rust-bitcoin-unsafe-fast/fuzz/fuzz_targets/bitcoin/deserialize_transaction.rs

64 lines
2.0 KiB
Rust
Raw Normal View History

use honggfuzz::fuzz;
fn do_test(data: &[u8]) {
let tx_result: Result<bitcoin::blockdata::transaction::Transaction, _> =
bitcoin::consensus::encode::deserialize(data);
match tx_result {
Err(_) => {}
Ok(mut tx) => {
let ser = bitcoin::consensus::encode::serialize(&tx);
assert_eq!(&ser[..], data);
let len = ser.len();
let calculated_weight = tx.weight().to_wu() as usize;
for input in &mut tx.input {
2021-10-05 13:09:23 +00:00
input.witness = bitcoin::blockdata::witness::Witness::default();
}
let no_witness_len = bitcoin::consensus::encode::serialize(&tx).len();
// For 0-input transactions, `no_witness_len` will be incorrect because
// we serialize as segwit even after "stripping the witnesses". We need
// to drop two bytes (i.e. eight weight). Similarly, calculated_weight is
// incorrect and needs 2 wu removing for the marker/flag bytes.
if tx.input.is_empty() {
assert_eq!(no_witness_len * 3 + len - 8, calculated_weight - 2);
} else {
assert_eq!(no_witness_len * 3 + len, calculated_weight);
}
}
}
}
fn main() {
loop {
fuzz!(|data| {
do_test(data);
});
}
}
#[cfg(all(test, fuzzing))]
mod tests {
fn extend_vec_from_hex(hex: &str, out: &mut Vec<u8>) {
let mut b = 0;
for (idx, c) in hex.as_bytes().iter().enumerate() {
b <<= 4;
match *c {
2020-09-14 14:51:16 +00:00
b'A'..=b'F' => b |= c - b'A' + 10,
b'a'..=b'f' => b |= c - b'a' + 10,
b'0'..=b'9' => b |= c - b'0',
_ => panic!("Bad hex"),
}
if (idx & 1) == 1 {
out.push(b);
b = 0;
}
}
}
#[test]
fn duplicate_crash() {
let mut a = Vec::new();
extend_vec_from_hex("000700000001000000010000", &mut a);
super::do_test(&a);
}
}