READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server340 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

14,012 bytes · SHA-256 210b1720acce295d… · View upstream ↗

1// Copyright (c) 2009-2010 Satoshi Nakamoto
2// Copyright (c) 2009-present The Bitcoin Core developers
3// Distributed under the MIT software license, see the accompanying
4// file COPYING or http://www.opensource.org/licenses/mit-license.php.
5
6#include <script/script.h>
7
8#include <crypto/common.h>
9#include <crypto/hex_base.h>
10#include <hash.h>
11#include <uint256.h>
12#include <util/hash_type.h>
13
14#include <compare>
15#include <string>
16
17CScriptID::CScriptID(const CScript& in) : BaseHash(Hash160(in)) {}
18
19std::string GetOpName(opcodetype opcode)
20{
21    switch (opcode)
22    {
23    // push value
24    case OP_0                      : return "0";
25    case OP_PUSHDATA1              : return "OP_PUSHDATA1";
26    case OP_PUSHDATA2              : return "OP_PUSHDATA2";
27    case OP_PUSHDATA4              : return "OP_PUSHDATA4";
28    case OP_1NEGATE                : return "-1";
29    case OP_RESERVED               : return "OP_RESERVED";
30    case OP_1                      : return "1";
31    case OP_2                      : return "2";
32    case OP_3                      : return "3";
33    case OP_4                      : return "4";
34    case OP_5                      : return "5";
35    case OP_6                      : return "6";
36    case OP_7                      : return "7";
37    case OP_8                      : return "8";
38    case OP_9                      : return "9";
39    case OP_10                     : return "10";
40    case OP_11                     : return "11";
41    case OP_12                     : return "12";
42    case OP_13                     : return "13";
43    case OP_14                     : return "14";
44    case OP_15                     : return "15";
45    case OP_16                     : return "16";
46
47    // control
48    case OP_NOP                    : return "OP_NOP";
49    case OP_VER                    : return "OP_VER";
50    case OP_IF                     : return "OP_IF";
51    case OP_NOTIF                  : return "OP_NOTIF";
52    case OP_VERIF                  : return "OP_VERIF";
53    case OP_VERNOTIF               : return "OP_VERNOTIF";
54    case OP_ELSE                   : return "OP_ELSE";
55    case OP_ENDIF                  : return "OP_ENDIF";
56    case OP_VERIFY                 : return "OP_VERIFY";
57    case OP_RETURN                 : return "OP_RETURN";
58
59    // stack ops
60    case OP_TOALTSTACK             : return "OP_TOALTSTACK";
61    case OP_FROMALTSTACK           : return "OP_FROMALTSTACK";
62    case OP_2DROP                  : return "OP_2DROP";
63    case OP_2DUP                   : return "OP_2DUP";
64    case OP_3DUP                   : return "OP_3DUP";
65    case OP_2OVER                  : return "OP_2OVER";
66    case OP_2ROT                   : return "OP_2ROT";
67    case OP_2SWAP                  : return "OP_2SWAP";
68    case OP_IFDUP                  : return "OP_IFDUP";
69    case OP_DEPTH                  : return "OP_DEPTH";
70    case OP_DROP                   : return "OP_DROP";
71    case OP_DUP                    : return "OP_DUP";
72    case OP_NIP                    : return "OP_NIP";
73    case OP_OVER                   : return "OP_OVER";
74    case OP_PICK                   : return "OP_PICK";
75    case OP_ROLL                   : return "OP_ROLL";
76    case OP_ROT                    : return "OP_ROT";
77    case OP_SWAP                   : return "OP_SWAP";
78    case OP_TUCK                   : return "OP_TUCK";
79
80    // splice ops
81    case OP_CAT                    : return "OP_CAT";
82    case OP_SUBSTR                 : return "OP_SUBSTR";
83    case OP_LEFT                   : return "OP_LEFT";
84    case OP_RIGHT                  : return "OP_RIGHT";
85    case OP_SIZE                   : return "OP_SIZE";
86
87    // bit logic
88    case OP_INVERT                 : return "OP_INVERT";
89    case OP_AND                    : return "OP_AND";
90    case OP_OR                     : return "OP_OR";
91    case OP_XOR                    : return "OP_XOR";
92    case OP_EQUAL                  : return "OP_EQUAL";
93    case OP_EQUALVERIFY            : return "OP_EQUALVERIFY";
94    case OP_RESERVED1              : return "OP_RESERVED1";
95    case OP_RESERVED2              : return "OP_RESERVED2";
96
97    // numeric
98    case OP_1ADD                   : return "OP_1ADD";
99    case OP_1SUB                   : return "OP_1SUB";
100    case OP_2MUL                   : return "OP_2MUL";
101    case OP_2DIV                   : return "OP_2DIV";
102    case OP_NEGATE                 : return "OP_NEGATE";
103    case OP_ABS                    : return "OP_ABS";
104    case OP_NOT                    : return "OP_NOT";
105    case OP_0NOTEQUAL              : return "OP_0NOTEQUAL";
106    case OP_ADD                    : return "OP_ADD";
107    case OP_SUB                    : return "OP_SUB";
108    case OP_MUL                    : return "OP_MUL";
109    case OP_DIV                    : return "OP_DIV";
110    case OP_MOD                    : return "OP_MOD";
111    case OP_LSHIFT                 : return "OP_LSHIFT";
112    case OP_RSHIFT                 : return "OP_RSHIFT";
113    case OP_BOOLAND                : return "OP_BOOLAND";
114    case OP_BOOLOR                 : return "OP_BOOLOR";
115    case OP_NUMEQUAL               : return "OP_NUMEQUAL";
116    case OP_NUMEQUALVERIFY         : return "OP_NUMEQUALVERIFY";
117    case OP_NUMNOTEQUAL            : return "OP_NUMNOTEQUAL";
118    case OP_LESSTHAN               : return "OP_LESSTHAN";
119    case OP_GREATERTHAN            : return "OP_GREATERTHAN";
120    case OP_LESSTHANOREQUAL        : return "OP_LESSTHANOREQUAL";
121    case OP_GREATERTHANOREQUAL     : return "OP_GREATERTHANOREQUAL";
122    case OP_MIN                    : return "OP_MIN";
123    case OP_MAX                    : return "OP_MAX";
124    case OP_WITHIN                 : return "OP_WITHIN";
125
126    // crypto
127    case OP_RIPEMD160              : return "OP_RIPEMD160";
128    case OP_SHA1                   : return "OP_SHA1";
129    case OP_SHA256                 : return "OP_SHA256";
130    case OP_HASH160                : return "OP_HASH160";
131    case OP_HASH256                : return "OP_HASH256";
132    case OP_CODESEPARATOR          : return "OP_CODESEPARATOR";
133    case OP_CHECKSIG               : return "OP_CHECKSIG";
134    case OP_CHECKSIGVERIFY         : return "OP_CHECKSIGVERIFY";
135    case OP_CHECKMULTISIG          : return "OP_CHECKMULTISIG";
136    case OP_CHECKMULTISIGVERIFY    : return "OP_CHECKMULTISIGVERIFY";
137
138    // expansion
139    case OP_NOP1                   : return "OP_NOP1";
140    case OP_CHECKLOCKTIMEVERIFY    : return "OP_CHECKLOCKTIMEVERIFY";
141    case OP_CHECKSEQUENCEVERIFY    : return "OP_CHECKSEQUENCEVERIFY";
142    case OP_NOP4                   : return "OP_NOP4";
143    case OP_NOP5                   : return "OP_NOP5";
144    case OP_NOP6                   : return "OP_NOP6";
145    case OP_NOP7                   : return "OP_NOP7";
146    case OP_NOP8                   : return "OP_NOP8";
147    case OP_NOP9                   : return "OP_NOP9";
148    case OP_NOP10                  : return "OP_NOP10";
149
150    // Opcode added by BIP 342 (Tapscript)
151    case OP_CHECKSIGADD            : return "OP_CHECKSIGADD";
152
153    case OP_INVALIDOPCODE          : return "OP_INVALIDOPCODE";
154
155    } // no default case, so the compiler can warn about missing cases
156    return "OP_UNKNOWN";
157}
158
159unsigned int CScript::GetSigOpCount(bool fAccurate) const
160{
161    unsigned int n = 0;
162    const_iterator pc = begin();
163    opcodetype lastOpcode = OP_INVALIDOPCODE;
164    while (pc < end())
165    {
166        opcodetype opcode;
167        if (!GetOp(pc, opcode))
168            break;
169        if (opcode == OP_CHECKSIG || opcode == OP_CHECKSIGVERIFY)
170            n++;
171        else if (opcode == OP_CHECKMULTISIG || opcode == OP_CHECKMULTISIGVERIFY)
172        {
173            if (fAccurate && lastOpcode >= OP_1 && lastOpcode <= OP_16)
174                n += DecodeOP_N(lastOpcode);
175            else
176                n += MAX_PUBKEYS_PER_MULTISIG;
177        }
178        lastOpcode = opcode;
179    }
180    return n;
181}
182
183unsigned int CScript::GetSigOpCount(const CScript& scriptSig) const
184{
185    if (!IsPayToScriptHash())
186        return GetSigOpCount(true);
187
188    // This is a pay-to-script-hash scriptPubKey;
189    // get the last item that the scriptSig
190    // pushes onto the stack:
191    const_iterator pc = scriptSig.begin();
192    std::vector<unsigned char> vData;
193    while (pc < scriptSig.end())
194    {
195        opcodetype opcode;
196        if (!scriptSig.GetOp(pc, opcode, vData))
197            return 0;
198        if (opcode > OP_16)
199            return 0;
200    }
201
202    /// ... and return its opcount:
203    CScript subscript(vData.begin(), vData.end());
204    return subscript.GetSigOpCount(true);
205}
206
207bool CScript::IsPayToAnchor() const
208{
209    return (this->size() == 4 &&
210        (*this)[0] == OP_1 &&
211        (*this)[1] == 0x02 &&
212        (*this)[2] == 0x4e &&
213        (*this)[3] == 0x73);
214}
215
216bool CScript::IsPayToAnchor(int version, const std::vector<unsigned char>& program)
217{
218    return version == 1 &&
219        program.size() == 2 &&
220        program[0] == 0x4e &&
221        program[1] == 0x73;
222}
223
224bool CScript::IsPayToScriptHash() const
225{
226    // Extra-fast test for pay-to-script-hash CScripts:
227    return (this->size() == 23 &&
228            (*this)[0] == OP_HASH160 &&
229            (*this)[1] == 0x14 &&
230            (*this)[22] == OP_EQUAL);
231}
232
233bool CScript::IsPayToWitnessScriptHash() const
234{
235    // Extra-fast test for pay-to-witness-script-hash CScripts:
236    return (this->size() == 34 &&
237            (*this)[0] == OP_0 &&
238            (*this)[1] == 0x20);
239}
240
241bool CScript::IsPayToTaproot() const
242{
243    return (this->size() == 34 &&
244            (*this)[0] == OP_1 &&
245            (*this)[1] == 0x20);
246}
247
248// A witness program is any valid CScript that consists of a 1-byte push opcode
249// followed by a data push between 2 and 40 bytes.
250bool CScript::IsWitnessProgram(int& version, std::vector<unsigned char>& program) const

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.