Add note about memory manipulation in MerkleTree (#5213)

OpenZeppelin · Sep 19, 2024 · b1f6bbe · b1f6bbe
1 parent 8a309ab
commit b1f6bbe
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/contracts/utils/structs/MerkleTree.sol b/contracts/utils/structs/MerkleTree.sol
@@ -70,7 +70,10 @@ library MerkleTree {
      * should be pushed to it using the custom push function, which should be the same one as used during the setup.
      *
      * IMPORTANT: Providing a custom hashing function is a security-sensitive operation since it may
-     * compromise the soundness of the tree. Consider using functions from {Hashes}.
+     * compromise the soundness of the tree.
+     *
+     * NOTE: Consider verifying that the hashing function does not manipulate the memory state directly and that it
+     * follows the Solidity memory safety rules. Otherwise, it may lead to unexpected behavior.
      */
     function setup(
         Bytes32PushTree storage self,