Skip to content

Commit 8f69008

Browse files
rodiazetrodiazet
committed
Buglist entry
1 parent a1b535f commit 8f69008

2 files changed

Lines changed: 57 additions & 23 deletions

File tree

‎docs/bugs.json‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,14 @@
11
[
2+
{
3+
"uid": "SOL-2026-2",
4+
"name": "UnusedStoreEliminatorWithoutSSATransformation",
5+
"summary": "When the UnusedStoreEliminators optimizer step is run on non-SSA AST form, it may result in incorrect removal of storage or memory writes.",
6+
"description": "Solidity allows defining custom user-defined optimizer sequences. In version 0.8.12, the unused store eliminator was introduced to remove redundant writes to storage or memory. The bug was in this optimizer step's implementation. It used SSAValueTracker to identify variables that are never assigned. Based on this set of unassigned variables, a knowledge base is created to track current variable values. This knowledge is necessary for deciding whether memory or storage writes can be safely removed. Unfortunately, SSAValueTracker correctly removed assigned variables from the SSA variable set, but failed to remove variables that depend on those assigned variables. This oversight made it possible to construct inline assembly code that was incorrectly optimized by removing necessary writes. As a result, contracts compiled with different optimization sequences could exhibit different runtime behavior. The bug was introduced in version 0.8.12 alongside the unused store eliminator implementation. It was fixed in version 0.8.35 by implementing additional filtering of the variable set returned by SSAValueTracker.",
7+
"link": "https://blog.soliditylang.org/2026/X/Y/Z/",
8+
"introduced": "0.8.13",
9+
"fixed": "0.8.35",
10+
"severity": "low"
11+
},
212
{
313
"uid": "SOL-2026-1",
414
"name": "TransientStorageClearingHelperCollision",

‎docs/bugs_by_version.json‎

Lines changed: 47 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1863,7 +1863,8 @@
18631863
"DirtyBytesArrayToStorage",
18641864
"DataLocationChangeInInternalOverride",
18651865
"NestedCalldataArrayAbiReencodingSizeValidation",
1866-
"AbiEncodeCallLiteralAsFixedBytesBug"
1866+
"AbiEncodeCallLiteralAsFixedBytesBug",
1867+
"UnusedStoreEliminatorWithoutSSATransformation"
18671868
],
18681869
"released": "2022-02-16"
18691870
},
@@ -1878,7 +1879,8 @@
18781879
"DirtyBytesArrayToStorage",
18791880
"InlineAssemblyMemorySideEffects",
18801881
"DataLocationChangeInInternalOverride",
1881-
"NestedCalldataArrayAbiReencodingSizeValidation"
1882+
"NestedCalldataArrayAbiReencodingSizeValidation",
1883+
"UnusedStoreEliminatorWithoutSSATransformation"
18821884
],
18831885
"released": "2022-03-16"
18841886
},
@@ -1891,7 +1893,8 @@
18911893
"StorageWriteRemovalBeforeConditionalTermination",
18921894
"AbiReencodingHeadOverflowWithStaticArrayCleanup",
18931895
"DirtyBytesArrayToStorage",
1894-
"InlineAssemblyMemorySideEffects"
1896+
"InlineAssemblyMemorySideEffects",
1897+
"UnusedStoreEliminatorWithoutSSATransformation"
18951898
],
18961899
"released": "2022-05-17"
18971900
},
@@ -1902,7 +1905,8 @@
19021905
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
19031906
"MissingSideEffectsOnSelectorAccess",
19041907
"StorageWriteRemovalBeforeConditionalTermination",
1905-
"AbiReencodingHeadOverflowWithStaticArrayCleanup"
1908+
"AbiReencodingHeadOverflowWithStaticArrayCleanup",
1909+
"UnusedStoreEliminatorWithoutSSATransformation"
19061910
],
19071911
"released": "2022-06-15"
19081912
},
@@ -1912,7 +1916,8 @@
19121916
"VerbatimInvalidDeduplication",
19131917
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
19141918
"MissingSideEffectsOnSelectorAccess",
1915-
"StorageWriteRemovalBeforeConditionalTermination"
1919+
"StorageWriteRemovalBeforeConditionalTermination",
1920+
"UnusedStoreEliminatorWithoutSSATransformation"
19161921
],
19171922
"released": "2022-08-08"
19181923
},
@@ -1921,7 +1926,8 @@
19211926
"LostStorageArrayWriteOnSlotOverflow",
19221927
"VerbatimInvalidDeduplication",
19231928
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
1924-
"MissingSideEffectsOnSelectorAccess"
1929+
"MissingSideEffectsOnSelectorAccess",
1930+
"UnusedStoreEliminatorWithoutSSATransformation"
19251931
],
19261932
"released": "2022-09-08"
19271933
},
@@ -1930,7 +1936,8 @@
19301936
"LostStorageArrayWriteOnSlotOverflow",
19311937
"VerbatimInvalidDeduplication",
19321938
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
1933-
"MissingSideEffectsOnSelectorAccess"
1939+
"MissingSideEffectsOnSelectorAccess",
1940+
"UnusedStoreEliminatorWithoutSSATransformation"
19341941
],
19351942
"released": "2023-02-01"
19361943
},
@@ -1939,7 +1946,8 @@
19391946
"LostStorageArrayWriteOnSlotOverflow",
19401947
"VerbatimInvalidDeduplication",
19411948
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
1942-
"MissingSideEffectsOnSelectorAccess"
1949+
"MissingSideEffectsOnSelectorAccess",
1950+
"UnusedStoreEliminatorWithoutSSATransformation"
19431951
],
19441952
"released": "2023-02-22"
19451953
},
@@ -1963,65 +1971,75 @@
19631971
"LostStorageArrayWriteOnSlotOverflow",
19641972
"VerbatimInvalidDeduplication",
19651973
"FullInlinerNonExpressionSplitArgumentEvaluationOrder",
1966-
"MissingSideEffectsOnSelectorAccess"
1974+
"MissingSideEffectsOnSelectorAccess",
1975+
"UnusedStoreEliminatorWithoutSSATransformation"
19671976
],
19681977
"released": "2023-05-10"
19691978
},
19701979
"0.8.21": {
19711980
"bugs": [
19721981
"LostStorageArrayWriteOnSlotOverflow",
1973-
"VerbatimInvalidDeduplication"
1982+
"VerbatimInvalidDeduplication",
1983+
"UnusedStoreEliminatorWithoutSSATransformation"
19741984
],
19751985
"released": "2023-07-19"
19761986
},
19771987
"0.8.22": {
19781988
"bugs": [
19791989
"LostStorageArrayWriteOnSlotOverflow",
1980-
"VerbatimInvalidDeduplication"
1990+
"VerbatimInvalidDeduplication",
1991+
"UnusedStoreEliminatorWithoutSSATransformation"
19811992
],
19821993
"released": "2023-10-25"
19831994
},
19841995
"0.8.23": {
19851996
"bugs": [
1986-
"LostStorageArrayWriteOnSlotOverflow"
1997+
"LostStorageArrayWriteOnSlotOverflow",
1998+
"UnusedStoreEliminatorWithoutSSATransformation"
19871999
],
19882000
"released": "2023-11-08"
19892001
},
19902002
"0.8.24": {
19912003
"bugs": [
1992-
"LostStorageArrayWriteOnSlotOverflow"
2004+
"LostStorageArrayWriteOnSlotOverflow",
2005+
"UnusedStoreEliminatorWithoutSSATransformation"
19932006
],
19942007
"released": "2024-01-25"
19952008
},
19962009
"0.8.25": {
19972010
"bugs": [
1998-
"LostStorageArrayWriteOnSlotOverflow"
2011+
"LostStorageArrayWriteOnSlotOverflow",
2012+
"UnusedStoreEliminatorWithoutSSATransformation"
19992013
],
20002014
"released": "2024-03-14"
20012015
},
20022016
"0.8.26": {
20032017
"bugs": [
2004-
"LostStorageArrayWriteOnSlotOverflow"
2018+
"LostStorageArrayWriteOnSlotOverflow",
2019+
"UnusedStoreEliminatorWithoutSSATransformation"
20052020
],
20062021
"released": "2024-05-21"
20072022
},
20082023
"0.8.27": {
20092024
"bugs": [
2010-
"LostStorageArrayWriteOnSlotOverflow"
2025+
"LostStorageArrayWriteOnSlotOverflow",
2026+
"UnusedStoreEliminatorWithoutSSATransformation"
20112027
],
20122028
"released": "2024-09-04"
20132029
},
20142030
"0.8.28": {
20152031
"bugs": [
20162032
"TransientStorageClearingHelperCollision",
2017-
"LostStorageArrayWriteOnSlotOverflow"
2033+
"LostStorageArrayWriteOnSlotOverflow",
2034+
"UnusedStoreEliminatorWithoutSSATransformation"
20182035
],
20192036
"released": "2024-10-09"
20202037
},
20212038
"0.8.29": {
20222039
"bugs": [
20232040
"TransientStorageClearingHelperCollision",
2024-
"LostStorageArrayWriteOnSlotOverflow"
2041+
"LostStorageArrayWriteOnSlotOverflow",
2042+
"UnusedStoreEliminatorWithoutSSATransformation"
20252043
],
20262044
"released": "2025-03-12"
20272045
},
@@ -2042,31 +2060,37 @@
20422060
"0.8.30": {
20432061
"bugs": [
20442062
"TransientStorageClearingHelperCollision",
2045-
"LostStorageArrayWriteOnSlotOverflow"
2063+
"LostStorageArrayWriteOnSlotOverflow",
2064+
"UnusedStoreEliminatorWithoutSSATransformation"
20462065
],
20472066
"released": "2025-05-07"
20482067
},
20492068
"0.8.31": {
20502069
"bugs": [
20512070
"TransientStorageClearingHelperCollision",
2052-
"LostStorageArrayWriteOnSlotOverflow"
2071+
"LostStorageArrayWriteOnSlotOverflow",
2072+
"UnusedStoreEliminatorWithoutSSATransformation"
20532073
],
20542074
"released": "2025-12-03"
20552075
},
20562076
"0.8.32": {
20572077
"bugs": [
2058-
"TransientStorageClearingHelperCollision"
2078+
"TransientStorageClearingHelperCollision",
2079+
"UnusedStoreEliminatorWithoutSSATransformation"
20592080
],
20602081
"released": "2025-12-18"
20612082
},
20622083
"0.8.33": {
20632084
"bugs": [
2064-
"TransientStorageClearingHelperCollision"
2085+
"TransientStorageClearingHelperCollision",
2086+
"UnusedStoreEliminatorWithoutSSATransformation"
20652087
],
20662088
"released": "2025-12-18"
20672089
},
20682090
"0.8.34": {
2069-
"bugs": [],
2091+
"bugs": [
2092+
"UnusedStoreEliminatorWithoutSSATransformation"
2093+
],
20702094
"released": "2026-02-18"
20712095
},
20722096
"0.8.4": {

0 commit comments

Comments
 (0)