Skip to content

Commit 43fb8f0

Browse files
tests: Add fuzzing harness for functions in script/bitcoinconsensus.h
1 parent 8de7271 commit 43fb8f0

File tree

2 files changed

+38
-0
lines changed

2 files changed

+38
-0
lines changed

src/Makefile.test.include

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -110,6 +110,7 @@ FUZZ_TARGETS = \
110110
test/fuzz/rbf \
111111
test/fuzz/rolling_bloom_filter \
112112
test/fuzz/script \
113+
test/fuzz/script_bitcoin_consensus \
113114
test/fuzz/script_deserialize \
114115
test/fuzz/script_flags \
115116
test/fuzz/script_ops \
@@ -941,6 +942,12 @@ test_fuzz_script_LDADD = $(FUZZ_SUITE_LD_COMMON)
941942
test_fuzz_script_LDFLAGS = $(RELDFLAGS) $(AM_LDFLAGS) $(LIBTOOL_APP_LDFLAGS)
942943
test_fuzz_script_SOURCES = test/fuzz/script.cpp
943944

945+
test_fuzz_script_bitcoin_consensus_CPPFLAGS = $(AM_CPPFLAGS) $(BITCOIN_INCLUDES)
946+
test_fuzz_script_bitcoin_consensus_CXXFLAGS = $(AM_CXXFLAGS) $(PIE_FLAGS)
947+
test_fuzz_script_bitcoin_consensus_LDADD = $(FUZZ_SUITE_LD_COMMON)
948+
test_fuzz_script_bitcoin_consensus_LDFLAGS = $(RELDFLAGS) $(AM_LDFLAGS) $(LIBTOOL_APP_LDFLAGS)
949+
test_fuzz_script_bitcoin_consensus_SOURCES = test/fuzz/script_bitcoin_consensus.cpp
950+
944951
test_fuzz_script_deserialize_CPPFLAGS = $(AM_CPPFLAGS) $(BITCOIN_INCLUDES) -DSCRIPT_DESERIALIZE=1
945952
test_fuzz_script_deserialize_CXXFLAGS = $(AM_CXXFLAGS) $(PIE_FLAGS)
946953
test_fuzz_script_deserialize_LDADD = $(FUZZ_SUITE_LD_COMMON)
Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
// Copyright (c) 2020 The Bitcoin Core developers
2+
// Distributed under the MIT software license, see the accompanying
3+
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4+
5+
#include <script/bitcoinconsensus.h>
6+
#include <script/interpreter.h>
7+
#include <test/fuzz/FuzzedDataProvider.h>
8+
#include <test/fuzz/fuzz.h>
9+
#include <test/fuzz/util.h>
10+
11+
#include <cstdint>
12+
#include <string>
13+
#include <vector>
14+
15+
void test_one_input(const std::vector<uint8_t>& buffer)
16+
{
17+
FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size());
18+
const std::vector<uint8_t> random_bytes_1 = ConsumeRandomLengthByteVector(fuzzed_data_provider);
19+
const std::vector<uint8_t> random_bytes_2 = ConsumeRandomLengthByteVector(fuzzed_data_provider);
20+
const CAmount money = ConsumeMoney(fuzzed_data_provider);
21+
bitcoinconsensus_error err;
22+
bitcoinconsensus_error* err_p = fuzzed_data_provider.ConsumeBool() ? &err : nullptr;
23+
const unsigned int n_in = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
24+
const unsigned int flags = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
25+
assert(bitcoinconsensus_version() == BITCOINCONSENSUS_API_VER);
26+
if ((flags & SCRIPT_VERIFY_WITNESS) != 0 && (flags & SCRIPT_VERIFY_P2SH) == 0) {
27+
return;
28+
}
29+
(void)bitcoinconsensus_verify_script(random_bytes_1.data(), random_bytes_1.size(), random_bytes_2.data(), random_bytes_2.size(), n_in, flags, err_p);
30+
(void)bitcoinconsensus_verify_script_with_amount(random_bytes_1.data(), random_bytes_1.size(), money, random_bytes_2.data(), random_bytes_2.size(), n_in, flags, err_p);
31+
}

0 commit comments

Comments
 (0)