Skip to content

Commit

Permalink
Update SWC-102.md (code comments, note unmaintained status)
Browse files Browse the repository at this point in the history
Update SWC-102.md
  • Loading branch information
chaals authored Aug 21, 2023
2 parents f6e085a + 804633e commit 7b3d476
Showing 1 changed file with 28 additions and 0 deletions.
28 changes: 28 additions & 0 deletions entries/docs/SWC-102.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,15 @@
# Please note, this content is no longer actively maintained.

The content of the SWC registry has not been thoroughly updated since 2020. It is known to be incomplete and may contain errors as well as crucial omissions.

For currently maintained guidance on known Smart Contract vulnerabilities written primarily as guidance for security reviewers, please see the
[EEA EthTrust Security Levels specification](https://entethalliance.org/specs/ethtrust-sl). As well as the latest release version, an
[Editor's draft](https://entethalliance.github.io/eta-registry/security-levels-spec.html) is available,
that represents the latest work of the group developing the specification.

General guidance for developers on what to consider to ensure security, that is currently maintained, is also available through the
[Smart Contract Security Verification Standard (SCSVS)](https://github.com/ComposableSecurity/SCSVS).

# Title

Outdated Compiler Version
Expand All @@ -18,6 +30,11 @@ It is recommended to use a recent version of the Solidity compiler.

- [Solidity Release Notes](https://github.com/ethereum/solidity/releases)
- [Etherscan Solidity Bug Info](https://etherscan.io/solcbuginfo)
- EEA EthTrust Security Levels:
- [**Level [S]** Compiler Security Bugs](https://entethalliance.org/specs/ethtrust-sl/#sec-1-compiler-bugs)
- [**Level [S]** Improved Compilers](https://entethalliance.org/specs/ethtrust-sl/#sec-1-compile-improvements)
- [**Level [M]** Compiler Bugs and Overriding Requirements](https://entethalliance.org/specs/ethtrust-sl/#sec-level-2-compiler-bugs)
- [**Recommended Practice** Use the Latest Compiler](https://entethalliance.org/specs/ethtrust-sl/#req-R-use-latest-compiler)

## Samples

Expand All @@ -31,3 +48,14 @@ contract OutdatedCompilerVersion {
}
```

#### Comments

As of August 2023 the current version of the compiler is 0.8.21. There are several dozen compiler bugs that have been fixed between that and version 0.4.13,
each of which can lead to data being corrupted, contracts not functioning as expected, or unexpected vulnerabilities in contracts.
There have also been significant improvements in compiler capabilities to protect against errors.

See also the sections [**Level [S]** Compiler Security Bugs](https://entethalliance.org/specs/ethtrust-sl/#sec-1-compiler-bugs),
[**Level [S]** Improved Compilers](https://entethalliance.org/specs/ethtrust-sl/#sec-1-compile-improvements), and
[**Level [M]** Compiler Bugs and Overriding Requirements](https://entethalliance.org/specs/ethtrust-sl/#sec-level-2-compiler-bugs)

0 comments on commit 7b3d476

Please sign in to comment.