// Copyright (c) 2024-present The Bitcoin Core developers // Distributed under the MIT software license, see the accompanying // file COPYING or http://www.opensource.org/licenses/mit-license.php. #include #include #include #include #include #include #include #include #include #include #include #include #include #include using util::ToString; namespace wallet { namespace { const TestingSetup* g_setup; void initialize_setup() { static const auto testing_setup = MakeNoLogFileContext(); g_setup = testing_setup.get(); } FUZZ_TARGET(wallet_create_transaction, .init = initialize_setup) { SeedRandomStateForTest(SeedRand::ZEROS); FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()}; SetMockTime(ConsumeTime(fuzzed_data_provider)); const auto& node = g_setup->m_node; Chainstate& chainstate{node.chainman->ActiveChainstate()}; ArgsManager& args = *node.args; args.ForceSetArg("-dustrelayfee", ToString(fuzzed_data_provider.ConsumeIntegralInRange(0, MAX_MONEY))); FuzzedWallet fuzzed_wallet{ *g_setup->m_node.chain, "fuzzed_wallet_a", "tprv8ZgxMBicQKsPd1QwsGgzfu2pcPYbBosZhJknqreRHgsWx32nNEhMjGQX2cgFL8n6wz9xdDYwLcs78N4nsCo32cxEX8RBtwGsEGgybLiQJfk", }; CCoinControl coin_control; if (fuzzed_data_provider.ConsumeBool()) coin_control.m_version = fuzzed_data_provider.ConsumeIntegral(); coin_control.m_avoid_partial_spends = fuzzed_data_provider.ConsumeBool(); coin_control.m_include_unsafe_inputs = fuzzed_data_provider.ConsumeBool(); if (fuzzed_data_provider.ConsumeBool()) coin_control.m_confirm_target = fuzzed_data_provider.ConsumeIntegralInRange(0, 999'000); coin_control.destChange = fuzzed_data_provider.ConsumeBool() ? fuzzed_wallet.GetDestination(fuzzed_data_provider) : ConsumeTxDestination(fuzzed_data_provider); if (fuzzed_data_provider.ConsumeBool()) coin_control.m_change_type = fuzzed_data_provider.PickValueInArray(OUTPUT_TYPES); if (fuzzed_data_provider.ConsumeBool()) coin_control.m_feerate = CFeeRate(ConsumeMoney(fuzzed_data_provider, /*max=*/COIN)); coin_control.m_allow_other_inputs = fuzzed_data_provider.ConsumeBool(); coin_control.m_locktime = fuzzed_data_provider.ConsumeIntegral(); coin_control.fOverrideFeeRate = fuzzed_data_provider.ConsumeBool(); int next_locktime{0}; CAmount all_values{0}; LIMITED_WHILE(fuzzed_data_provider.ConsumeBool(), 10000) { CMutableTransaction tx; tx.nLockTime = next_locktime++; tx.vout.resize(1); CAmount n_value{ConsumeMoney(fuzzed_data_provider)}; all_values += n_value; if (all_values > MAX_MONEY) return; tx.vout[0].nValue = n_value; tx.vout[0].scriptPubKey = GetScriptForDestination(fuzzed_wallet.GetDestination(fuzzed_data_provider)); LOCK(fuzzed_wallet.wallet->cs_wallet); auto txid{tx.GetHash()}; auto ret{fuzzed_wallet.wallet->mapWallet.emplace(std::piecewise_construct, std::forward_as_tuple(txid), std::forward_as_tuple(MakeTransactionRef(std::move(tx)), TxStateConfirmed{chainstate.m_chain.Tip()->GetBlockHash(), chainstate.m_chain.Height(), /*index=*/0}))}; assert(ret.second); } std::vector recipients; LIMITED_WHILE(fuzzed_data_provider.ConsumeBool(), 100) { CTxDestination destination; CallOneOf( fuzzed_data_provider, [&] { destination = fuzzed_wallet.GetDestination(fuzzed_data_provider); }, [&] { CScript script; script << OP_RETURN; destination = CNoDestination{script}; }, [&] { destination = ConsumeTxDestination(fuzzed_data_provider); } ); recipients.push_back({destination, /*nAmount=*/ConsumeMoney(fuzzed_data_provider), /*fSubtractFeeFromAmount=*/fuzzed_data_provider.ConsumeBool()}); } std::optional change_pos; if (fuzzed_data_provider.ConsumeBool()) change_pos = fuzzed_data_provider.ConsumeIntegral(); (void)CreateTransaction(*fuzzed_wallet.wallet, recipients, change_pos, coin_control); } } // namespace } // namespace wallet