False positive "reachable exception" on fallback function

I’m getting a false positive on a few contracts that don’t have a fallback function declared.

Here’s the report output:

Exception state

• Type: Informational
• Contract: Vault
• Function name: _function_0x43d726d6
• PC address: 979

Description

A reachable exception (opcode 0xfe) has been detected. This can be caused by type errors, division by zero, out-of-bounds array access, or assert violations. This is acceptable in most situations. Note however that assert() should only be used to check invariants. Use require() for regular input checking.

In Vault.json:44

state == _state

Note that the given source code corresponds to a modifier with require(state == _state_), not assert.

Two situations I see there are here:

• https://github.com/tokenfoundry/sale-contracts/blob/master/contracts/DisbursementHandler.sol#L72
• https://github.com/tokenfoundry/sale-contracts/blob/master/contracts/Vault.sol#L44

[muellerberndt]

In both cases out-of-bounds array access can cause an exception.

mapping(address => Disbursement[]) public disbursements

^^ Out-of-bounds-access in the automatically generated getter function.

[sameepsi]

@b-mueller I don’t think so. In that case it will simply set it. In solidity everything is set to default if it does not exists