Branch data Line data Source code
1 : : // Copyright (c) 2020 The Bitcoin Core developers
2 : : // Distributed under the MIT software license, see the accompanying
3 : : // file COPYING or http://www.opensource.org/licenses/mit-license.php.
4 : :
5 : : #include <primitives/transaction.h>
6 : : #include <script/interpreter.h>
7 : : #include <test/fuzz/FuzzedDataProvider.h>
8 : : #include <test/fuzz/fuzz.h>
9 : : #include <test/fuzz/util.h>
10 : :
11 : : #include <cstdint>
12 : : #include <optional>
13 : : #include <string>
14 : : #include <vector>
15 : :
16 : : bool CastToBool(const std::vector<unsigned char>& vch);
17 : :
18 [ # # ]: 0 : FUZZ_TARGET(script_interpreter)
19 : : {
20 : 0 : FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size());
21 : 0 : {
22 : 0 : const CScript script_code = ConsumeScript(fuzzed_data_provider);
23 : 0 : const std::optional<CMutableTransaction> mtx = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS);
24 [ # # ]: 0 : if (mtx) {
25 [ # # ]: 0 : const CTransaction tx_to{*mtx};
26 : 0 : const unsigned int in = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
27 [ # # ]: 0 : if (in < tx_to.vin.size()) {
28 [ # # ]: 0 : (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), nullptr);
29 : 0 : const std::optional<CMutableTransaction> mtx_precomputed = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS);
30 [ # # ]: 0 : if (mtx_precomputed) {
31 [ # # ]: 0 : const CTransaction tx_precomputed{*mtx_precomputed};
32 [ # # ]: 0 : const PrecomputedTransactionData precomputed_transaction_data{tx_precomputed};
33 [ # # ]: 0 : (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), &precomputed_transaction_data);
34 : 0 : }
35 : 0 : }
36 : 0 : }
37 : 0 : }
38 : 0 : {
39 [ # # ]: 0 : (void)CastToBool(ConsumeRandomLengthByteVector(fuzzed_data_provider));
40 : : }
41 : 0 : }
|