script_interpreter.cpp
1 // Copyright (c) 2020 The Bitcoin Core developers 2 // Distributed under the MIT software license, see the accompanying 3 // file COPYING or http://www.opensource.org/licenses/mit-license.php. 4 5 #include <primitives/transaction.h> 6 #include <script/interpreter.h> 7 #include <test/fuzz/FuzzedDataProvider.h> 8 #include <test/fuzz/fuzz.h> 9 #include <test/fuzz/util.h> 10 11 #include <cstdint> 12 #include <optional> 13 #include <string> 14 #include <vector> 15 16 bool CastToBool(const std::vector<unsigned char>& vch); 17 18 FUZZ_TARGET(script_interpreter) 19 { 20 FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size()); 21 { 22 const CScript script_code = ConsumeScript(fuzzed_data_provider); 23 const std::optional<CMutableTransaction> mtx = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS); 24 if (mtx) { 25 const CTransaction tx_to{*mtx}; 26 const unsigned int in = fuzzed_data_provider.ConsumeIntegral<unsigned int>(); 27 if (in < tx_to.vin.size()) { 28 auto n_hash_type = fuzzed_data_provider.ConsumeIntegral<int>(); 29 auto amount = ConsumeMoney(fuzzed_data_provider); 30 auto sigversion = fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}); 31 (void)SignatureHash(script_code, tx_to, in, n_hash_type, amount, sigversion, nullptr); 32 const std::optional<CMutableTransaction> mtx_precomputed = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS); 33 if (mtx_precomputed) { 34 const CTransaction tx_precomputed{*mtx_precomputed}; 35 const PrecomputedTransactionData precomputed_transaction_data{tx_precomputed}; 36 n_hash_type = fuzzed_data_provider.ConsumeIntegral<int>(); 37 amount = ConsumeMoney(fuzzed_data_provider); 38 sigversion = fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}); 39 (void)SignatureHash(script_code, tx_to, in, n_hash_type, amount, sigversion, &precomputed_transaction_data); 40 } 41 } 42 } 43 } 44 { 45 (void)CastToBool(ConsumeRandomLengthByteVector(fuzzed_data_provider)); 46 } 47 }