gosec

plugin/dapp/evm/executor/query.go

@@ -99,7 +99,10 @@ func getCallReceipt(logs []*types.ReceiptLog) *evmtypes.ReceiptEVMContract {
 	for _, v := range logs {
 		if v.Ty == evmtypes.TyLogCallContract {
 			var res evmtypes.ReceiptEVMContract
-			types.Decode(v.Log, &res)
+			err := types.Decode(v.Log, &res)
+			if err != nil {
+				return nil
+			}
 			return &res
 		}
 	}

plugin/dapp/evm/executor/vm/runtime/instructions.go

@@ -485,7 +485,11 @@ func opReturnDataCopy(pc *uint64, evm *EVM, contract *Contract, memory *mm.Memor
 	if end.BitLen() > 64 || uint64(len(evm.Interpreter.ReturnData)) < end.Uint64() {
 		return nil, model.ErrReturnDataOutOfBounds
 	}
-	memory.Set(memOffset.Uint64(), length.Uint64(), evm.Interpreter.ReturnData[dataOffset.Uint64():end.Uint64()])
+	err := memory.Set(memOffset.Uint64(), length.Uint64(), evm.Interpreter.ReturnData[dataOffset.Uint64():end.Uint64()])
+	if err != nil {
+		panic(err)
+		return nil, err
+	}
 
 	return nil, nil
 }