Branch data Line data Source code
1 : : // Copyright (c) 2009-2010 Satoshi Nakamoto
2 : : // Copyright (c) 2009-2022 The Bitcoin Core developers
3 : : // Distributed under the MIT software license, see the accompanying
4 : : // file COPYING or http://www.opensource.org/licenses/mit-license.php.
5 : :
6 : : #ifndef BITCOIN_POLICY_POLICY_H
7 : : #define BITCOIN_POLICY_POLICY_H
8 : :
9 : : #include <consensus/amount.h>
10 : : #include <consensus/consensus.h>
11 : : #include <primitives/transaction.h>
12 : : #include <script/interpreter.h>
13 : : #include <script/solver.h>
14 : : #include <util/feefrac.h>
15 : :
16 : : #include <cstdint>
17 : : #include <string>
18 : :
19 : : class CCoinsViewCache;
20 : : class CFeeRate;
21 : : class CScript;
22 : :
23 : : /** Default for -blockmaxweight, which controls the range of block weights the mining code will create **/
24 : : static constexpr unsigned int DEFAULT_BLOCK_MAX_WEIGHT{MAX_BLOCK_WEIGHT};
25 : : /** Default for -blockreservedweight **/
26 : : static constexpr unsigned int DEFAULT_BLOCK_RESERVED_WEIGHT{8000};
27 : : /** This accounts for the block header, var_int encoding of the transaction count and a minimally viable
28 : : * coinbase transaction. It adds an additional safety margin, because even with a thorough understanding
29 : : * of block serialization, it's easy to make a costly mistake when trying to squeeze every last byte.
30 : : * Setting a lower value is prevented at startup. */
31 : : static constexpr unsigned int MINIMUM_BLOCK_RESERVED_WEIGHT{2000};
32 : : /** Default for -blockmintxfee, which sets the minimum feerate for a transaction in blocks created by mining code **/
33 : : static constexpr unsigned int DEFAULT_BLOCK_MIN_TX_FEE{1};
34 : : /** The maximum weight for transactions we're willing to relay/mine */
35 : : static constexpr int32_t MAX_STANDARD_TX_WEIGHT{400000};
36 : : /** The minimum non-witness size for transactions we're willing to relay/mine: one larger than 64 */
37 : : static constexpr unsigned int MIN_STANDARD_TX_NONWITNESS_SIZE{65};
38 : : /** Maximum number of signature check operations in an IsStandard() P2SH script */
39 : : static constexpr unsigned int MAX_P2SH_SIGOPS{15};
40 : : /** The maximum number of sigops we're willing to relay/mine in a single tx */
41 : : static constexpr unsigned int MAX_STANDARD_TX_SIGOPS_COST{MAX_BLOCK_SIGOPS_COST/5};
42 : : /** The maximum number of potentially executed legacy signature operations in a single standard tx */
43 : : static constexpr unsigned int MAX_TX_LEGACY_SIGOPS{2'500};
44 : : /** Default for -incrementalrelayfee, which sets the minimum feerate increase for mempool limiting or replacement **/
45 : : static constexpr unsigned int DEFAULT_INCREMENTAL_RELAY_FEE{100};
46 : : /** Default for -bytespersigop */
47 : : static constexpr unsigned int DEFAULT_BYTES_PER_SIGOP{20};
48 : : /** Default for -permitbaremultisig */
49 : : static constexpr bool DEFAULT_PERMIT_BAREMULTISIG{true};
50 : : /** The maximum number of witness stack items in a standard P2WSH script */
51 : : static constexpr unsigned int MAX_STANDARD_P2WSH_STACK_ITEMS{100};
52 : : /** The maximum size in bytes of each witness stack item in a standard P2WSH script */
53 : : static constexpr unsigned int MAX_STANDARD_P2WSH_STACK_ITEM_SIZE{80};
54 : : /** The maximum size in bytes of each witness stack item in a standard BIP 342 script (Taproot, leaf version 0xc0) */
55 : : static constexpr unsigned int MAX_STANDARD_TAPSCRIPT_STACK_ITEM_SIZE{80};
56 : : /** The maximum size in bytes of a standard witnessScript */
57 : : static constexpr unsigned int MAX_STANDARD_P2WSH_SCRIPT_SIZE{3600};
58 : : /** The maximum size of a standard ScriptSig */
59 : : static constexpr unsigned int MAX_STANDARD_SCRIPTSIG_SIZE{1650};
60 : : /** Min feerate for defining dust.
61 : : * Changing the dust limit changes which transactions are
62 : : * standard and should be done with care and ideally rarely. It makes sense to
63 : : * only increase the dust limit after prior releases were already not creating
64 : : * outputs below the new threshold */
65 : : static constexpr unsigned int DUST_RELAY_TX_FEE{3000};
66 : : /** Default for -minrelaytxfee, minimum relay fee for transactions */
67 : : static constexpr unsigned int DEFAULT_MIN_RELAY_TX_FEE{100};
68 : : /** Maximum number of transactions per cluster (default) */
69 : : static constexpr unsigned int DEFAULT_CLUSTER_LIMIT{64};
70 : : /** Maximum size of cluster in virtual kilobytes */
71 : : static constexpr unsigned int DEFAULT_CLUSTER_SIZE_LIMIT_KVB{101};
72 : : /** Default for -limitancestorcount, max number of in-mempool ancestors */
73 : : static constexpr unsigned int DEFAULT_ANCESTOR_LIMIT{25};
74 : : /** Default for -limitancestorsize, maximum kilobytes of tx + all in-mempool ancestors */
75 : : static constexpr unsigned int DEFAULT_ANCESTOR_SIZE_LIMIT_KVB{101};
76 : : /** Default for -limitdescendantcount, max number of in-mempool descendants */
77 : : static constexpr unsigned int DEFAULT_DESCENDANT_LIMIT{25};
78 : : /** Default for -limitdescendantsize, maximum kilobytes of in-mempool descendants */
79 : : static constexpr unsigned int DEFAULT_DESCENDANT_SIZE_LIMIT_KVB{101};
80 : : /** Default for -datacarrier */
81 : : static const bool DEFAULT_ACCEPT_DATACARRIER = true;
82 : : /**
83 : : * Default setting for -datacarriersize in vbytes.
84 : : */
85 : : static const unsigned int MAX_OP_RETURN_RELAY = MAX_STANDARD_TX_WEIGHT / WITNESS_SCALE_FACTOR;
86 : : /**
87 : : * An extra transaction can be added to a package, as long as it only has one
88 : : * ancestor and is no larger than this. Not really any reason to make this
89 : : * configurable as it doesn't materially change DoS parameters.
90 : : */
91 : : static constexpr unsigned int EXTRA_DESCENDANT_TX_SIZE_LIMIT{10000};
92 : :
93 : : /**
94 : : * Maximum number of ephemeral dust outputs allowed.
95 : : */
96 : : static constexpr unsigned int MAX_DUST_OUTPUTS_PER_TX{1};
97 : :
98 : : /**
99 : : * Mandatory script verification flags that all new transactions must comply with for
100 : : * them to be valid. Failing one of these tests may trigger a DoS ban;
101 : : * see CheckInputScripts() for details.
102 : : *
103 : : * Note that this does not affect consensus validity; see GetBlockScriptFlags()
104 : : * for that.
105 : : */
106 : : static constexpr script_verify_flags MANDATORY_SCRIPT_VERIFY_FLAGS{SCRIPT_VERIFY_P2SH |
107 : : SCRIPT_VERIFY_DERSIG |
108 : : SCRIPT_VERIFY_NULLDUMMY |
109 : : SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY |
110 : : SCRIPT_VERIFY_CHECKSEQUENCEVERIFY |
111 : : SCRIPT_VERIFY_WITNESS |
112 : : SCRIPT_VERIFY_TAPROOT};
113 : :
114 : : /**
115 : : * Standard script verification flags that standard transactions will comply
116 : : * with. However we do not ban/disconnect nodes that forward txs violating
117 : : * the additional (non-mandatory) rules here, to improve forwards and
118 : : * backwards compatibility.
119 : : */
120 : : static constexpr script_verify_flags STANDARD_SCRIPT_VERIFY_FLAGS{MANDATORY_SCRIPT_VERIFY_FLAGS |
121 : : SCRIPT_VERIFY_STRICTENC |
122 : : SCRIPT_VERIFY_MINIMALDATA |
123 : : SCRIPT_VERIFY_DISCOURAGE_UPGRADABLE_NOPS |
124 : : SCRIPT_VERIFY_CLEANSTACK |
125 : : SCRIPT_VERIFY_MINIMALIF |
126 : : SCRIPT_VERIFY_NULLFAIL |
127 : : SCRIPT_VERIFY_LOW_S |
128 : : SCRIPT_VERIFY_DISCOURAGE_UPGRADABLE_WITNESS_PROGRAM |
129 : : SCRIPT_VERIFY_WITNESS_PUBKEYTYPE |
130 : : SCRIPT_VERIFY_CONST_SCRIPTCODE |
131 : : SCRIPT_VERIFY_DISCOURAGE_UPGRADABLE_TAPROOT_VERSION |
132 : : SCRIPT_VERIFY_DISCOURAGE_OP_SUCCESS |
133 : : SCRIPT_VERIFY_DISCOURAGE_UPGRADABLE_PUBKEYTYPE};
134 : :
135 : : /** For convenience, standard but not mandatory verify flags. */
136 : : static constexpr script_verify_flags STANDARD_NOT_MANDATORY_VERIFY_FLAGS{STANDARD_SCRIPT_VERIFY_FLAGS & ~MANDATORY_SCRIPT_VERIFY_FLAGS};
137 : :
138 : : /** Used as the flags parameter to sequence and nLocktime checks in non-consensus code. */
139 : : static constexpr unsigned int STANDARD_LOCKTIME_VERIFY_FLAGS{LOCKTIME_VERIFY_SEQUENCE};
140 : :
141 : : CAmount GetDustThreshold(const CTxOut& txout, const CFeeRate& dustRelayFee);
142 : :
143 : : bool IsDust(const CTxOut& txout, const CFeeRate& dustRelayFee);
144 : :
145 : : bool IsStandard(const CScript& scriptPubKey, TxoutType& whichType);
146 : :
147 : : /** Get the vout index numbers of all dust outputs */
148 : : std::vector<uint32_t> GetDust(const CTransaction& tx, CFeeRate dust_relay_rate);
149 : :
150 : : // Changing the default transaction version requires a two step process: first
151 : : // adapting relay policy by bumping TX_MAX_STANDARD_VERSION, and then later
152 : : // allowing the new transaction version in the wallet/RPC.
153 : : static constexpr decltype(CTransaction::version) TX_MIN_STANDARD_VERSION{1};
154 : : static constexpr decltype(CTransaction::version) TX_MAX_STANDARD_VERSION{3};
155 : :
156 : : /**
157 : : * Check for standard transaction types
158 : : * @return True if all outputs (scriptPubKeys) use only standard transaction forms
159 : : */
160 : : bool IsStandardTx(const CTransaction& tx, const std::optional<unsigned>& max_datacarrier_bytes, bool permit_bare_multisig, const CFeeRate& dust_relay_fee, std::string& reason);
161 : : /**
162 : : * Check for standard transaction types
163 : : * @param[in] mapInputs Map of previous transactions that have outputs we're spending
164 : : * @return True if all inputs (scriptSigs) use only standard transaction forms
165 : : */
166 : : bool AreInputsStandard(const CTransaction& tx, const CCoinsViewCache& mapInputs);
167 : : /**
168 : : * Check if the transaction is over standard P2WSH resources limit:
169 : : * 3600bytes witnessScript size, 80bytes per witness stack element, 100 witness stack elements
170 : : * These limits are adequate for multisignatures up to n-of-100 using OP_CHECKSIG, OP_ADD, and OP_EQUAL.
171 : : *
172 : : * Also enforce a maximum stack item size limit and no annexes for tapscript spends.
173 : : */
174 : : bool IsWitnessStandard(const CTransaction& tx, const CCoinsViewCache& mapInputs);
175 : : /**
176 : : * Check whether this transaction spends any witness program but P2A, including not-yet-defined ones.
177 : : * May return `false` early for consensus-invalid transactions.
178 : : */
179 : : bool SpendsNonAnchorWitnessProg(const CTransaction& tx, const CCoinsViewCache& prevouts);
180 : :
181 : : /** Compute the virtual transaction size (weight reinterpreted as bytes). */
182 : : int64_t GetVirtualTransactionSize(int64_t nWeight, int64_t nSigOpCost, unsigned int bytes_per_sigop);
183 : : int64_t GetVirtualTransactionSize(const CTransaction& tx, int64_t nSigOpCost, unsigned int bytes_per_sigop);
184 : : int64_t GetVirtualTransactionInputSize(const CTxIn& tx, int64_t nSigOpCost, unsigned int bytes_per_sigop);
185 : :
186 : 47347 : static inline int64_t GetVirtualTransactionSize(const CTransaction& tx)
187 : : {
188 [ + - + - ]: 47341 : return GetVirtualTransactionSize(tx, 0, 0);
[ + - + -
+ - # # ]
[ + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - ][ +
- # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# # # # #
# ][ + - +
- + - +
- ][ + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - + - +
- + - + -
+ - ]
189 : : }
190 : :
191 : 2 : static inline int64_t GetVirtualTransactionInputSize(const CTxIn& tx)
192 : : {
193 [ + - ]: 2 : return GetVirtualTransactionInputSize(tx, 0, 0);
194 : : }
195 : :
196 : : int64_t GetSigOpsAdjustedWeight(int64_t weight, int64_t sigop_cost, unsigned int bytes_per_sigop);
197 : :
198 [ + - ]: 84433 : static inline FeePerVSize ToFeePerVSize(FeePerWeight feerate) { return {feerate.fee, (feerate.size + WITNESS_SCALE_FACTOR - 1) / WITNESS_SCALE_FACTOR}; }
199 : :
200 : : #endif // BITCOIN_POLICY_POLICY_H
|