Skip to content

latticexyz/mud-stateful-fuzzing-bug-repro

 
 

Repository files navigation

mud-stateful-fuzzing-bug-repro

See Invariants.t.sol and Handler.t.sol for the code that reproduces the bug.

It should only call public functions inside the handler contract, but seems to randomly attempt direct calls to functions inside systems, which should not happen during such a testing campaign, and which will obviously fail.

Weirdly, under some specific conditions, this doesn't happen at all.

image

See the last 3 calls in the screenshot:

  1. handler_incrementCounter is called successfully;
  2. handler_incrementCounter is called successfully;
  3. a direct call with calldata=0xd09de08a (which is the selector for increment()) is made, which reverts.

The first two calls are expected (through the handler), but the third one is absolutely not.

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • TypeScript 70.8%
  • Solidity 26.8%
  • HTML 2.4%