Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[audit] 10. Suboptimal usage of optional vectors & 12. Code deduplication #868

Merged
merged 4 commits into from
Aug 11, 2024

Conversation

NoahSaso
Copy link
Member

@NoahSaso NoahSaso commented Aug 2, 2024

From Oak:

10:

The Option<Vec<...>> type is prevalent across the codebase. Although it can distinguish between an empty and an absent list in certain scenarios, its usage is generally discouraged.

For example, in packages/dao-voting/src/pre_propose.rs:72-84, the PreProposeSubmissionPolicy enum declares the denylist and allowlist fields to Option<Vec>. The lists are parsed with unwrap_or_default, which converts empty lists to None before updating the submission policy configuration in packages/dao-pre-propose-base/src/execute.rs:291 and 365. This indicates there is no meaningful distinction between None and an empty vector.

Hence, we conclude that Option<Vec<...>> serves more as an optimization than a necessity. Given that modern Rust minimizes the memory footprint of empty vectors, the complexity added by Option<Vec<...>> pattern outweighs its benefits.

Consequently, the code complexity is increased due to additional checks and unwrapping without a significant memory efficiency gain.

12:

The code segments in packages/dao-pre-propose-base/src/execute.rs:262-283, 307-328, and 330-351 are identical. These segments implement modifying permission lists with iteration, deduplication, and address validation, which can be abstracted as reusable components to reduce the attack surface and increase code maintainability.

This fix replaces all Option<Vec<String>> instances with Vec<Addr>, except those in the update submission policy message, since that allows the caller to omit fields from the JSON entirely, which is a desirable optimization for frontends.

It also de-dupes some redundant code.

Copy link

codecov bot commented Aug 2, 2024

Codecov Report

Attention: Patch coverage is 99.23077% with 2 lines in your changes missing coverage. Please review.

Project coverage is 96.64%. Comparing base (75272b9) to head (7874011).

Files Patch % Lines
...l/dao-proposal-multiple/src/testing/instantiate.rs 66.66% 1 Missing ⚠️
...sal/dao-proposal-single/src/testing/instantiate.rs 66.66% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##           development     #868   +/-   ##
============================================
  Coverage        96.64%   96.64%           
============================================
  Files              240      241    +1     
  Lines            65294    65276   -18     
============================================
- Hits             63106    63089   -17     
+ Misses            2188     2187    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@NoahSaso NoahSaso changed the title [audit] 10. Suboptimal usage of optional vectors [audit] 10. Suboptimal usage of optional vectors & 12. Code deduplication Aug 2, 2024
Copy link
Collaborator

@bekauz bekauz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm!

@bekauz bekauz merged commit 2cac217 into development Aug 11, 2024
9 checks passed
@bekauz bekauz deleted the noah/rewards-audit-fix-10 branch August 11, 2024 19:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants