sigopcount_tests.cpp
1 // Copyright (c) 2012-present The Bitcoin Core developers 2 // Distributed under the MIT software license, see the accompanying 3 // file COPYING or http://www.opensource.org/licenses/mit-license.php. 4 5 #include <addresstype.h> 6 #include <coins.h> 7 #include <consensus/consensus.h> 8 #include <consensus/tx_verify.h> 9 #include <key.h> 10 #include <pubkey.h> 11 #include <script/interpreter.h> 12 #include <script/script.h> 13 #include <script/solver.h> 14 #include <test/util/setup_common.h> 15 #include <uint256.h> 16 17 #include <vector> 18 19 #include <boost/test/unit_test.hpp> 20 21 // Helpers: 22 static std::vector<unsigned char> 23 Serialize(const CScript& s) 24 { 25 std::vector<unsigned char> sSerialized(s.begin(), s.end()); 26 return sSerialized; 27 } 28 29 BOOST_FIXTURE_TEST_SUITE(sigopcount_tests, BasicTestingSetup) 30 31 BOOST_AUTO_TEST_CASE(GetSigOpCount) 32 { 33 // Test CScript::GetSigOpCount() 34 CScript s1; 35 BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 0U); 36 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 0U); 37 38 uint160 dummy; 39 s1 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << OP_2 << OP_CHECKMULTISIG; 40 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 2U); 41 s1 << OP_IF << OP_CHECKSIG << OP_ENDIF; 42 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 3U); 43 BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 21U); 44 45 CScript p2sh = GetScriptForDestination(ScriptHash(s1)); 46 CScript scriptSig; 47 scriptSig << OP_0 << Serialize(s1); 48 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig), 3U); 49 50 std::vector<CPubKey> keys; 51 for (int i = 0; i < 3; i++) 52 { 53 CKey k = GenerateRandomKey(); 54 keys.push_back(k.GetPubKey()); 55 } 56 CScript s2 = GetScriptForMultisig(1, keys); 57 BOOST_CHECK_EQUAL(s2.GetSigOpCount(true), 3U); 58 BOOST_CHECK_EQUAL(s2.GetSigOpCount(false), 20U); 59 60 p2sh = GetScriptForDestination(ScriptHash(s2)); 61 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(true), 0U); 62 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(false), 0U); 63 CScript scriptSig2; 64 scriptSig2 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << Serialize(s2); 65 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig2), 3U); 66 } 67 68 /** 69 * Verifies script execution of the zeroth scriptPubKey of tx output and 70 * zeroth scriptSig and witness of tx input. 71 */ 72 static ScriptError VerifyWithFlag(const CTransaction& output, const CMutableTransaction& input, script_verify_flags flags) 73 { 74 ScriptError error; 75 CTransaction inputi(input); 76 bool ret = VerifyScript(inputi.vin[0].scriptSig, output.vout[0].scriptPubKey, &inputi.vin[0].scriptWitness, flags, TransactionSignatureChecker(&inputi, 0, output.vout[0].nValue, MissingDataBehavior::ASSERT_FAIL), &error); 77 BOOST_CHECK((ret == true) == (error == SCRIPT_ERR_OK)); 78 79 return error; 80 } 81 82 /** 83 * Builds a creationTx from scriptPubKey and a spendingTx from scriptSig 84 * and witness such that spendingTx spends output zero of creationTx. 85 * Also inserts creationTx's output into the coins view. 86 */ 87 static void BuildTxs(CMutableTransaction& spendingTx, CCoinsViewCache& coins, CMutableTransaction& creationTx, const CScript& scriptPubKey, const CScript& scriptSig, const CScriptWitness& witness) 88 { 89 creationTx.version = 1; 90 creationTx.vin.resize(1); 91 creationTx.vin[0].prevout.SetNull(); 92 creationTx.vin[0].scriptSig = CScript(); 93 creationTx.vout.resize(1); 94 creationTx.vout[0].nValue = 1; 95 creationTx.vout[0].scriptPubKey = scriptPubKey; 96 97 spendingTx.version = 1; 98 spendingTx.vin.resize(1); 99 spendingTx.vin[0].prevout.hash = creationTx.GetHash(); 100 spendingTx.vin[0].prevout.n = 0; 101 spendingTx.vin[0].scriptSig = scriptSig; 102 spendingTx.vin[0].scriptWitness = witness; 103 spendingTx.vout.resize(1); 104 spendingTx.vout[0].nValue = 1; 105 spendingTx.vout[0].scriptPubKey = CScript(); 106 107 AddCoins(coins, CTransaction(creationTx), 0); 108 } 109 110 BOOST_AUTO_TEST_CASE(GetTxSigOpCost) 111 { 112 // Transaction creates outputs 113 CMutableTransaction creationTx; 114 // Transaction that spends outputs and whose 115 // sig op cost is going to be tested 116 CMutableTransaction spendingTx; 117 118 // Create utxo set 119 CCoinsViewCache coins{&CoinsViewEmpty::Get()}; 120 // Create key 121 CKey key = GenerateRandomKey(); 122 CPubKey pubkey = key.GetPubKey(); 123 // Default flags 124 const script_verify_flags flags{SCRIPT_VERIFY_WITNESS | SCRIPT_VERIFY_P2SH}; 125 126 // Multisig script (legacy counting) 127 { 128 CScript scriptPubKey = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY; 129 // Do not use a valid signature to avoid using wallet operations. 130 CScript scriptSig = CScript() << OP_0 << OP_0; 131 132 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness()); 133 // Legacy counting only includes signature operations in scriptSigs and scriptPubKeys 134 // of a transaction and does not take the actual executed sig operations into account. 135 // spendingTx in itself does not contain a signature operation. 136 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0); 137 // creationTx contains two signature operations in its scriptPubKey, but legacy counting 138 // is not accurate. 139 assert(GetTransactionSigOpCost(CTransaction(creationTx), coins, flags) == MAX_PUBKEYS_PER_MULTISIG * WITNESS_SCALE_FACTOR); 140 // Sanity check: script verification fails because of an invalid signature. 141 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY); 142 } 143 144 // Multisig nested in P2SH 145 { 146 CScript redeemScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY; 147 CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript)); 148 CScript scriptSig = CScript() << OP_0 << OP_0 << ToByteVector(redeemScript); 149 150 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness()); 151 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2 * WITNESS_SCALE_FACTOR); 152 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY); 153 154 // P2SH sigops are not counted if we don't set the SCRIPT_VERIFY_P2SH flag 155 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, /*flags=*/0) == 0); 156 } 157 158 // P2WPKH witness program 159 { 160 CScript scriptPubKey = GetScriptForDestination(WitnessV0KeyHash(pubkey)); 161 CScript scriptSig = CScript(); 162 CScriptWitness scriptWitness; 163 scriptWitness.stack.emplace_back(0); 164 scriptWitness.stack.emplace_back(0); 165 166 167 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 168 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1); 169 // No signature operations if we don't verify the witness. 170 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0); 171 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY); 172 173 // The sig op cost for witness version != 0 is zero. 174 assert(scriptPubKey[0] == 0x00); 175 scriptPubKey[0] = 0x51; 176 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 177 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0); 178 scriptPubKey[0] = 0x00; 179 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 180 181 // The witness of a coinbase transaction is not taken into account. 182 spendingTx.vin[0].prevout.SetNull(); 183 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0); 184 } 185 186 // P2WPKH nested in P2SH 187 { 188 CScript scriptSig = GetScriptForDestination(WitnessV0KeyHash(pubkey)); 189 CScript scriptPubKey = GetScriptForDestination(ScriptHash(scriptSig)); 190 scriptSig = CScript() << ToByteVector(scriptSig); 191 CScriptWitness scriptWitness; 192 scriptWitness.stack.emplace_back(0); 193 scriptWitness.stack.emplace_back(0); 194 195 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 196 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1); 197 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY); 198 } 199 200 // P2WSH witness program 201 { 202 CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY; 203 CScript scriptPubKey = GetScriptForDestination(WitnessV0ScriptHash(witnessScript)); 204 CScript scriptSig = CScript(); 205 CScriptWitness scriptWitness; 206 scriptWitness.stack.emplace_back(0); 207 scriptWitness.stack.emplace_back(0); 208 scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end()); 209 210 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 211 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2); 212 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0); 213 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY); 214 } 215 216 // P2WSH nested in P2SH 217 { 218 CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY; 219 CScript redeemScript = GetScriptForDestination(WitnessV0ScriptHash(witnessScript)); 220 CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript)); 221 CScript scriptSig = CScript() << ToByteVector(redeemScript); 222 CScriptWitness scriptWitness; 223 scriptWitness.stack.emplace_back(0); 224 scriptWitness.stack.emplace_back(0); 225 scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end()); 226 227 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness); 228 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2); 229 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY); 230 } 231 } 232 233 BOOST_AUTO_TEST_SUITE_END()