Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Security Policy>Threat Model>enableSecurityPolicy
GeneralOverview
DiscussionReturn datasize uncheckedBypassing Security Policies
Threat ModelWhat are threat models?ERC7484SecurityPolicy.sol
SecurityPolicyManagerPlugin.solcheckAndEnableModulecheckSetupAndEnableModuledisableSecurityPoliciesRangedisableSecurityPolicyenableSecurityPoliciesenableSecurityPolicy
Audit ResultsSummary

Function: enableSecurityPolicy(ISecurityPolicyPlugin _policy)

This enables a security policy, inserting into the linked list.

Inputs

  • _policy

    • Control: Full.

    • Constraints: != SENTINEL && != 0x0.

    • Impact: The policy.

Branches and code coverage (including function calls)

Intended branches

  • enabledSecurityPolicies[policy] is the previous head.

  • enabledSecurityPolicies[SENTINEL_MODULE_ADDRESS] == policy.

Negative behavior

  • Inserted Security Policy cannot be the sentinel address.

  • Inserted Security Policy cannot be 0x0.

Zellic © 2025Back to top ↑