Skip to content

bugc: slice a fixed-size bytes value by its bytes - #357

Closed
gnidan wants to merge 2 commits into
mainfrom
bugc-folded-hash-slice
Closed

gnidan wants to merge 2 commits into
mainfrom
bugc-folded-hash-slice

Conversation

@gnidan

@gnidan gnidan commented Oct 7, 2026

Copy link
Copy Markdown
Member

The type checker accepts a slice of a fixed-size bytesN value and gives it the type bytes, and the token-registry example uses it for selectors: keccak256("mint(uint256)")[0:4]. But irgen built every slice as a slice of dynamic bytes in memory. A bytesN value is a word on the stack, not a memory address, so the slice read its length from memory at an address equal to the value. Since #344 that makes the slice revert with Panic(0x32) at every optimization level; before #344 it copied whatever memory was there. With a hash of a constant string at levels 1 to 3, the folded hash is that address.

A slice of a bytesN now has its own path in irgen. It checks start <= end <= N, shifts byte start of the value's N bytes up to the word's first byte, clears the bytes past end - start, and stores the length and that word in new memory. So keccak256("setMotd(string)")[0:4] as bytes4 is 0x5fe59b9d.

At level 0 that expression is still wrong for a different reason: keccak256 of dynamic bytes or a string hashes the memory address, not the data (the optimizer folds the hash of a constant string correctly at levels 1 to 3). That gets its own PR.

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-10-07 03:11 UTC

gnidan added a commit that referenced this pull request Oct 7, 2026
* bugc: compile `!` as a logical not

* bugc: link the changelog entry to #353

* bugc: end each source range at its last token

* bugc: link the changelog entry to #362

* bugc: add block.prevrandao

* bugc: link the changelog entries to #363

* bugc: hash several value-type words with keccak256

* bugc: link the changelog entries to #365

* bugc: slice a fixed-size bytes value by its bytes

* bugc: link the changelog entry to #357

* bugc: hash the data of dynamic bytes and strings

* bugc: link the changelog entry to #360

* bugc: give a caller's call JUMP the invoke's arguments

* bugc: list variables before a function's first statement

* bugc: store a memory string's bytes when assigning it to storage

A storage write took its value as a word, so a memory string or bytes
reference wrote its memory address into the slot. Code generation now
encodes the referenced bytes as Solidity does: inline with length * 2
up to 31 bytes, else length * 2 + 1 in the slot and the data from
keccak256(slot), with the last word's trailing bytes cleared. A slice
now carries the bytes type, so its value is recognized too.

* bugc: link the changelog entry to #355

* bugc: say why the bytes test slices without naming the copy width

* bugc: copy all of a slice's bytes

irgen built a slice's data as a read and a write, and a read or write
moves at most one word, so only the first 32 bytes were copied. Add a
copy IR instruction (CALLDATACOPY from calldata, MCOPY from memory) and
emit it for the slice's data.

* bugc: link the changelog entries to #359

* bugc: copy a struct read from storage into memory

* bugc: link the changelog entries to #361

* bugc: lay storage arrays out as Solidity does

* bugc: add push to dynamic arrays in storage
@gnidan

gnidan commented Oct 7, 2026

Copy link
Copy Markdown
Member Author

Included in #368.

@gnidan gnidan closed this Oct 7, 2026
@gnidan
gnidan deleted the bugc-folded-hash-slice branch October 7, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant