Skip to content

Fix symbolic prank, CREATE size, empty-balance and source-location bugs - #1253

Merged
msooseth merged 4 commits into
mainfrom
stack/1-fixes
Nov 13, 2026
Merged

msooseth merged 4 commits into
mainfrom
stack/1-fixes

Conversation

@msooseth

Copy link
Copy Markdown
Collaborator

Description

Bug fixes from running hevm test on spark-psm. prank/startPrank with a symbolic address explores each possible address instead of failing. CREATE/CREATE2 compare a symbolic init code size as a number instead of dropping the path. An account whose balance is a term equal to 0 counts as empty. Source locations are right after an incremental forge build, and the progress log shows them.

Invariant tests also print partially explored paths grouped by source location instead of their expressions.

Part 1 of 7 of splitting #1248.

Checklist

  • tested locally
  • added automated tests
  • updated the docs
  • updated the changelog

@msooseth
msooseth added this pull request to stack #1260 November 13, 2026 14:06
msooseth and others added 4 commits November 13, 2026 15:08
…nt tests

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…l forge builds

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The size was checked against the maximum with the structural Ord on Expr,
so every symbolic size, e.g. end - start of the init code after a
symbolic-length memory allocation, failed as too large and the path was
silently dropped. Simplify it and compare the literal; a size that stays
symbolic ends the path as partial.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
accountEmpty compared the balance with Lit 0 structurally, so a balance
that is a term equal to 0, e.g. after a CALL sending x & 0, made the
account non-empty: EXTCODEHASH returned keccak("") instead of 0, and
the account survived the end-of-transaction cleanup of empty touched
accounts. Found by symbolic-lockstep.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@msooseth
msooseth merged commit 6daa4e5 into main Nov 13, 2026
7 of 9 checks passed
@msooseth
msooseth deleted the stack/1-fixes branch November 13, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant