Canto Dex Oracle contest - BipinSah's results

Lines of code

https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L96 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L149 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L242 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L248 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L249 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L608 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L564 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L565 https://github.com/code-423n4/2022-09-canto/tree/main/src/Swap/BaseV1-core.sol#L566

Vulnerability details

Description:

As this array can grow quite large, the transaction’s gas cost could exceed the block gas limit and make it impossible to call this function at all

Actual Codes used:

src/Swap/BaseV1-core.sol:96:        observations.push(Observation(block.timestamp, 0, 0,0));
src/Swap/BaseV1-core.sol:149:            observations.push(Observation(blockTimestamp, reserve0CumulativeLast, reserve1CumulativeLast, totalSupplyCumulativeLast));

Instances where loop is run on operations array which will lead to unbounded loop

src/Swap/BaseV1-core.sol:242:        uint lastIndex = observations.length-1;
..
src/Swap/BaseV1-core.sol:248:         for(; i < lastIndex; i+=window) 
src/Swap/BaseV1-core.sol:249:             nextIndex = i + window;

Actual Codes used:

src/Swap/BaseV1-core.sol:608:        allPairs.push(pair);

Instances where loop is run on operations array which will lead to unbounded loop

src/Swap/BaseV1-core.sol:608:        allPairs.push(pair)
src/Swap/BaseV1-core.sol:564:         for (uint i; i < allPairs.length; ) {
src/Swap/BaseV1-core.sol:565:             BaseV1Pair(allPairs[i]).setPeriodSize(newPeriod);
src/Swap/BaseV1-core.sol:566:             unchecked {++i;}

---

Recommendations

Consider introducing a reasonable upper limit based on block gas limits and/or adding a remove method to remove elements in the array.