create an infinite number of claims with cumulative claimAmount exceeding policy.payoutMaxAmount

[rapidddenis]

In createClaim

gif-contracts/contracts/modules/PolicyController.sol

Lines 277 to 281 in b58fd27

	function createClaim(
	bytes32 processId,
	uint256 claimAmount,
	bytes calldata data
	)

Current implementation allows creation of claims with 0 claimAmount but does not limits how many claims per policy is possible to create nor limits their cumulative claimAmount.
In such situation it is possible to create any number of claims with any cumulative claimAmount before calling PolicyController::confirmClaim() where only part will succeed to confirm. The rest unconfirmed claims must be declined and closed in order to close policy.

[matthiaszimmermann]

this is by design as this simplifies product implementation at times. example: for a crop protection we can use this to create claims for policies in places where the season/harvest was ok (=no payout). this is a handy way to distinguish policies that already have been processed by the loss calculation and policies that still need to be processed.