eth-sri/securify

Some computeResultValues implementations may not consider whether the input should be considered as signed or unsigned

hiqua opened this issue · 0 comments

hiqua commented

computeResultValues is a function implemented in every opcode, to allow the propagation of constants. In the yellow paper, some inputs are considered unsigned, while some others are considered signed, but Securify does not seem to do this distinction currently, hence probable mistakes in these propagated constants.