Firestarter

It is important to validate inputs, even if they only come from trusted addresses, to avoid human error. The following functions do not have a proper validation of input parameters: 1. `Vesting.init()` does not check if the `presale` parameter is different from `address(0)`. 2. `Vesting.initialize()` does not check if the `_rewardToken` parameter is different from `address(0)`. This function does not check if the `_param` parameter attributes are in the permitted ranges, e.g. `_params.initialUnlock > block.timestamp`. 3. `TokenLock.initialize()` does not check if the `_token` parameter is different from `address(0)`. 4. `Presale.initialize()` does not check if the `AddressParams` are different from `address(0)`. Note that if the `projectOwner` would be `address(0)` by mistake, the `withdrawFunds()` and `withdrawUnsoldToken()` functions would no longer work. 5. `Presale.initialize()` does not check if the `PresaleParams` are greater than `0` and most importantly that `_presale.startTime > block.timestamp`. 6. `Staking.initialize()` does not validate that the `_lpToken` and `_flame` input parameters are different than `address(0)`. This function does not check if the `_startTime > block.timestamp` and `_earlyWithdrawal` is not checked to be shorter than `stakingPeriod`