1 // Copyright (c) 2011-2016 The Bitcoin Core developers
2 // Distributed under the MIT software license, see the accompanying
3 // file COPYING or http://www.opensource.org/licenses/mit-license.php.
5 #include "consensus/validation.h"
7 #include "validation.h"
10 #include "txmempool.h"
12 #include "script/standard.h"
13 #include "script/sign.h"
14 #include "test/test_bitcoin.h"
18 #include "policy/policy.h"
20 #include <boost/test/unit_test.hpp>
22 bool CheckInputs(const CTransaction
& tx
, CValidationState
&state
, const CCoinsViewCache
&inputs
, bool fScriptChecks
, unsigned int flags
, bool cacheSigStore
, bool cacheFullScriptStore
, PrecomputedTransactionData
& txdata
, std::vector
<CScriptCheck
> *pvChecks
);
24 BOOST_AUTO_TEST_SUITE(tx_validationcache_tests
)
27 ToMemPool(CMutableTransaction
& tx
)
31 CValidationState state
;
32 return AcceptToMemoryPool(mempool
, state
, MakeTransactionRef(tx
), nullptr /* pfMissingInputs */,
33 nullptr /* plTxnReplaced */, true /* bypass_limits */, 0 /* nAbsurdFee */);
36 BOOST_FIXTURE_TEST_CASE(tx_mempool_block_doublespend
, TestChain100Setup
)
38 // Make sure skipping validation of transctions that were
39 // validated going into the memory pool does not allow
40 // double-spends in blocks to pass validation when they should not.
42 CScript scriptPubKey
= CScript() << ToByteVector(coinbaseKey
.GetPubKey()) << OP_CHECKSIG
;
44 // Create a double-spend of mature coinbase txn:
45 std::vector
<CMutableTransaction
> spends
;
47 for (int i
= 0; i
< 2; i
++)
49 spends
[i
].nVersion
= 1;
50 spends
[i
].vin
.resize(1);
51 spends
[i
].vin
[0].prevout
.hash
= coinbaseTxns
[0].GetHash();
52 spends
[i
].vin
[0].prevout
.n
= 0;
53 spends
[i
].vout
.resize(1);
54 spends
[i
].vout
[0].nValue
= 11*CENT
;
55 spends
[i
].vout
[0].scriptPubKey
= scriptPubKey
;
58 std::vector
<unsigned char> vchSig
;
59 uint256 hash
= SignatureHash(scriptPubKey
, spends
[i
], 0, SIGHASH_ALL
, 0, SIGVERSION_BASE
);
60 BOOST_CHECK(coinbaseKey
.Sign(hash
, vchSig
));
61 vchSig
.push_back((unsigned char)SIGHASH_ALL
);
62 spends
[i
].vin
[0].scriptSig
<< vchSig
;
67 // Test 1: block with both of those transactions should be rejected.
68 block
= CreateAndProcessBlock(spends
, scriptPubKey
);
69 BOOST_CHECK(chainActive
.Tip()->GetBlockHash() != block
.GetHash());
71 // Test 2: ... and should be rejected if spend1 is in the memory pool
72 BOOST_CHECK(ToMemPool(spends
[0]));
73 block
= CreateAndProcessBlock(spends
, scriptPubKey
);
74 BOOST_CHECK(chainActive
.Tip()->GetBlockHash() != block
.GetHash());
77 // Test 3: ... and should be rejected if spend2 is in the memory pool
78 BOOST_CHECK(ToMemPool(spends
[1]));
79 block
= CreateAndProcessBlock(spends
, scriptPubKey
);
80 BOOST_CHECK(chainActive
.Tip()->GetBlockHash() != block
.GetHash());
83 // Final sanity test: first spend in mempool, second in block, that's OK:
84 std::vector
<CMutableTransaction
> oneSpend
;
85 oneSpend
.push_back(spends
[0]);
86 BOOST_CHECK(ToMemPool(spends
[1]));
87 block
= CreateAndProcessBlock(oneSpend
, scriptPubKey
);
88 BOOST_CHECK(chainActive
.Tip()->GetBlockHash() == block
.GetHash());
89 // spends[1] should have been removed from the mempool when the
90 // block with spends[0] is accepted:
91 BOOST_CHECK_EQUAL(mempool
.size(), 0);
94 // Run CheckInputs (using pcoinsTip) on the given transaction, for all script
95 // flags. Test that CheckInputs passes for all flags that don't overlap with
96 // the failing_flags argument, but otherwise fails.
97 // CHECKLOCKTIMEVERIFY and CHECKSEQUENCEVERIFY (and future NOP codes that may
98 // get reassigned) have an interaction with DISCOURAGE_UPGRADABLE_NOPS: if
99 // the script flags used contain DISCOURAGE_UPGRADABLE_NOPS but don't contain
100 // CHECKLOCKTIMEVERIFY (or CHECKSEQUENCEVERIFY), but the script does contain
101 // OP_CHECKLOCKTIMEVERIFY (or OP_CHECKSEQUENCEVERIFY), then script execution
103 // Capture this interaction with the upgraded_nop argument: set it when evaluating
104 // any script flag that is implemented as an upgraded NOP code.
105 void ValidateCheckInputsForAllFlags(CMutableTransaction
&tx
, uint32_t failing_flags
, bool add_to_cache
, bool upgraded_nop
)
107 PrecomputedTransactionData
txdata(tx
);
108 // If we add many more flags, this loop can get too expensive, but we can
109 // rewrite in the future to randomly pick a set of flags to evaluate.
110 for (uint32_t test_flags
=0; test_flags
< (1U << 16); test_flags
+= 1) {
111 CValidationState state
;
112 // Filter out incompatible flag choices
113 if ((test_flags
& SCRIPT_VERIFY_CLEANSTACK
)) {
114 // CLEANSTACK requires P2SH and WITNESS, see VerifyScript() in
115 // script/interpreter.cpp
116 test_flags
|= SCRIPT_VERIFY_P2SH
| SCRIPT_VERIFY_WITNESS
;
118 if ((test_flags
& SCRIPT_VERIFY_WITNESS
)) {
119 // WITNESS requires P2SH
120 test_flags
|= SCRIPT_VERIFY_P2SH
;
122 bool ret
= CheckInputs(tx
, state
, pcoinsTip
, true, test_flags
, true, add_to_cache
, txdata
, nullptr);
123 // CheckInputs should succeed iff test_flags doesn't intersect with
125 bool expected_return_value
= !(test_flags
& failing_flags
);
126 if (expected_return_value
&& upgraded_nop
) {
127 // If the script flag being tested corresponds to an upgraded NOP,
128 // then script execution should fail if DISCOURAGE_UPGRADABLE_NOPS
130 expected_return_value
= !(test_flags
& SCRIPT_VERIFY_DISCOURAGE_UPGRADABLE_NOPS
);
132 BOOST_CHECK_EQUAL(ret
, expected_return_value
);
135 if (ret
&& add_to_cache
) {
136 // Check that we get a cache hit if the tx was valid
137 std::vector
<CScriptCheck
> scriptchecks
;
138 BOOST_CHECK(CheckInputs(tx
, state
, pcoinsTip
, true, test_flags
, true, add_to_cache
, txdata
, &scriptchecks
));
139 BOOST_CHECK(scriptchecks
.empty());
141 // Check that we get script executions to check, if the transaction
142 // was invalid, or we didn't add to cache.
143 std::vector
<CScriptCheck
> scriptchecks
;
144 BOOST_CHECK(CheckInputs(tx
, state
, pcoinsTip
, true, test_flags
, true, add_to_cache
, txdata
, &scriptchecks
));
145 BOOST_CHECK_EQUAL(scriptchecks
.size(), tx
.vin
.size());
150 BOOST_FIXTURE_TEST_CASE(checkinputs_test
, TestChain100Setup
)
152 // Test that passing CheckInputs with one set of script flags doesn't imply
153 // that we would pass again with a different set of flags.
154 InitScriptExecutionCache();
156 CScript p2pk_scriptPubKey
= CScript() << ToByteVector(coinbaseKey
.GetPubKey()) << OP_CHECKSIG
;
157 CScript p2sh_scriptPubKey
= GetScriptForDestination(CScriptID(p2pk_scriptPubKey
));
158 CScript p2pkh_scriptPubKey
= GetScriptForDestination(coinbaseKey
.GetPubKey().GetID());
159 CScript p2wpkh_scriptPubKey
= GetScriptForWitness(p2pkh_scriptPubKey
);
161 CBasicKeyStore keystore
;
162 keystore
.AddKey(coinbaseKey
);
163 keystore
.AddCScript(p2pk_scriptPubKey
);
165 // flags to test: SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY, SCRIPT_VERIFY_CHECKSEQUENCE_VERIFY, SCRIPT_VERIFY_NULLDUMMY, uncompressed pubkey thing
167 // Create 2 outputs that match the three scripts above, spending the first
169 CMutableTransaction spend_tx
;
171 spend_tx
.nVersion
= 1;
172 spend_tx
.vin
.resize(1);
173 spend_tx
.vin
[0].prevout
.hash
= coinbaseTxns
[0].GetHash();
174 spend_tx
.vin
[0].prevout
.n
= 0;
175 spend_tx
.vout
.resize(4);
176 spend_tx
.vout
[0].nValue
= 11*CENT
;
177 spend_tx
.vout
[0].scriptPubKey
= p2sh_scriptPubKey
;
178 spend_tx
.vout
[1].nValue
= 11*CENT
;
179 spend_tx
.vout
[1].scriptPubKey
= p2wpkh_scriptPubKey
;
180 spend_tx
.vout
[2].nValue
= 11*CENT
;
181 spend_tx
.vout
[2].scriptPubKey
= CScript() << OP_CHECKLOCKTIMEVERIFY
<< OP_DROP
<< ToByteVector(coinbaseKey
.GetPubKey()) << OP_CHECKSIG
;
182 spend_tx
.vout
[3].nValue
= 11*CENT
;
183 spend_tx
.vout
[3].scriptPubKey
= CScript() << OP_CHECKSEQUENCEVERIFY
<< OP_DROP
<< ToByteVector(coinbaseKey
.GetPubKey()) << OP_CHECKSIG
;
185 // Sign, with a non-DER signature
187 std::vector
<unsigned char> vchSig
;
188 uint256 hash
= SignatureHash(p2pk_scriptPubKey
, spend_tx
, 0, SIGHASH_ALL
, 0, SIGVERSION_BASE
);
189 BOOST_CHECK(coinbaseKey
.Sign(hash
, vchSig
));
190 vchSig
.push_back((unsigned char) 0); // padding byte makes this non-DER
191 vchSig
.push_back((unsigned char)SIGHASH_ALL
);
192 spend_tx
.vin
[0].scriptSig
<< vchSig
;
197 // Test that invalidity under a set of flags doesn't preclude validity
198 // under other (eg consensus) flags.
199 // spend_tx is invalid according to DERSIG
201 CValidationState state
;
202 PrecomputedTransactionData
ptd_spend_tx(spend_tx
);
204 BOOST_CHECK(!CheckInputs(spend_tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_P2SH
| SCRIPT_VERIFY_DERSIG
, true, true, ptd_spend_tx
, nullptr));
206 // If we call again asking for scriptchecks (as happens in
207 // ConnectBlock), we should add a script check object for this -- we're
208 // not caching invalidity (if that changes, delete this test case).
209 std::vector
<CScriptCheck
> scriptchecks
;
210 BOOST_CHECK(CheckInputs(spend_tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_P2SH
| SCRIPT_VERIFY_DERSIG
, true, true, ptd_spend_tx
, &scriptchecks
));
211 BOOST_CHECK_EQUAL(scriptchecks
.size(), 1);
213 // Test that CheckInputs returns true iff DERSIG-enforcing flags are
214 // not present. Don't add these checks to the cache, so that we can
215 // test later that block validation works fine in the absence of cached
217 ValidateCheckInputsForAllFlags(spend_tx
, SCRIPT_VERIFY_DERSIG
| SCRIPT_VERIFY_LOW_S
| SCRIPT_VERIFY_STRICTENC
, false, false);
219 // And if we produce a block with this tx, it should be valid (DERSIG not
220 // enabled yet), even though there's no cache entry.
223 block
= CreateAndProcessBlock({spend_tx
}, p2pk_scriptPubKey
);
224 BOOST_CHECK(chainActive
.Tip()->GetBlockHash() == block
.GetHash());
225 BOOST_CHECK(pcoinsTip
->GetBestBlock() == block
.GetHash());
228 // Test P2SH: construct a transaction that is valid without P2SH, and
229 // then test validity with P2SH.
231 CMutableTransaction invalid_under_p2sh_tx
;
232 invalid_under_p2sh_tx
.nVersion
= 1;
233 invalid_under_p2sh_tx
.vin
.resize(1);
234 invalid_under_p2sh_tx
.vin
[0].prevout
.hash
= spend_tx
.GetHash();
235 invalid_under_p2sh_tx
.vin
[0].prevout
.n
= 0;
236 invalid_under_p2sh_tx
.vout
.resize(1);
237 invalid_under_p2sh_tx
.vout
[0].nValue
= 11*CENT
;
238 invalid_under_p2sh_tx
.vout
[0].scriptPubKey
= p2pk_scriptPubKey
;
239 std::vector
<unsigned char> vchSig2(p2pk_scriptPubKey
.begin(), p2pk_scriptPubKey
.end());
240 invalid_under_p2sh_tx
.vin
[0].scriptSig
<< vchSig2
;
242 ValidateCheckInputsForAllFlags(invalid_under_p2sh_tx
, SCRIPT_VERIFY_P2SH
, true, false);
245 // Test CHECKLOCKTIMEVERIFY
247 CMutableTransaction invalid_with_cltv_tx
;
248 invalid_with_cltv_tx
.nVersion
= 1;
249 invalid_with_cltv_tx
.nLockTime
= 100;
250 invalid_with_cltv_tx
.vin
.resize(1);
251 invalid_with_cltv_tx
.vin
[0].prevout
.hash
= spend_tx
.GetHash();
252 invalid_with_cltv_tx
.vin
[0].prevout
.n
= 2;
253 invalid_with_cltv_tx
.vin
[0].nSequence
= 0;
254 invalid_with_cltv_tx
.vout
.resize(1);
255 invalid_with_cltv_tx
.vout
[0].nValue
= 11*CENT
;
256 invalid_with_cltv_tx
.vout
[0].scriptPubKey
= p2pk_scriptPubKey
;
259 std::vector
<unsigned char> vchSig
;
260 uint256 hash
= SignatureHash(spend_tx
.vout
[2].scriptPubKey
, invalid_with_cltv_tx
, 0, SIGHASH_ALL
, 0, SIGVERSION_BASE
);
261 BOOST_CHECK(coinbaseKey
.Sign(hash
, vchSig
));
262 vchSig
.push_back((unsigned char)SIGHASH_ALL
);
263 invalid_with_cltv_tx
.vin
[0].scriptSig
= CScript() << vchSig
<< 101;
265 ValidateCheckInputsForAllFlags(invalid_with_cltv_tx
, SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY
, true, true);
267 // Make it valid, and check again
268 invalid_with_cltv_tx
.vin
[0].scriptSig
= CScript() << vchSig
<< 100;
269 CValidationState state
;
270 PrecomputedTransactionData
txdata(invalid_with_cltv_tx
);
271 BOOST_CHECK(CheckInputs(invalid_with_cltv_tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY
, true, true, txdata
, nullptr));
274 // TEST CHECKSEQUENCEVERIFY
276 CMutableTransaction invalid_with_csv_tx
;
277 invalid_with_csv_tx
.nVersion
= 2;
278 invalid_with_csv_tx
.vin
.resize(1);
279 invalid_with_csv_tx
.vin
[0].prevout
.hash
= spend_tx
.GetHash();
280 invalid_with_csv_tx
.vin
[0].prevout
.n
= 3;
281 invalid_with_csv_tx
.vin
[0].nSequence
= 100;
282 invalid_with_csv_tx
.vout
.resize(1);
283 invalid_with_csv_tx
.vout
[0].nValue
= 11*CENT
;
284 invalid_with_csv_tx
.vout
[0].scriptPubKey
= p2pk_scriptPubKey
;
287 std::vector
<unsigned char> vchSig
;
288 uint256 hash
= SignatureHash(spend_tx
.vout
[3].scriptPubKey
, invalid_with_csv_tx
, 0, SIGHASH_ALL
, 0, SIGVERSION_BASE
);
289 BOOST_CHECK(coinbaseKey
.Sign(hash
, vchSig
));
290 vchSig
.push_back((unsigned char)SIGHASH_ALL
);
291 invalid_with_csv_tx
.vin
[0].scriptSig
= CScript() << vchSig
<< 101;
293 ValidateCheckInputsForAllFlags(invalid_with_csv_tx
, SCRIPT_VERIFY_CHECKSEQUENCEVERIFY
, true, true);
295 // Make it valid, and check again
296 invalid_with_csv_tx
.vin
[0].scriptSig
= CScript() << vchSig
<< 100;
297 CValidationState state
;
298 PrecomputedTransactionData
txdata(invalid_with_csv_tx
);
299 BOOST_CHECK(CheckInputs(invalid_with_csv_tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_CHECKSEQUENCEVERIFY
, true, true, txdata
, nullptr));
302 // TODO: add tests for remaining script flags
304 // Test that passing CheckInputs with a valid witness doesn't imply success
305 // for the same tx with a different witness.
307 CMutableTransaction valid_with_witness_tx
;
308 valid_with_witness_tx
.nVersion
= 1;
309 valid_with_witness_tx
.vin
.resize(1);
310 valid_with_witness_tx
.vin
[0].prevout
.hash
= spend_tx
.GetHash();
311 valid_with_witness_tx
.vin
[0].prevout
.n
= 1;
312 valid_with_witness_tx
.vout
.resize(1);
313 valid_with_witness_tx
.vout
[0].nValue
= 11*CENT
;
314 valid_with_witness_tx
.vout
[0].scriptPubKey
= p2pk_scriptPubKey
;
317 SignatureData sigdata
;
318 ProduceSignature(MutableTransactionSignatureCreator(&keystore
, &valid_with_witness_tx
, 0, 11*CENT
, SIGHASH_ALL
), spend_tx
.vout
[1].scriptPubKey
, sigdata
);
319 UpdateTransaction(valid_with_witness_tx
, 0, sigdata
);
321 // This should be valid under all script flags.
322 ValidateCheckInputsForAllFlags(valid_with_witness_tx
, 0, true, false);
324 // Remove the witness, and check that it is now invalid.
325 valid_with_witness_tx
.vin
[0].scriptWitness
.SetNull();
326 ValidateCheckInputsForAllFlags(valid_with_witness_tx
, SCRIPT_VERIFY_WITNESS
, true, false);
330 // Test a transaction with multiple inputs.
331 CMutableTransaction tx
;
335 tx
.vin
[0].prevout
.hash
= spend_tx
.GetHash();
336 tx
.vin
[0].prevout
.n
= 0;
337 tx
.vin
[1].prevout
.hash
= spend_tx
.GetHash();
338 tx
.vin
[1].prevout
.n
= 1;
340 tx
.vout
[0].nValue
= 22*CENT
;
341 tx
.vout
[0].scriptPubKey
= p2pk_scriptPubKey
;
344 for (int i
=0; i
<2; ++i
) {
345 SignatureData sigdata
;
346 ProduceSignature(MutableTransactionSignatureCreator(&keystore
, &tx
, i
, 11*CENT
, SIGHASH_ALL
), spend_tx
.vout
[i
].scriptPubKey
, sigdata
);
347 UpdateTransaction(tx
, i
, sigdata
);
350 // This should be valid under all script flags
351 ValidateCheckInputsForAllFlags(tx
, 0, true, false);
353 // Check that if the second input is invalid, but the first input is
354 // valid, the transaction is not cached.
356 tx
.vin
[1].scriptWitness
.SetNull();
358 CValidationState state
;
359 PrecomputedTransactionData
txdata(tx
);
360 // This transaction is now invalid under segwit, because of the second input.
361 BOOST_CHECK(!CheckInputs(tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_P2SH
| SCRIPT_VERIFY_WITNESS
, true, true, txdata
, nullptr));
363 std::vector
<CScriptCheck
> scriptchecks
;
364 // Make sure this transaction was not cached (ie because the first
366 BOOST_CHECK(CheckInputs(tx
, state
, pcoinsTip
, true, SCRIPT_VERIFY_P2SH
| SCRIPT_VERIFY_WITNESS
, true, true, txdata
, &scriptchecks
));
367 // Should get 2 script checks back -- caching is on a whole-transaction basis.
368 BOOST_CHECK_EQUAL(scriptchecks
.size(), 2);
372 BOOST_AUTO_TEST_SUITE_END()