Attacker can trigger temporary shutdown due to RedStonePriceFeedBase missing gas check

Description:

RedStonePriceFeedBase::_getCurrentRedStoneResponse() does not check gas left in the catch block, allowing attackers to forward just a bit of gas to make the call to chainlink revert and trigger a temporary shutdown.

Impact:

Protocol DoS.

Recommended Mitigation:

See the LiquityV2 check here.

0xSimao:

Fixed in #a0041e1.