sigopcount_tests.cpp raw
1 // Copyright (c) 2012-present The Bitcoin Core developers
2 // Distributed under the MIT software license, see the accompanying
3 // file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5 #include <addresstype.h>
6 #include <coins.h>
7 #include <consensus/consensus.h>
8 #include <consensus/tx_verify.h>
9 #include <key.h>
10 #include <pubkey.h>
11 #include <script/interpreter.h>
12 #include <script/script.h>
13 #include <script/solver.h>
14 #include <test/util/setup_common.h>
15 #include <uint256.h>
16
17 #include <vector>
18
19 #include <boost/test/unit_test.hpp>
20
21 // Helpers:
22 static std::vector<unsigned char>
23 Serialize(const CScript& s)
24 {
25 std::vector<unsigned char> sSerialized(s.begin(), s.end());
26 return sSerialized;
27 }
28
29 BOOST_FIXTURE_TEST_SUITE(sigopcount_tests, BasicTestingSetup)
30
31 BOOST_AUTO_TEST_CASE(GetSigOpCount)
32 {
33 // Test CScript::GetSigOpCount()
34 CScript s1;
35 BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 0U);
36 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 0U);
37
38 uint160 dummy;
39 s1 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << OP_2 << OP_CHECKMULTISIG;
40 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 2U);
41 s1 << OP_IF << OP_CHECKSIG << OP_ENDIF;
42 BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 3U);
43 BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 21U);
44
45 CScript p2sh = GetScriptForDestination(ScriptHash(s1));
46 CScript scriptSig;
47 scriptSig << OP_0 << Serialize(s1);
48 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig), 3U);
49
50 std::vector<CPubKey> keys;
51 for (int i = 0; i < 3; i++)
52 {
53 CKey k = GenerateRandomKey();
54 keys.push_back(k.GetPubKey());
55 }
56 CScript s2 = GetScriptForMultisig(1, keys);
57 BOOST_CHECK_EQUAL(s2.GetSigOpCount(true), 3U);
58 BOOST_CHECK_EQUAL(s2.GetSigOpCount(false), 20U);
59
60 p2sh = GetScriptForDestination(ScriptHash(s2));
61 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(true), 0U);
62 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(false), 0U);
63 CScript scriptSig2;
64 scriptSig2 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << Serialize(s2);
65 BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig2), 3U);
66 }
67
68 /**
69 * Verifies script execution of the zeroth scriptPubKey of tx output and
70 * zeroth scriptSig and witness of tx input.
71 */
72 static ScriptError VerifyWithFlag(const CTransaction& output, const CMutableTransaction& input, script_verify_flags flags)
73 {
74 ScriptError error;
75 CTransaction inputi(input);
76 bool ret = VerifyScript(inputi.vin[0].scriptSig, output.vout[0].scriptPubKey, &inputi.vin[0].scriptWitness, flags, TransactionSignatureChecker(&inputi, 0, output.vout[0].nValue, MissingDataBehavior::ASSERT_FAIL), &error);
77 BOOST_CHECK((ret == true) == (error == SCRIPT_ERR_OK));
78
79 return error;
80 }
81
82 /**
83 * Builds a creationTx from scriptPubKey and a spendingTx from scriptSig
84 * and witness such that spendingTx spends output zero of creationTx.
85 * Also inserts creationTx's output into the coins view.
86 */
87 static void BuildTxs(CMutableTransaction& spendingTx, CCoinsViewCache& coins, CMutableTransaction& creationTx, const CScript& scriptPubKey, const CScript& scriptSig, const CScriptWitness& witness)
88 {
89 creationTx.version = 1;
90 creationTx.vin.resize(1);
91 creationTx.vin[0].prevout.SetNull();
92 creationTx.vin[0].scriptSig = CScript();
93 creationTx.vout.resize(1);
94 creationTx.vout[0].nValue = 1;
95 creationTx.vout[0].scriptPubKey = scriptPubKey;
96
97 spendingTx.version = 1;
98 spendingTx.vin.resize(1);
99 spendingTx.vin[0].prevout.hash = creationTx.GetHash();
100 spendingTx.vin[0].prevout.n = 0;
101 spendingTx.vin[0].scriptSig = scriptSig;
102 spendingTx.vin[0].scriptWitness = witness;
103 spendingTx.vout.resize(1);
104 spendingTx.vout[0].nValue = 1;
105 spendingTx.vout[0].scriptPubKey = CScript();
106
107 AddCoins(coins, CTransaction(creationTx), 0);
108 }
109
110 BOOST_AUTO_TEST_CASE(GetTxSigOpCost)
111 {
112 // Transaction creates outputs
113 CMutableTransaction creationTx;
114 // Transaction that spends outputs and whose
115 // sig op cost is going to be tested
116 CMutableTransaction spendingTx;
117
118 // Create utxo set
119 CCoinsViewCache coins{&CoinsViewEmpty::Get()};
120 // Create key
121 CKey key = GenerateRandomKey();
122 CPubKey pubkey = key.GetPubKey();
123 // Default flags
124 const script_verify_flags flags{SCRIPT_VERIFY_WITNESS | SCRIPT_VERIFY_P2SH};
125
126 // Multisig script (legacy counting)
127 {
128 CScript scriptPubKey = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
129 // Do not use a valid signature to avoid using wallet operations.
130 CScript scriptSig = CScript() << OP_0 << OP_0;
131
132 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness());
133 // Legacy counting only includes signature operations in scriptSigs and scriptPubKeys
134 // of a transaction and does not take the actual executed sig operations into account.
135 // spendingTx in itself does not contain a signature operation.
136 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
137 // creationTx contains two signature operations in its scriptPubKey, but legacy counting
138 // is not accurate.
139 assert(GetTransactionSigOpCost(CTransaction(creationTx), coins, flags) == MAX_PUBKEYS_PER_MULTISIG * WITNESS_SCALE_FACTOR);
140 // Sanity check: script verification fails because of an invalid signature.
141 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
142 }
143
144 // Multisig nested in P2SH
145 {
146 CScript redeemScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
147 CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript));
148 CScript scriptSig = CScript() << OP_0 << OP_0 << ToByteVector(redeemScript);
149
150 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness());
151 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2 * WITNESS_SCALE_FACTOR);
152 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
153
154 // P2SH sigops are not counted if we don't set the SCRIPT_VERIFY_P2SH flag
155 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, /*flags=*/0) == 0);
156 }
157
158 // P2WPKH witness program
159 {
160 CScript scriptPubKey = GetScriptForDestination(WitnessV0KeyHash(pubkey));
161 CScript scriptSig = CScript();
162 CScriptWitness scriptWitness;
163 scriptWitness.stack.emplace_back(0);
164 scriptWitness.stack.emplace_back(0);
165
166
167 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
168 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1);
169 // No signature operations if we don't verify the witness.
170 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0);
171 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY);
172
173 // The sig op cost for witness version != 0 is zero.
174 assert(scriptPubKey[0] == 0x00);
175 scriptPubKey[0] = 0x51;
176 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
177 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
178 scriptPubKey[0] = 0x00;
179 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
180
181 // The witness of a coinbase transaction is not taken into account.
182 spendingTx.vin[0].prevout.SetNull();
183 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
184 }
185
186 // P2WPKH nested in P2SH
187 {
188 CScript scriptSig = GetScriptForDestination(WitnessV0KeyHash(pubkey));
189 CScript scriptPubKey = GetScriptForDestination(ScriptHash(scriptSig));
190 scriptSig = CScript() << ToByteVector(scriptSig);
191 CScriptWitness scriptWitness;
192 scriptWitness.stack.emplace_back(0);
193 scriptWitness.stack.emplace_back(0);
194
195 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
196 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1);
197 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY);
198 }
199
200 // P2WSH witness program
201 {
202 CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
203 CScript scriptPubKey = GetScriptForDestination(WitnessV0ScriptHash(witnessScript));
204 CScript scriptSig = CScript();
205 CScriptWitness scriptWitness;
206 scriptWitness.stack.emplace_back(0);
207 scriptWitness.stack.emplace_back(0);
208 scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end());
209
210 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
211 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2);
212 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0);
213 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
214 }
215
216 // P2WSH nested in P2SH
217 {
218 CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
219 CScript redeemScript = GetScriptForDestination(WitnessV0ScriptHash(witnessScript));
220 CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript));
221 CScript scriptSig = CScript() << ToByteVector(redeemScript);
222 CScriptWitness scriptWitness;
223 scriptWitness.stack.emplace_back(0);
224 scriptWitness.stack.emplace_back(0);
225 scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end());
226
227 BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
228 assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2);
229 assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
230 }
231 }
232
233 BOOST_AUTO_TEST_SUITE_END()
234