X-Git-Url: http://git.bitcoin.ninja/index.cgi?a=blobdiff_plain;f=fuzz%2Ffuzz_targets%2Fchannel_target.rs;h=b643996105e81cd33621405bf0a77a070214989c;hb=00c6f42452380a3965ba4eb9d9f6ca6445ac6b74;hp=b8da2165885f473ba80f2631232d2dc1b1315efc;hpb=1d2774dd645914fb7a8fa467b098ae347c40242c;p=rust-lightning diff --git a/fuzz/fuzz_targets/channel_target.rs b/fuzz/fuzz_targets/channel_target.rs index b8da2165..b6439961 100644 --- a/fuzz/fuzz_targets/channel_target.rs +++ b/fuzz/fuzz_targets/channel_target.rs @@ -3,7 +3,7 @@ extern crate lightning; extern crate secp256k1; use bitcoin::blockdata::block::BlockHeader; -use bitcoin::blockdata::transaction::Transaction; +use bitcoin::blockdata::transaction::{Transaction, TxOut}; use bitcoin::util::hash::Sha256dHash; use bitcoin::network::serialize::{serialize, BitcoinHash}; @@ -12,6 +12,7 @@ use lightning::ln::channelmanager::PendingForwardHTLCInfo; use lightning::ln::msgs; use lightning::ln::msgs::MsgDecodable; use lightning::chain::chaininterface::{FeeEstimator, ConfirmationTarget}; +use lightning::util::reset_rng_state; use secp256k1::key::PublicKey; use secp256k1::Secp256k1; @@ -89,6 +90,8 @@ impl<'a> FeeEstimator for FuzzEstimator<'a> { #[inline] pub fn do_test(data: &[u8]) { + reset_rng_state(); + let input = InputData { data, read_pos: AtomicUsize::new(0), @@ -114,6 +117,7 @@ pub fn do_test(data: &[u8]) { msgs::DecodeError::UnknownRealmByte => return, msgs::DecodeError::BadPublicKey => return, msgs::DecodeError::BadSignature => return, + msgs::DecodeError::ExtraAddressesPerType => return, msgs::DecodeError::WrongLength => panic!("We picked the length..."), } } @@ -133,6 +137,7 @@ pub fn do_test(data: &[u8]) { msgs::DecodeError::UnknownRealmByte => return, msgs::DecodeError::BadPublicKey => return, msgs::DecodeError::BadSignature => return, + msgs::DecodeError::ExtraAddressesPerType => return, msgs::DecodeError::WrongLength => panic!("We picked the length..."), } } @@ -161,11 +166,11 @@ pub fn do_test(data: &[u8]) { let their_pubkey = get_pubkey!(); - let tx = Transaction { version: 0, lock_time: 0, input: Vec::new(), output: Vec::new(), witness: Vec::new() }; - let funding_output = (Sha256dHash::from_data(&serialize(&tx).unwrap()[..]), 0); + let mut tx = Transaction { version: 0, lock_time: 0, input: Vec::new(), output: Vec::new() }; let mut channel = if get_slice!(1)[0] != 0 { - let mut chan = Channel::new_outbound(&fee_est, their_pubkey, slice_to_be24(get_slice!(3)), get_slice!(1)[0] == 0, slice_to_be64(get_slice!(8))); + let chan_value = slice_to_be24(get_slice!(3)); + let mut chan = Channel::new_outbound(&fee_est, their_pubkey, chan_value, get_slice!(1)[0] == 0, slice_to_be64(get_slice!(8))); chan.get_open_channel(Sha256dHash::from(get_slice!(32)), &fee_est).unwrap(); let accept_chan = if get_slice!(1)[0] == 0 { decode_msg_with_len16!(msgs::AcceptChannel, 270, 1) @@ -173,6 +178,10 @@ pub fn do_test(data: &[u8]) { decode_msg!(msgs::AcceptChannel, 270) }; return_err!(chan.accept_channel(&accept_chan)); + + tx.output.push(TxOut{ value: chan_value, script_pubkey: chan.get_funding_redeemscript().to_v0_p2wsh() }); + let funding_output = (Sha256dHash::from_data(&serialize(&tx).unwrap()[..]), 0); + chan.get_outbound_funding_created(funding_output.0.clone(), funding_output.1).unwrap(); let funding_signed = decode_msg!(msgs::FundingSigned, 32+64); return_err!(chan.funding_signed(&funding_signed)); @@ -188,6 +197,10 @@ pub fn do_test(data: &[u8]) { Err(_) => return, }; chan.get_accept_channel().unwrap(); + + tx.output.push(TxOut{ value: open_chan.funding_satoshis, script_pubkey: chan.get_funding_redeemscript().to_v0_p2wsh() }); + let funding_output = (Sha256dHash::from_data(&serialize(&tx).unwrap()[..]), 0); + let mut funding_created = decode_msg!(msgs::FundingCreated, 32+32+2+64); funding_created.funding_txid = funding_output.0.clone(); funding_created.funding_output_index = funding_output.1; @@ -246,6 +259,14 @@ pub fn do_test(data: &[u8]) { let update_fee = decode_msg!(msgs::UpdateFee, 32+4); return_err!(channel.update_fee(&fee_est, &update_fee)); }, + 9 => { + let shutdown = decode_msg_with_len16!(msgs::Shutdown, 32, 1); + return_err!(channel.shutdown(&fee_est, &shutdown)); + }, + 10 => { + let closing_signed = decode_msg!(msgs::ClosingSigned, 32+8+64); + return_err!(channel.closing_signed(&fee_est, &closing_signed)); + }, _ => return, } }