Branch data Line data Source code
1 : : // Copyright (c) 2020 The Bitcoin Core developers 2 : : // Distributed under the MIT software license, see the accompanying 3 : : // file COPYING or http://www.opensource.org/licenses/mit-license.php. 4 : : 5 : : #include <primitives/transaction.h> 6 : : #include <script/interpreter.h> 7 : : #include <test/fuzz/FuzzedDataProvider.h> 8 : : #include <test/fuzz/fuzz.h> 9 : : #include <test/fuzz/util.h> 10 : : 11 : : #include <cstdint> 12 : : #include <optional> 13 : : #include <string> 14 : : #include <vector> 15 : : 16 : : bool CastToBool(const std::vector<unsigned char>& vch); 17 : : 18 [ - + ]: 4 : FUZZ_TARGET(script_interpreter) 19 : : { 20 : 0 : FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size()); 21 : : { 22 : 0 : const CScript script_code = ConsumeScript(fuzzed_data_provider); 23 : 0 : const std::optional<CMutableTransaction> mtx = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider); 24 [ # # ]: 0 : if (mtx) { 25 [ + - # # : 2 : const CTransaction tx_to{*mtx}; # # ] 26 [ # # ]: 0 : const unsigned int in = fuzzed_data_provider.ConsumeIntegral<unsigned int>(); 27 [ # # ]: 0 : if (in < tx_to.vin.size()) { 28 [ # # # # : 0 : (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), nullptr); # # ] 29 : 0 : const std::optional<CMutableTransaction> mtx_precomputed = ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider); 30 [ # # ]: 0 : if (mtx_precomputed) { 31 [ # # # # ]: 0 : const CTransaction tx_precomputed{*mtx_precomputed}; 32 [ # # ]: 0 : const PrecomputedTransactionData precomputed_transaction_data{tx_precomputed}; 33 [ # # # # : 0 : (void)SignatureHash(script_code, tx_to, in, fuzzed_data_provider.ConsumeIntegral<int>(), ConsumeMoney(fuzzed_data_provider), fuzzed_data_provider.PickValueInArray({SigVersion::BASE, SigVersion::WITNESS_V0}), &precomputed_transaction_data); # # ] 34 : 0 : } 35 : 0 : } 36 : 0 : } 37 : 0 : } 38 : : { 39 [ # # ]: 0 : (void)CastToBool(ConsumeRandomLengthByteVector(fuzzed_data_provider)); 40 : : } 41 : 0 : }