KarpelesLab / outscript / 28282224060

79%

Build Type

push

github

Committed by MagicalTux

Commit Message

cardano: detect uint64 overflow when aggregating duplicate assets

Fix LOW-severity silent overflow: cardanoAssetMap summed amounts for
duplicate (PolicyID, AssetName) entries with += on a uint64, which
could silently wrap. Detect the wrap (sum < prev) and return an error,
threading it through outputValue and bodyMap (all in-file callers). Add
a test that two duplicate assets overflowing uint64 fails MarshalBinary
and BodyBytes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

22 of 22 new or added lines in 1 file covered. (100.0%)

372 existing lines in 10 files now uncovered.

3554 of 4472 relevant lines covered (79.47%)

34.93 hits per line