Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Write an audit tool that uses Callgraph #1145

Open
4 tasks
jubnzv opened this issue Aug 16, 2022 · 2 comments
Open
4 tasks

Write an audit tool that uses Callgraph #1145

jubnzv opened this issue Aug 16, 2022 · 2 comments
Labels
enhancement New feature or request static analysis
Milestone

Comments

@jubnzv
Copy link
Contributor

jubnzv commented Aug 16, 2022

We could use the Callgraph module implemented in #1144 to create a tool that helps auditing smart contracts.

Desired functionality:

  • A CLI option to don't show pure functions call on the .dot dump. This is usable to reduce the noise when analyzing imperative code.
  • Show changes in the imperative state of the contract for each procedure/transition. Read, write, and read-write (update) operations of fields should be shown differently.
  • External calls, event, exceptions on the graph.
  • Show clusters of procedures/transitions based on fields they access (if procedures commute, i.e. do not share common state, it should be clearly observable from the call graph).
@jubnzv jubnzv added the enhancement New feature or request label Aug 16, 2022
@anton-trunov
Copy link
Contributor

The more filtering options this contract map tool supports the better. Remote reads also should be marked explicitly.

@jjcnn
Copy link
Contributor

jjcnn commented Sep 16, 2022

Moving to v0.14 due to lack of time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request static analysis
Projects
None yet
Development

No branches or pull requests

3 participants