/merge
- refs/merge-requests/45/head
- refs/merge-requests/45/merge
- refs/merge-requests/47/head
- refs/merge-requests/47/merge
- refs/merge-requests/49/head
- refs/merge-requests/49/merge
- refs/merge-requests/50/head
- refs/merge-requests/50/merge
- refs/merge-requests/52/head
- refs/merge-requests/52/merge
- refs/merge-requests/54/head
- refs/merge-requests/54/merge
- refs/merge-requests/55/head
- refs/merge-requests/55/merge
- refs/merge-requests/57/head
- refs/merge-requests/57/merge
- refs/merge-requests/58/head
- refs/merge-requests/58/merge
- refs/merge-requests/59/head
- refs/merge-requests/59/merge
- refs/merge-requests/6/head
- refs/merge-requests/6/merge
- refs/merge-requests/60/head
- refs/merge-requests/60/merge
- refs/merge-requests/61/head
- refs/merge-requests/61/merge
- refs/merge-requests/62/head
- refs/merge-requests/62/merge
- refs/merge-requests/63/head
- refs/merge-requests/63/merge
- refs/merge-requests/64/head
- refs/merge-requests/64/merge
- refs/merge-requests/65/head
- refs/merge-requests/65/merge
- refs/merge-requests/66/head
- refs/merge-requests/66/merge
- refs/merge-requests/67/head
- refs/merge-requests/67/merge
- refs/merge-requests/68/head
- refs/merge-requests/68/merge
- refs/merge-requests/69/head
- refs/merge-requests/69/merge
- refs/merge-requests/70/head
- refs/merge-requests/70/merge
- refs/merge-requests/71/head
- refs/merge-requests/71/merge
- refs/merge-requests/72/head
- refs/merge-requests/72/merge
- refs/merge-requests/74/head
- refs/merge-requests/74/merge
- refs/merge-requests/75/head
- refs/merge-requests/75/merge
- refs/merge-requests/78/head
- refs/merge-requests/78/merge
- refs/merge-requests/79/head
- refs/merge-requests/79/merge
- refs/merge-requests/8/head
- refs/merge-requests/82/head
- refs/merge-requests/82/merge
- refs/merge-requests/9/head
- refs/merge-requests/90/head
- refs/merge-requests/90/merge
- refs/merge-requests/92/head
- refs/merge-requests/92/merge
- refs/merge-requests/93/head
- refs/merge-requests/93/merge
- refs/merge-requests/94/head
- refs/merge-requests/94/merge
- refs/merge-requests/95/head
- refs/merge-requests/95/merge
- refs/merge-requests/96/head
- refs/merge-requests/96/merge
- refs/merge-requests/97/head
- refs/merge-requests/97/merge
- refs/merge-requests/98/head
- refs/merge-requests/98/merge
- refs/merge-requests/99/head
- refs/merge-requests/99/merge
- refs/tags/ISOLA2020
- 936d209e8ce8cce3fd0b0e96692afc2c5730d094
History 
Cook and download a directory from the Software Heritage Vault
You have requested the cooking of the directory with identifier swh:1:dir:f2fa729b80d41210fa4e1927137bdfab211f01b4 into a standard tar.gz archive.
Are you sure you want to continue ?
Download a directory from the Software Heritage Vault
You have requested the download of the directory with identifier swh:1:dir:f2fa729b80d41210fa4e1927137bdfab211f01b4 as a standard tar.gz archive.
Are you sure you want to continue ?
Cook and download a revision from the Software Heritage Vault
You have requested the cooking of the history heading to revision with identifier swh:1:rev:936d209e8ce8cce3fd0b0e96692afc2c5730d094 into a bare git archive.
Are you sure you want to continue ?
Download a revision from the Software Heritage Vault
You have requested the download of the history heading to revision with identifier swh:1:rev:936d209e8ce8cce3fd0b0e96692afc2c5730d094 as a bare git archive.
Are you sure you want to continue ?
Invalid Email !
The provided email is not well-formed.
Download link has expired
The requested archive is no longer available for download from the Software Heritage Vault.
Do you want to cook it again ?
Take a new snapshot of a software origin
If the archived software origin currently browsed is not synchronized with its upstream version (for instance when new commits have been issued), you can explicitly request Software Heritage to take a new snapshot of it.
Use the form below to proceed. Once a request has been submitted and accepted, it will be processed as soon as possible. You can then check its processing state by visiting this dedicated page. Processing "take a new snapshot" request ...
Permalinks
To reference or cite the objects present in the Software Heritage archive, permalinks based on SoftWare Hash IDentifiers (SWHIDs) must be used.
Select below a type of object currently browsed in order to display its associated SWHID and permalink.
Tip revision: 936d209e8ce8cce3fd0b0e96692afc2c5730d094 authored by Raphaël Cauderlier on 06 February 2021, 22:41:46 UTC
Dexter DFS compat: always call trusted contracts first
Dexter DFS compat: always call trusted contracts first
Tip revision: 936d209
| File | Mode | Size |
|---|---|---|
| doc | ||
| scripts | ||
| src | ||
| .gitignore | -rw-r--r-- | 329 bytes |
| .gitlab-ci.yml | -rw-r--r-- | 920 bytes |
| LICENSE | -rw-r--r-- | 1.1 KB |
| Makefile.local | -rw-r--r-- | 379 bytes |
| README.org | -rw-r--r-- | 8.5 KB |
| _CoqProject | -rw-r--r-- | 4 bytes |
| configure | -rwxr-xr-x | 1.6 KB |
| coq-mi-cho-coq.install | -rw-r--r-- | 73 bytes |
| coq-mi-cho-coq.opam | -rw-r--r-- | 1.4 KB |
The diff you're trying to view is too large. Only the first 1000 changed files have been loaded.
Computing file changes ...
