cerc-io/solidity
11
0
Fork 0
mirror of https://github.com/ethereum/solidity synced 2023-10-03 13:03:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Security Considerations

Browse Source
This commit is contained in:
chriseth
2016-07-04 15:27:53 +02:00
parent 48238c9f14
commit 2df142c496
7 changed files with 250 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/control-structures.rst
+12
View File
@@ -69,6 +69,18 @@ this does not execute a constructor. We could also have used ``function setFeed(
only (locally) sets the value and amount of gas sent with the function call and only the
parentheses at the end perform the actual call.
.. warning::
Any interaction with another contract imposes a certain danger, especially
if the source code of the contract is not known in advance. The current
contract hands over control to the called contract and that might do
just about anything. Be prepared that it calls into other contracts of
your system and perhaps even back into the calling contract before your
call returns. This means
that the called contract can change state variables of the calling contract
via its functions. Write your functions in a way that e.g. calls to
external functions happen after any changes to state variables in your contract,
so your contract is not vulnerable to a recursive call exploit.
Named Calls and Anonymous Function Parameters
---------------------------------------------