Skip to content

bugc: hash the data of dynamic bytes and strings - #360

Closed
gnidan wants to merge 2 commits into
mainfrom
bugc-hash-bytes
Closed

gnidan wants to merge 2 commits into
mainfrom
bugc-hash-bytes

Conversation

@gnidan

@gnidan gnidan commented Oct 7, 2026

Copy link
Copy Markdown
Member

The hash instruction always stored its operand at memory 0 and hashed that one word. That is right for a bytesN value, but dynamic bytes and string values are the memory address of a length word followed by the data, so keccak256 hashed the address. msg.data is 0 as a value, so keccak256(msg.data) hashed the zero word.

This hid at optimization levels 1 to 3 for a constant string, because constant folding hashes the string's bytes itself. So keccak256("setMotd(string)") was 0x5fe59b9d… at level 1 and up, and something else at level 0. A slice, a string local that the optimizer cannot fold, or msg.data was wrong at every level.

Code generation now looks at the operand:

  • A memory reference hashes mload(p) bytes from p + 32.
  • msg.data (found the same way as for length, by the temps an env msg_data defines) copies the calldata to the free memory, without allocating it, and hashes it there.
  • Anything else hashes its word, as before.

The new behavioral tests hash string literals (empty, one word, longer than a word), a string local, a calldata slice, and msg.data, at each optimization level.

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-10-07 03:12 UTC

gnidan added a commit that referenced this pull request Oct 7, 2026
* bugc: compile `!` as a logical not

* bugc: link the changelog entry to #353

* bugc: end each source range at its last token

* bugc: link the changelog entry to #362

* bugc: add block.prevrandao

* bugc: link the changelog entries to #363

* bugc: hash several value-type words with keccak256

* bugc: link the changelog entries to #365

* bugc: slice a fixed-size bytes value by its bytes

* bugc: link the changelog entry to #357

* bugc: hash the data of dynamic bytes and strings

* bugc: link the changelog entry to #360

* bugc: give a caller's call JUMP the invoke's arguments

* bugc: list variables before a function's first statement

* bugc: store a memory string's bytes when assigning it to storage

A storage write took its value as a word, so a memory string or bytes
reference wrote its memory address into the slot. Code generation now
encodes the referenced bytes as Solidity does: inline with length * 2
up to 31 bytes, else length * 2 + 1 in the slot and the data from
keccak256(slot), with the last word's trailing bytes cleared. A slice
now carries the bytes type, so its value is recognized too.

* bugc: link the changelog entry to #355

* bugc: say why the bytes test slices without naming the copy width

* bugc: copy all of a slice's bytes

irgen built a slice's data as a read and a write, and a read or write
moves at most one word, so only the first 32 bytes were copied. Add a
copy IR instruction (CALLDATACOPY from calldata, MCOPY from memory) and
emit it for the slice's data.

* bugc: link the changelog entries to #359

* bugc: copy a struct read from storage into memory

* bugc: link the changelog entries to #361

* bugc: lay storage arrays out as Solidity does

* bugc: add push to dynamic arrays in storage
@gnidan

gnidan commented Oct 7, 2026

Copy link
Copy Markdown
Member Author

Included in #368.

@gnidan gnidan closed this Oct 7, 2026
@gnidan
gnidan deleted the bugc-hash-bytes branch October 7, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant