From e090e144218d1236a1c66dd9045bfda69bfba4ae Mon Sep 17 00:00:00 2001
From: brianrossetti <brossetti1@gmail.com>
Date: Mon, 3 Oct 2022 10:58:10 -0600
Subject: [PATCH] QSP-16  Proposals Can Pass without a Valid Sponsor

---
 contracts/Baal.sol    |  3 ++-
 test/BaalSafe.test.ts | 22 ++++++++++++++++++----
 2 files changed, 20 insertions(+), 5 deletions(-)

diff --git a/contracts/Baal.sol b/contracts/Baal.sol
index 2fc6f8e4..df743af0 100644
--- a/contracts/Baal.sol
+++ b/contracts/Baal.sol
@@ -486,7 +486,8 @@ contract Baal is Module, EIP712Upgradeable, ReentrancyGuardUpgradeable, BaseRela
     {
         Proposal storage prop = proposals[id]; /*alias `proposal` storage pointers*/
 
-        require(state(id) == ProposalState.Ready, "!ready");
+        require(prop.sponsor != address(0), "!sponsor"); /*check proposal has been sponsored*/
+        require(state(id) == ProposalState.Ready, "!ready"); /* check proposal is Ready to process */
 
         ProposalState prevProposalState = state(prop.prevProposalId);
         require(
diff --git a/test/BaalSafe.test.ts b/test/BaalSafe.test.ts
index a0a96531..b9da9f01 100644
--- a/test/BaalSafe.test.ts
+++ b/test/BaalSafe.test.ts
@@ -44,7 +44,7 @@ const revertMessages = {
   submitProposalOffering: "Baal requires an offering",
   submitVoteTimeEnded: "ended",
   sponsorProposalExpired: "expired",
-  sponsorProposalSponsor: "!sponsor",
+  proposalNotSponsored: "!sponsor",
   sponsorProposalNotSubmitted: "!submitted",
   submitVoteNotSponsored: "!sponsored",
   submitVoteNotVoting: "!voting",
@@ -54,6 +54,7 @@ const revertMessages = {
   submitVoteWithSigVoted: "voted",
   submitVoteWithSigMember: "!member",
   processProposalNotReady: "!ready",
+  proposalNotSponsored: '!sponsor',
   ragequitUnordered: "!order",
   // unsetGuildTokensLastToken: 'reverted with panic code 0x32 (Array accessed at an out-of-bounds or negative index)',
   sharesTransferPaused: "!transferable",
@@ -2300,7 +2301,7 @@ describe("Baal contract", function () {
       );
 
       await expect(shamanBaal.sponsorProposal(1)).to.be.revertedWith(
-        revertMessages.sponsorProposalSponsor
+        revertMessages.proposalNotSponsored
       );
     });
 
@@ -2725,8 +2726,21 @@ describe("Baal contract", function () {
       await baal.submitVote(1, yes);
       const state = await baal.state(2);
       expect(state).to.equal(STATES.UNBORN);
+    });
+
+    it("require fail - no sponser", async function () {
+      await baal.submitProposal(
+        proposal.data,
+        proposal.expiration,
+        proposal.baalGas,
+        ethers.utils.id(proposal.details)
+      );
+      await baal.submitVote(1, yes);
+      const state = await baal.state(2);
+      expect(state).to.equal(STATES.UNBORN);
+      proposal.sponsor = null;
       await expect(baal.processProposal(2, proposal.data)).to.be.revertedWith(
-        revertMessages.processProposalNotReady
+        revertMessages.proposalNotSponsored
       );
     });
 
@@ -2780,7 +2794,7 @@ describe("Baal contract", function () {
         ethers.utils.id(proposal.details)
       );
       await expect(baal.processProposal(1, proposal.data)).to.be.revertedWith(
-        revertMessages.processProposalNotReady
+        revertMessages.proposalNotSponsored
       ); // fail at submitted
       await baal.sponsorProposal(1);
       await expect(baal.processProposal(1, proposal.data)).to.be.revertedWith(