dfinity/invoice-canister

Issues

• unusable with dfx 0.15.1

  #41 opened a year ago by AndreLeifert
  0

• [SEC-F20] Controller of canister could take all funds by upgrading

  #12 opened 3 years ago by krpeacock
  1

• [SEC-F05] TOCTOU in verify_invoice

  #21 opened 3 years ago by krpeacock
  3

• SEC Cleanup

  #29 opened 3 years ago by krpeacock
  3

• [SEC-F30] Funds can get stuck in invoice accounts

  #13 opened 3 years ago by krpeacock
  2

• [SEC-F12] Copied libraries

  #20 opened 3 years ago by krpeacock
  2

• [SEC-F22] Potentially sensitive invoice details are stored in plain text on the canister

  #26 opened 3 years ago by krpeacock
  1

• Prevent arithmetic overflow when amount in TransferArgs is below 10_000

  #35 opened 3 years ago by seb-icp
  2

• [SEC-F19] Upgrades fail if storage is too big

  #23 opened 2 years ago by krpeacock
  3

• [SEC-F25] a refund could be paid several times

  #22 opened 2 years ago by krpeacock
  2

• [SEC-F23] ineffective expiration of invoices

  #27 opened 3 years ago by krpeacock
  1

• [SEC-F10] Buyer could make the seller lose money by requesting refunds

  #14 opened 3 years ago by krpeacock
  1

• [SEC-F18] Invoices are never deleted

  #17 opened 3 years ago by krpeacock
  2

• [SEC-F13] Missing Input Validation

  #15 opened 3 years ago by krpeacock
  0

• [SEC-F24] Very small refunds are possible and block later refunds

  #18 opened 3 years ago by krpeacock
  0

• [SEC-F26] refunded amount is not stored in the invoice

  #24 opened 3 years ago by krpeacock
  0

• [SEC-F27] principalToSubaccount uses no domain separator

  #28 opened 3 years ago by krpeacock
  0

• [SEC-F21] Anonymous principal has an account

  #25 opened 3 years ago by krpeacock
  0

• [SEC-F29] Incomplete design documentation

  #19 opened 3 years ago by krpeacock
  0

• [SEC-F17] Uncertified Queries

  #16 opened 3 years ago by krpeacock
  0