#include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include namespace { const TestingSetup* g_setup; } // namespace void initialize_pdb() { static const auto testing_setup = MakeNoLogFileContext(); g_setup = testing_setup.get(); } PartiallyDownloadedBlock::IsBlockMutatedFn FuzzedIsBlockMutated(bool result) { return [result](const CBlock& block, bool) { return result; }; } FUZZ_TARGET(partially_downloaded_block, .init = initialize_pdb) { SeedRandomStateForTest(SeedRand::ZEROS); FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()}; SetMockTime(ConsumeTime(fuzzed_data_provider)); auto block{ConsumeDeserializable(fuzzed_data_provider, TX_WITH_WITNESS)}; if (!block || block->vtx.size() == 0 || block->vtx.size() >= std::numeric_limits::max()) { return; } CBlockHeaderAndShortTxIDs cmpctblock{*block, fuzzed_data_provider.ConsumeIntegral()}; bilingual_str error; CTxMemPool pool{MemPoolOptionsForTest(g_setup->m_node), error}; Assert(error.empty()); PartiallyDownloadedBlock pdb{&pool}; // Set of available transactions (mempool or extra_txn) std::set available; // The coinbase is always available available.insert(0); std::vector extra_txn; for (size_t i = 1; i < block->vtx.size(); ++i) { auto tx{block->vtx[i]}; bool add_to_extra_txn{fuzzed_data_provider.ConsumeBool()}; bool add_to_mempool{fuzzed_data_provider.ConsumeBool()}; if (add_to_extra_txn) { extra_txn.emplace_back(tx); available.insert(i); } if (add_to_mempool && !pool.exists(GenTxid::Txid(tx->GetHash()))) { LOCK2(cs_main, pool.cs); AddToMempool(pool, ConsumeTxMemPoolEntry(fuzzed_data_provider, *tx)); available.insert(i); } } auto init_status{pdb.InitData(cmpctblock, extra_txn)}; std::vector missing; // Whether we skipped a transaction that should be included in `missing`. // FillBlock should never return READ_STATUS_OK if that is the case. bool skipped_missing{false}; for (size_t i = 0; i < cmpctblock.BlockTxCount(); i++) { // If init_status == READ_STATUS_OK then a available transaction in the // compact block (i.e. IsTxAvailable(i) == true) implies that we marked // that transaction as available above (i.e. available.count(i) > 0). // The reverse is not true, due to possible compact block short id // collisions (i.e. available.count(i) > 0 does not imply // IsTxAvailable(i) == true). if (init_status == READ_STATUS_OK) { assert(!pdb.IsTxAvailable(i) || available.count(i) > 0); } bool skip{fuzzed_data_provider.ConsumeBool()}; if (!pdb.IsTxAvailable(i) && !skip) { missing.push_back(block->vtx[i]); } skipped_missing |= (!pdb.IsTxAvailable(i) && skip); } bool segwit_active{fuzzed_data_provider.ConsumeBool()}; // Mock IsBlockMutated bool fail_block_mutated{fuzzed_data_provider.ConsumeBool()}; pdb.m_check_block_mutated_mock = FuzzedIsBlockMutated(fail_block_mutated); CBlock reconstructed_block; auto fill_status{pdb.FillBlock(reconstructed_block, missing, segwit_active)}; switch (fill_status) { case READ_STATUS_OK: assert(!skipped_missing); assert(!fail_block_mutated); assert(block->GetHash() == reconstructed_block.GetHash()); break; case READ_STATUS_FAILED: assert(fail_block_mutated); break; case READ_STATUS_INVALID: break; } }