READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

14,346 bytes · SHA-256 07482990d44e47a8… · View upstream ↗

1// Copyright (c) 2020-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <addrman.h>
6#include <chainparams.h>
7#include <common/args.h>
8#include <net.h>
9#include <net_processing.h>
10#include <netaddress.h>
11#include <protocol.h>
12#include <test/fuzz/FuzzedDataProvider.h>
13#include <test/fuzz/fuzz.h>
14#include <test/fuzz/util.h>
15#include <test/fuzz/util/net.h>
16#include <test/fuzz/util/threadinterrupt.h>
17#include <test/util/setup_common.h>
18#include <test/util/time.h>
19#include <util/translation.h>
20
21#include <cstdint>
22#include <vector>
23
24namespace {
25const TestingSetup* g_setup;
26
27int32_t GetCheckRatio()
28{
29    return std::clamp<int32_t>(g_setup->m_node.args->GetIntArg("-checkaddrman", 0), 0, 1000000);
30}
31
32} // namespace
33
34void initialize_connman()
35{
36    static const auto testing_setup = MakeNoLogFileContext<const TestingSetup>();
37    g_setup = testing_setup.get();
38}
39
40FUZZ_TARGET(connman, .init = initialize_connman)
41{
42    SeedRandomStateForTest(SeedRand::ZEROS);
43    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
44    FakeNodeClock clock{ConsumeTime(fuzzed_data_provider)};
45    FakeSteadyClock steady_clock;
46    auto netgroupman{ConsumeNetGroupManager(fuzzed_data_provider)};
47    auto addr_man_ptr{std::make_unique<AddrManDeterministic>(netgroupman, fuzzed_data_provider, GetCheckRatio())};
48    if (fuzzed_data_provider.ConsumeBool()) {
49        const std::vector<uint8_t> serialized_data{ConsumeRandomLengthByteVector(fuzzed_data_provider)};
50        DataStream ds{serialized_data};
51        try {
52            ds >> *addr_man_ptr;
53        } catch (const std::ios_base::failure&) {
54            addr_man_ptr = std::make_unique<AddrManDeterministic>(netgroupman, fuzzed_data_provider, GetCheckRatio());
55        }
56    }
57    AddrManDeterministic& addr_man{*addr_man_ptr};
58    auto net_events{ConsumeNetEvents(fuzzed_data_provider)};
59
60    // Mock CreateSock() to create FuzzedSock.
61    auto CreateSockOrig = CreateSock;
62    CreateSock = [&fuzzed_data_provider, &steady_clock](int, int, int) {
63        return std::make_unique<FuzzedSock>(fuzzed_data_provider, steady_clock);
64    };
65
66    // Mock g_dns_lookup() to return a fuzzed address.
67    auto g_dns_lookup_orig = g_dns_lookup;
68    g_dns_lookup = [&fuzzed_data_provider](const std::string&, bool) {
69        return std::vector<CNetAddr>{ConsumeNetAddr(fuzzed_data_provider)};
70    };
71
72    ConnmanTestMsg connman{fuzzed_data_provider.ConsumeIntegral<uint64_t>(),
73                     fuzzed_data_provider.ConsumeIntegral<uint64_t>(),
74                     addr_man,
75                     netgroupman,
76                     Params(),
77                     fuzzed_data_provider.ConsumeBool(),
78                     ConsumeThreadInterrupt(fuzzed_data_provider)};
79
80    const uint64_t max_outbound_limit{fuzzed_data_provider.ConsumeIntegral<uint64_t>()};
81    CConnman::Options options;
82    options.m_msgproc = &net_events;
83    options.nMaxOutboundLimit = max_outbound_limit;
84
85    const auto local_services{ConsumeWeakEnum(fuzzed_data_provider, ALL_SERVICE_FLAGS)};
86    options.m_local_services = local_services;
87
88    const auto use_addrman_outgoing{fuzzed_data_provider.ConsumeBool()};
89    options.m_use_addrman_outgoing = use_addrman_outgoing;
90    options.m_max_automatic_connections = fuzzed_data_provider.ConsumeIntegralInRange<int>(0, 1000);
91
92    auto consume_whitelist = [&]() {
93        std::vector<NetWhitelistPermissions> result(fuzzed_data_provider.ConsumeIntegralInRange<size_t>(0, 3));
94        for (auto& entry : result) {
95            entry.m_flags = ConsumeWeakEnum(fuzzed_data_provider, ALL_NET_PERMISSION_FLAGS);
96            entry.m_subnet = ConsumeSubNet(fuzzed_data_provider);
97        }
98        return result;
99    };
100    options.vWhitelistedRangeIncoming = consume_whitelist();
101    options.vWhitelistedRangeOutgoing = consume_whitelist();
102
103    connman.Init(options);
104
105    const uint64_t total_bytes_recv_initial{connman.GetTotalBytesRecv()};
106    const uint64_t total_bytes_sent_initial{connman.GetTotalBytesSent()};
107
108    CNetAddr random_netaddr;
109    CAddress random_address;
110    CNode random_node = ConsumeNode(fuzzed_data_provider, steady_clock);
111    CSubNet random_subnet;
112    std::string random_string;
113    std::vector<NodeId> node_ids;
114    std::vector<std::string> node_addr_names;
115
116    LIMITED_WHILE (fuzzed_data_provider.ConsumeBool(), 100) {
117        CNode& p2p_node{*ConsumeNodeAsUniquePtr(fuzzed_data_provider, steady_clock).release()};
118        // Simulate post-handshake state.
119        p2p_node.fSuccessfullyConnected = true;
120        connman.AddTestNode(p2p_node);
121        node_ids.push_back(p2p_node.GetId());
122        node_addr_names.push_back(p2p_node.m_addr_name);
123    }
124
125    LIMITED_WHILE (fuzzed_data_provider.ConsumeBool(), 10000) {
126        CallOneOf(
127            fuzzed_data_provider,
128            [&] {
129                random_netaddr = ConsumeNetAddr(fuzzed_data_provider);
130            },
131            [&] {
132                random_address = ConsumeAddress(fuzzed_data_provider);
133            },
134            [&] {
135                random_subnet = ConsumeSubNet(fuzzed_data_provider);
136            },
137            [&] {
138                random_string = fuzzed_data_provider.ConsumeRandomLengthString(64);
139            },
140            [&] {
141                const std::string& node_str = (!node_addr_names.empty() && fuzzed_data_provider.ConsumeBool())
142                    ? PickValue(fuzzed_data_provider, node_addr_names)
143                    : random_string;
144                const auto added_node_info{connman.GetAddedNodeInfo(/*include_connected=*/true)};
145                const auto add_node{connman.AddNode({node_str, /*use_v2transport=*/fuzzed_data_provider.ConsumeBool()})};
146                if (add_node) {
147                    assert(!connman.AddNode({node_str, /*use_v2transport=*/fuzzed_data_provider.ConsumeBool()}));
148                    assert(added_node_info.size() < connman.GetAddedNodeInfo(/*include_connected=*/true).size());
149                    const auto remove{fuzzed_data_provider.ConsumeBool()};
150                    if (remove) {
151                        assert(connman.RemoveAddedNode(node_str));
152                        assert(added_node_info.size() == connman.GetAddedNodeInfo(/*include_connected=*/true).size());
153                    }
154                }
155            },
156            [&] {
157                (void)connman.RemoveAddedNode(random_string);
158            },
159            [&] {
160                connman.CheckIncomingNonce(fuzzed_data_provider.ConsumeIntegral<uint64_t>());
161            },
162            [&] {
163                connman.DisconnectNode(fuzzed_data_provider.ConsumeIntegral<NodeId>());
164            },
165            [&] {
166                connman.DisconnectNode(random_netaddr);
167            },
168            [&] {
169                connman.DisconnectNode(random_string);
170            },
171            [&] {
172                connman.DisconnectNode(random_subnet);
173            },
174            [&] {
175                NodeId id = node_ids.empty() || fuzzed_data_provider.ConsumeBool()
176                    ? fuzzed_data_provider.ConsumeIntegral<NodeId>()
177                    : PickValue(fuzzed_data_provider, node_ids);
178                (void)connman.ForNode(id, [&](CNode* pnode) {
179                    (void)pnode->GetId();
180                    (void)pnode->IsInboundConn();
181                    (void)pnode->IsFullOutboundConn();
182                    return true;
183                });
184            },
185            [&] {
186                auto max_addresses = fuzzed_data_provider.ConsumeIntegral<size_t>();
187                auto max_pct = fuzzed_data_provider.ConsumeIntegralInRange<size_t>(0, 100);
188                auto filtered = fuzzed_data_provider.ConsumeBool();
189                (void)connman.GetAddressesUnsafe(max_addresses, max_pct, /*network=*/std::nullopt, filtered);
190            },
191            [&] {
192                auto max_addresses = fuzzed_data_provider.ConsumeIntegral<size_t>();
193                auto max_pct = fuzzed_data_provider.ConsumeIntegralInRange<size_t>(0, 100);
194                (void)connman.GetAddresses(/*requestor=*/random_node, max_addresses, max_pct);
195            },
196            [&] {
197                (void)connman.GetDeterministicRandomizer(fuzzed_data_provider.ConsumeIntegral<uint64_t>());
198            },
199            [&] {
200                (void)connman.GetNodeCount(fuzzed_data_provider.PickValueInArray({ConnectionDirection::None, ConnectionDirection::In, ConnectionDirection::Out, ConnectionDirection::Both}));
201            },
202            [&] {
203                (void)connman.OutboundTargetReached(fuzzed_data_provider.ConsumeBool());
204            },
205            [&] {
206                CSerializedNetMsg serialized_net_msg;
207                serialized_net_msg.m_type = fuzzed_data_provider.ConsumeRandomLengthString(CMessageHeader::MESSAGE_TYPE_SIZE);
208                serialized_net_msg.data = ConsumeRandomLengthByteVector(fuzzed_data_provider);
209                connman.PushMessage(&random_node, std::move(serialized_net_msg));
210            },
211            [&] {
212                const auto set_active{fuzzed_data_provider.ConsumeBool()};
213                connman.SetNetworkActive(set_active);
214                assert(connman.GetNetworkActive() == set_active);
215            },
216            [&] {
217                connman.SetTryNewOutboundPeer(fuzzed_data_provider.ConsumeBool());
218            },
219            [&] {
220                const auto services{ConsumeWeakEnum(fuzzed_data_provider, ALL_SERVICE_FLAGS)};
221                const auto before{connman.GetLocalServices()};
222                if (fuzzed_data_provider.ConsumeBool()) {
223                    connman.AddLocalServices(services);
224                    assert((connman.GetLocalServices() & services) == services);
225                    // Restore by clearing only the bits that weren't already set.
226                    connman.RemoveLocalServices(ServiceFlags(services & ~before));
227                } else {
228                    connman.RemoveLocalServices(services);
229                    assert((connman.GetLocalServices() & services) == 0);
230                    // Restore by re-adding only the bits that were previously set.
231                    connman.AddLocalServices(ServiceFlags(services & before));
232                }
233                assert(connman.GetLocalServices() == before);
234            },
235            [&] {
236                ConnectionType conn_type{
237                    fuzzed_data_provider.PickValueInArray(ALL_CONNECTION_TYPES)};
238                if (conn_type == ConnectionType::INBOUND) { // INBOUND is not allowed
239                    conn_type = ConnectionType::OUTBOUND_FULL_RELAY;
240                }
241
242                std::optional<Proxy> proxy_override;
243                if (conn_type == ConnectionType::PRIVATE_BROADCAST || fuzzed_data_provider.ConsumeBool()) {
244                    proxy_override.emplace(ConsumeService(fuzzed_data_provider));
245                }
246
247                connman.OpenNetworkConnection(
248                    /*addrConnect=*/random_address,
249                    /*fCountFailure=*/fuzzed_data_provider.ConsumeBool(),
250                    /*grant_outbound=*/{},

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.