1  // Copyright (c) 2020 The Bitcoin Core developers
 2  // Distributed under the MIT software license, see the accompanying
 3  // file COPYING or http://www.opensource.org/licenses/mit-license.php.
 4  
 5  #include <primitives/transaction.h>
 6  #include <script/interpreter.h>
 7  #include <test/fuzz/FuzzedDataProvider.h>
 8  #include <test/fuzz/fuzz.h>
 9  #include <test/fuzz/util.h>
10  
11  #include <cstdint>
12  #include <optional>
13  #include <string>
14  #include <vector>
15  
16  bool CastToBool(const std::vector<unsigned char>& vch);
17  
18  FUZZ_TARGET(script_interpreter)
19  {
20      FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size());
21      {
22          const CScript script_code = ConsumeScript(fuzzed_data_provider);
23          const std::optional<CMutableTransaction> mtx = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS);
24          if (mtx) {
25              const CTransaction tx_to{*mtx};
26              const unsigned int in = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
27              if (in < tx_to.vin.size()) {
28                  (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), nullptr);
29                  const std::optional<CMutableTransaction> mtx_precomputed = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS);
30                  if (mtx_precomputed) {
31                      const CTransaction tx_precomputed{*mtx_precomputed};
32                      const PrecomputedTransactionData precomputed_transaction_data{tx_precomputed};
33                      (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), &precomputed_transaction_data);
34                  }
35              }
36          }
37      }
38      {
39          (void)CastToBool(ConsumeRandomLengthByteVector(fuzzed_data_provider));
40      }
41  }