From a2a0052f35a23e4a14ce86275fd62f8b463ef3b4 Mon Sep 17 00:00:00 2001 From: chaals Date: Mon, 29 Jul 2024 10:22:07 -0300 Subject: [PATCH] More related links to EthTrust Spec --- entries/docs/SWC-126.md | 5 ++++- entries/docs/SWC-127.md | 5 ++++- entries/docs/SWC-128.md | 6 ++++-- 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/entries/docs/SWC-126.md b/entries/docs/SWC-126.md index e8b00faf..c93b9661 100644 --- a/entries/docs/SWC-126.md +++ b/entries/docs/SWC-126.md @@ -16,7 +16,10 @@ Insufficient Gas Griefing ## Relationships -[CWE-691: Insufficient Control Flow Management](https://cwe.mitre.org/data/definitions/691.html) +- [CWE-691: Insufficient Control Flow Management](https://cwe.mitre.org/data/definitions/691.html) +- EEA EthTrust Security Levels: + - [**[Q] Manage Gas Usage Increases**](https://entethalliance.github.io/eta-registry/security-levels-spec.html#req-3-enough-gas) + - [**[Q] Protect Gas Usage**](https://entethalliance.github.io/eta-registry/security-levels-spec.html#req-3-protect-gas) ## Description diff --git a/entries/docs/SWC-127.md b/entries/docs/SWC-127.md index 75bc89fd..6eeeac53 100644 --- a/entries/docs/SWC-127.md +++ b/entries/docs/SWC-127.md @@ -16,7 +16,10 @@ Arbitrary Jump with Function Type Variable ## Relationships -[CWE-695: Use of Low-Level Functionality](https://cwe.mitre.org/data/definitions/695.html) +- [CWE-695: Use of Low-Level Functionality](https://cwe.mitre.org/data/definitions/695.html) +- EEA EthTrust Security Levels: + - [**[S] No `assembly {}`**](https://entethalliance.github.io/eta-registry/security-levels-spec.html#req-1-no-assembly) + - [**[M] Avoid Common `assembly {}` Attack Vectors**](https://entethalliance.github.io/eta-registry/security-levels-spec.html#req-2-safe-assembly) ## Description diff --git a/entries/docs/SWC-128.md b/entries/docs/SWC-128.md index fd1b6b5a..5091016f 100644 --- a/entries/docs/SWC-128.md +++ b/entries/docs/SWC-128.md @@ -16,8 +16,10 @@ DoS With Block Gas Limit ## Relationships -[CWE-400: Uncontrolled Resource Consumption](https://cwe.mitre.org/data/definitions/400.html) - +- [CWE-400: Uncontrolled Resource Consumption](https://cwe.mitre.org/data/definitions/400.html) +- EEA EthTrust Security Levels: + - [**[Q] Manage Gas Usage Increases**](https://entethalliance.github.io/eta-registry/security-levels-spec.html#req-3-enough-gas) + ## Description When smart contracts are deployed or functions inside them are called, the execution of these actions always requires a certain amount of gas, based of how much computation is needed to complete them. The Ethereum network specifies a block gas limit and the sum of all transactions included in a block can not exceed the threshold.