Skip to content

Commit af8ec1d

Browse files
author
MarcoFalke
committed
Merge #20375: fuzz: Improve coverage for CPartialMerkleTree fuzzing harness
3c77b80 fuzz: Improve coverage for CPartialMerkleTree fuzzing harness (practicalswift) Pull request description: Improve coverage for `CPartialMerkleTree` fuzzing harness. See [`doc/fuzzing.md`](https://github.com/bitcoin/bitcoin/blob/master/doc/fuzzing.md) for information on how to fuzz Bitcoin Core. Don't forget to contribute any coverage increasing inputs you find to the [Bitcoin Core fuzzing corpus repo](https://github.com/bitcoin-core/qa-assets). Happy fuzzing :) ACKs for top commit: MarcoFalke: ACK 3c77b80 Tree-SHA512: a1fa0f7650a5ee5ff83f35e41b9faf6c34671fc304b9af00e5b83073f21d50bcbe91c2428fa64d05dc42a7c521bfd24031e307c7f4abf9ded469d69a55c5d64a
2 parents 027e51f + 3c77b80 commit af8ec1d

File tree

1 file changed

+29
-5
lines changed

1 file changed

+29
-5
lines changed

src/test/fuzz/merkleblock.cpp

Lines changed: 29 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,36 @@
1616
void test_one_input(const std::vector<uint8_t>& buffer)
1717
{
1818
FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size());
19-
std::optional<CPartialMerkleTree> partial_merkle_tree = ConsumeDeserializable<CPartialMerkleTree>(fuzzed_data_provider);
20-
if (!partial_merkle_tree) {
21-
return;
19+
CPartialMerkleTree partial_merkle_tree;
20+
switch (fuzzed_data_provider.ConsumeIntegralInRange<int>(0, 1)) {
21+
case 0: {
22+
const std::optional<CPartialMerkleTree> opt_partial_merkle_tree = ConsumeDeserializable<CPartialMerkleTree>(fuzzed_data_provider);
23+
if (opt_partial_merkle_tree) {
24+
partial_merkle_tree = *opt_partial_merkle_tree;
25+
}
26+
break;
2227
}
23-
(void)partial_merkle_tree->GetNumTransactions();
28+
case 1: {
29+
CMerkleBlock merkle_block;
30+
const std::optional<CBlock> opt_block = ConsumeDeserializable<CBlock>(fuzzed_data_provider);
31+
CBloomFilter bloom_filter;
32+
std::set<uint256> txids;
33+
if (opt_block && !opt_block->vtx.empty()) {
34+
if (fuzzed_data_provider.ConsumeBool()) {
35+
merkle_block = CMerkleBlock{*opt_block, bloom_filter};
36+
} else if (fuzzed_data_provider.ConsumeBool()) {
37+
while (fuzzed_data_provider.ConsumeBool()) {
38+
txids.insert(ConsumeUInt256(fuzzed_data_provider));
39+
}
40+
merkle_block = CMerkleBlock{*opt_block, txids};
41+
}
42+
}
43+
partial_merkle_tree = merkle_block.txn;
44+
break;
45+
}
46+
}
47+
(void)partial_merkle_tree.GetNumTransactions();
2448
std::vector<uint256> matches;
2549
std::vector<unsigned int> indices;
26-
(void)partial_merkle_tree->ExtractMatches(matches, indices);
50+
(void)partial_merkle_tree.ExtractMatches(matches, indices);
2751
}

0 commit comments

Comments
 (0)