Coverage Report

Created: 2025-02-21 14:37

/root/bitcoin/src/wallet/test/fuzz/spend.cpp
Line
Count
Source (jump to first uncovered line)
1
// Copyright (c) 2024-present The Bitcoin Core developers
2
// Distributed under the MIT software license, see the accompanying
3
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5
#include <test/fuzz/FuzzedDataProvider.h>
6
#include <test/fuzz/fuzz.h>
7
#include <test/fuzz/util.h>
8
#include <test/fuzz/util/wallet.h>
9
#include <test/util/random.h>
10
#include <test/util/setup_common.h>
11
#include <util/time.h>
12
#include <wallet/coincontrol.h>
13
#include <wallet/context.h>
14
#include <wallet/spend.h>
15
#include <wallet/test/util.h>
16
#include <wallet/wallet.h>
17
#include <validation.h>
18
#include <addresstype.h>
19
20
using util::ToString;
21
22
namespace wallet {
23
namespace {
24
const TestingSetup* g_setup;
25
26
void initialize_setup()
27
0
{
28
0
    static const auto testing_setup = MakeNoLogFileContext<const TestingSetup>();
29
0
    g_setup = testing_setup.get();
30
0
}
31
32
FUZZ_TARGET(wallet_create_transaction, .init = initialize_setup)
33
0
{
34
0
    SeedRandomStateForTest(SeedRand::ZEROS);
35
0
    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
36
0
    SetMockTime(ConsumeTime(fuzzed_data_provider));
37
0
    const auto& node = g_setup->m_node;
38
0
    Chainstate& chainstate{node.chainman->ActiveChainstate()};
39
0
    ArgsManager& args = *node.args;
40
0
    args.ForceSetArg("-dustrelayfee", ToString(fuzzed_data_provider.ConsumeIntegralInRange<CAmount>(0, MAX_MONEY)));
41
0
    FuzzedWallet fuzzed_wallet{
42
0
        *g_setup->m_node.chain,
43
0
        "fuzzed_wallet_a",
44
0
        "tprv8ZgxMBicQKsPd1QwsGgzfu2pcPYbBosZhJknqreRHgsWx32nNEhMjGQX2cgFL8n6wz9xdDYwLcs78N4nsCo32cxEX8RBtwGsEGgybLiQJfk",
45
0
    };
46
47
0
    CCoinControl coin_control;
48
0
    if (fuzzed_data_provider.ConsumeBool()) coin_control.m_version = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
49
0
    coin_control.m_avoid_partial_spends = fuzzed_data_provider.ConsumeBool();
50
0
    coin_control.m_include_unsafe_inputs = fuzzed_data_provider.ConsumeBool();
51
0
    if (fuzzed_data_provider.ConsumeBool()) coin_control.m_confirm_target = fuzzed_data_provider.ConsumeIntegralInRange<unsigned int>(0, 999'000);
52
0
    coin_control.destChange = fuzzed_data_provider.ConsumeBool() ? fuzzed_wallet.GetDestination(fuzzed_data_provider) : ConsumeTxDestination(fuzzed_data_provider);
53
0
    if (fuzzed_data_provider.ConsumeBool()) coin_control.m_change_type = fuzzed_data_provider.PickValueInArray(OUTPUT_TYPES);
54
0
    if (fuzzed_data_provider.ConsumeBool()) coin_control.m_feerate = CFeeRate(ConsumeMoney(fuzzed_data_provider, /*max=*/COIN));
55
0
    coin_control.m_allow_other_inputs = fuzzed_data_provider.ConsumeBool();
56
0
    coin_control.m_locktime = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
57
0
    coin_control.fOverrideFeeRate = fuzzed_data_provider.ConsumeBool();
58
59
0
    int next_locktime{0};
60
0
    CAmount all_values{0};
61
0
    LIMITED_WHILE(fuzzed_data_provider.ConsumeBool(), 10000)
62
0
    {
63
0
        CMutableTransaction tx;
64
0
        tx.nLockTime = next_locktime++;
65
0
        tx.vout.resize(1);
66
0
        CAmount n_value{ConsumeMoney(fuzzed_data_provider)};
67
0
        all_values += n_value;
68
0
        if (all_values > MAX_MONEY) return;
69
0
        tx.vout[0].nValue = n_value;
70
0
        tx.vout[0].scriptPubKey = GetScriptForDestination(fuzzed_wallet.GetDestination(fuzzed_data_provider));
71
0
        LOCK(fuzzed_wallet.wallet->cs_wallet);
72
0
        auto txid{tx.GetHash()};
73
0
        auto ret{fuzzed_wallet.wallet->mapWallet.emplace(std::piecewise_construct, std::forward_as_tuple(txid), std::forward_as_tuple(MakeTransactionRef(std::move(tx)), TxStateConfirmed{chainstate.m_chain.Tip()->GetBlockHash(), chainstate.m_chain.Height(), /*index=*/0}))};
74
0
        assert(ret.second);
75
0
    }
76
77
0
    std::vector<CRecipient> recipients;
78
0
    LIMITED_WHILE(fuzzed_data_provider.ConsumeBool(), 100) {
79
0
        CTxDestination destination;
80
0
        CallOneOf(
81
0
            fuzzed_data_provider,
82
0
            [&] {
83
0
                destination = fuzzed_wallet.GetDestination(fuzzed_data_provider);
84
0
            },
85
0
            [&] {
86
0
                CScript script;
87
0
                script << OP_RETURN;
88
0
                destination = CNoDestination{script};
89
0
            },
90
0
            [&] {
91
0
                destination = ConsumeTxDestination(fuzzed_data_provider);
92
0
            }
93
0
        );
94
0
        recipients.push_back({destination,
95
0
                              /*nAmount=*/ConsumeMoney(fuzzed_data_provider),
96
0
                              /*fSubtractFeeFromAmount=*/fuzzed_data_provider.ConsumeBool()});
97
0
    }
98
99
0
    std::optional<unsigned int> change_pos;
100
0
    if (fuzzed_data_provider.ConsumeBool()) change_pos = fuzzed_data_provider.ConsumeIntegral<unsigned int>();
101
0
    (void)CreateTransaction(*fuzzed_wallet.wallet, recipients, change_pos, coin_control);
102
0
}
103
} // namespace
104
} // namespace wallet