Module unsafe_oz_erc721_mint 

Re-exports

use super::UnsafeOzErc721Mint; 🔒

use crate::linter::LateLintPass; 🔒

use crate::linter::LintContext; 🔒

use crate::sol::Severity; 🔒

use crate::sol::SolLint; 🔒

use crate::sol::analysis::OPENZEPPELIN_ROOTS; 🔒

use crate::sol::analysis::arg_for_param; 🔒

use crate::sol::analysis::for_each_lhs_var; 🔒

use crate::sol::analysis::is_address_type; 🔒

use crate::sol::analysis::is_builtin; 🔒

use crate::sol::analysis::is_literal_false; 🔒

use crate::sol::analysis::is_require_or_assert; 🔒

use crate::sol::analysis::loop_stmts; 🔒

use crate::sol::analysis::source_in_package; 🔒

use crate::sol::analysis::underlying_var; 🔒

use crate::sol::analysis::unique; 🔒

use crate::sol::analysis::write_target; 🔒

use alloy_primitives::U256; 🔒

use solar::ast::ElementaryType; 🔒

use solar::ast::LitKind; 🔒

use solar::ast::StateMutability; 🔒

use solar::ast::Visibility; 🔒

use solar::interface::Span; 🔒

use solar::interface::kw; 🔒

use solar::sema::Gcx; 🔒

use solar::sema::hir; 🔒

use solar::sema::hir::BinOpKind; 🔒

use solar::sema::hir::CallArgs; 🔒

use solar::sema::hir::Expr; 🔒

use solar::sema::hir::ExprKind; 🔒

use solar::sema::hir::FunctionId; 🔒

use solar::sema::hir::Hir; 🔒

use solar::sema::hir::ItemId; 🔒

use solar::sema::hir::Stmt; 🔒

use solar::sema::hir::StmtKind; 🔒

use solar::sema::hir::TypeKind; 🔒

use solar::sema::hir::VariableId; 🔒

use solar::sema::hir::Visit; 🔒

use solar::sema::ty::TyFn; 🔒

use solar::sema::ty::TyKind; 🔒

use std::ops::ControlFlow; 🔒

use std::slice; 🔒

Structs

Cx 🔒

The analysis context.

Finder 🔒

Breaks out of a subtree at the first statement or expression matching a predicate.

GuardWalk 🔒

The straight-line reading of a body: coverage once a guard has run on the path, pending while a delegated mint has run with no guard before or after it yet, failed once a path may leave the function successfully with such a mint standing, escaped once one may leave before any guard ran.

GuardWalker 🔒

Reads a body in statement order and judges the delegated mints against the guards for recipient and token. A code-less proof may cover a later delegation, but a callback must run after ownership is established to match _safeMint: the receiver can inspect ownerOf, balances, or reenter during the hook. Such a callback covers delegations still pending, the revert undoing them, unless a statement in between may leave the function successfully, keeping the unacknowledged token: super._mint(to, id); if (id == 0) return; require(hook...) walks out with token zero standing.

UnsafeMintTarget 🔒

An unsafe mint target and whether every recursive hop preserves the recipient and token it receives. A callback guard needs both guarantees, while a code-less-recipient proof needs only the first.

Enums

GuardCoverage 🔒

How a path established that the recipient can receive the mint. Callback evidence remains valid when summarizing a guard helper, while a code-less proof must be retired once a call could deploy code at the recipient address. Whether the evidence can cover a future mint is tracked separately by GuardWalk::future_coverage.

SelectorEncoding 🔒

The representation of a selector-sized constant at one conversion step.

Constants

ERC721_RECEIVED 🔒

The ERC721 answer meaning the recipient accepts the token, onERC721Received’s selector.

Statics

UNSAFE_OZ_ERC721_MINT

Functions

assigns_to 🔒

Whether an expression writes var: var = x, var += x, var++ or delete var, directly or as one component of a tuple.

is_assembly 🔒

is_canonical_erc721 🔒

The OpenZeppelin contracts whose _mint skips the receiver check. ERC721 and ERC721Upgradeable declare the unchecked _mint; in the v4 line, ERC721Consecutive and ERC721ConsecutiveUpgradeable override it with a construction guard that forwards to the base through super._mint, still without a receiver check. In v5 the Consecutive extension overrides _update instead, and the two extra names match nothing.

is_internal 🔒

is_revert_call 🔒

revert(...), require(false, ...) and assert(false).

keeps_its_value 🔒

Whether the variable cannot change between the delegation and the callback guard. An intervening call can reenter and mutate a state variable after the mint reads it but before the guard does. A local, a parameter, a constant or an immutable cannot be moved that way.

modifier_body_sides 🔒

The statements before and after a modifier’s single top-level placeholder. More complicated expansion shapes are left uncredited rather than guessing which paths execute the body.

named 🔒

Type Aliases

Call 🔒

A resolved call: its target, arguments and span.