Merge pull request ethereum#7217 from ethereum/buglistStructOffset

Buglist entry for calldata structs with dynamically encoded, but statically-sized members.

Author: chriseth

docs/bugs.json

@@ -1,4 +1,15 @@
 [
+    {
+        "name": "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers",
+        "summary": "Reading from calldata structs that contain dynamically encoded, but statically-sized members can result in incorrect values.",
+        "description": "When a calldata struct contains a dynamically encoded, but statically-sized member, the offsets for all subsequent struct members are calculated incorrectly. All reads from such members will result in invalid values. Only calldata structs are affected, i.e. this occurs in external functions with such structs as argument. Using affected structs in storage or memory or as arguments to public functions on the other hand works correctly.",
+        "introduced": "0.5.6",
+        "fixed": "0.5.11",
+        "severity": "low",
+        "conditions": {
+            "ABIEncoderV2": true
+        }
+    },
     {
         "name": "SignedArrayStorageCopy",
         "summary": "Assigning an array of signed integers to a storage array of different type can lead to data corruption in that array.",

docs/bugs_by_version.json

@@ -741,7 +741,9 @@
         "released": "2018-12-03"
     },
     "0.5.10": {
-        "bugs": [],
+        "bugs": [
+            "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers"
+        ],
         "released": "2019-06-25"
     },
     "0.5.2": {
@@ -792,6 +794,7 @@
     },
     "0.5.6": {
         "bugs": [
+            "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers",
             "SignedArrayStorageCopy",
             "ABIEncoderV2StorageArrayWithMultiSlotElement",
             "DynamicConstructorArgumentsClippedABIV2",
@@ -804,6 +807,7 @@
     },
     "0.5.7": {
         "bugs": [
+            "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers",
             "SignedArrayStorageCopy",
             "ABIEncoderV2StorageArrayWithMultiSlotElement",
             "DynamicConstructorArgumentsClippedABIV2",
@@ -814,6 +818,7 @@
     },
     "0.5.8": {
         "bugs": [
+            "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers",
             "SignedArrayStorageCopy",
             "ABIEncoderV2StorageArrayWithMultiSlotElement",
             "DynamicConstructorArgumentsClippedABIV2"
@@ -822,6 +827,7 @@
     },
     "0.5.9": {
         "bugs": [
+            "ABIEncoderV2CalldataStructsWithStaticallySizedAndDynamicallyEncodedMembers",
             "SignedArrayStorageCopy",
             "ABIEncoderV2StorageArrayWithMultiSlotElement"
         ],