READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

15,524 bytes · SHA-256 df547390600afa81… · View upstream ↗

1// Copyright (c) 2009-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <test/fuzz/util/net.h>
6
7#include <compat/compat.h>
8#include <netaddress.h>
9#include <node/protocol_version.h>
10#include <protocol.h>
11#include <test/fuzz/FuzzedDataProvider.h>
12#include <test/fuzz/util.h>
13#include <test/util/net.h>
14#include <util/sock.h>
15#include <util/time.h>
16
17#include <array>
18#include <cassert>
19#include <cerrno>
20#include <cstdint>
21#include <cstdlib>
22#include <cstring>
23#include <ranges>
24#include <thread>
25#include <vector>
26
27class CNode;
28
29CNetAddr ConsumeNetAddr(FuzzedDataProvider& fuzzed_data_provider, FastRandomContext* rand) noexcept
30{
31    struct NetAux {
32        Network net;
33        CNetAddr::BIP155Network bip155;
34        size_t len;
35    };
36
37    static constexpr std::array<NetAux, 6> nets{
38        NetAux{.net = Network::NET_IPV4, .bip155 = CNetAddr::BIP155Network::IPV4, .len = ADDR_IPV4_SIZE},
39        NetAux{.net = Network::NET_IPV6, .bip155 = CNetAddr::BIP155Network::IPV6, .len = ADDR_IPV6_SIZE},
40        NetAux{.net = Network::NET_ONION, .bip155 = CNetAddr::BIP155Network::TORV3, .len = ADDR_TORV3_SIZE},
41        NetAux{.net = Network::NET_I2P, .bip155 = CNetAddr::BIP155Network::I2P, .len = ADDR_I2P_SIZE},
42        NetAux{.net = Network::NET_CJDNS, .bip155 = CNetAddr::BIP155Network::CJDNS, .len = ADDR_CJDNS_SIZE},
43        NetAux{.net = Network::NET_INTERNAL, .bip155 = CNetAddr::BIP155Network{0}, .len = 0},
44    };
45
46    const size_t nets_index{rand == nullptr
47        ? fuzzed_data_provider.ConsumeIntegralInRange<size_t>(0, nets.size() - 1)
48        : static_cast<size_t>(rand->randrange(nets.size()))};
49
50    const auto& aux = nets[nets_index];
51
52    CNetAddr addr;
53
54    if (aux.net == Network::NET_INTERNAL) {
55        if (rand == nullptr) {
56            addr.SetInternal(fuzzed_data_provider.ConsumeBytesAsString(32));
57        } else {
58            const auto v = rand->randbytes(32);
59            addr.SetInternal(std::string{v.begin(), v.end()});
60        }
61        return addr;
62    }
63
64    DataStream s;
65
66    s << static_cast<uint8_t>(aux.bip155);
67
68    std::vector<uint8_t> addr_bytes;
69    if (rand == nullptr) {
70        addr_bytes = fuzzed_data_provider.ConsumeBytes<uint8_t>(aux.len);
71        addr_bytes.resize(aux.len);
72    } else {
73        addr_bytes = rand->randbytes(aux.len);
74    }
75    if (aux.net == NET_IPV6 && addr_bytes[0] == CJDNS_PREFIX) { // Avoid generating IPv6 addresses that look like CJDNS.
76        addr_bytes[0] = 0x55; // Just an arbitrary number, anything != CJDNS_PREFIX would do.
77    }
78    if (aux.net == NET_CJDNS) { // Avoid generating CJDNS addresses that don't start with CJDNS_PREFIX because those are !IsValid().
79        addr_bytes[0] = CJDNS_PREFIX;
80    }
81    s << addr_bytes;
82
83    s >> CAddress::V2_NETWORK(addr);
84
85    return addr;
86}
87
88CAddress ConsumeAddress(FuzzedDataProvider& fuzzed_data_provider) noexcept
89{
90    return {ConsumeService(fuzzed_data_provider), ConsumeWeakEnum(fuzzed_data_provider, ALL_SERVICE_FLAGS), NodeSeconds{std::chrono::seconds{fuzzed_data_provider.ConsumeIntegral<uint32_t>()}}};
91}
92
93template <typename P>
94P ConsumeDeserializationParams(FuzzedDataProvider& fuzzed_data_provider) noexcept
95{
96    constexpr std::array ADDR_ENCODINGS{
97        CNetAddr::Encoding::V1,
98        CNetAddr::Encoding::V2,
99    };
100    constexpr std::array ADDR_FORMATS{
101        CAddress::Format::Disk,
102        CAddress::Format::Network,
103    };
104    if constexpr (std::is_same_v<P, CNetAddr::SerParams>) {
105        return P{PickValue(fuzzed_data_provider, ADDR_ENCODINGS)};
106    }
107    if constexpr (std::is_same_v<P, CAddress::SerParams>) {
108        return P{{PickValue(fuzzed_data_provider, ADDR_ENCODINGS)}, PickValue(fuzzed_data_provider, ADDR_FORMATS)};
109    }
110}
111template CNetAddr::SerParams ConsumeDeserializationParams(FuzzedDataProvider&) noexcept;
112template CAddress::SerParams ConsumeDeserializationParams(FuzzedDataProvider&) noexcept;
113
114FuzzedSock::FuzzedSock(FuzzedDataProvider& fuzzed_data_provider, FakeSteadyClock& clock)
115    : Sock{fuzzed_data_provider.ConsumeIntegralInRange<SOCKET>(INVALID_SOCKET - 1, INVALID_SOCKET)},
116      m_fuzzed_data_provider{fuzzed_data_provider},
117      m_selectable{fuzzed_data_provider.ConsumeBool()},
118      m_clock{clock}
119{
120}
121
122FuzzedSock::~FuzzedSock()
123{
124    // Sock::~Sock() will be called after FuzzedSock::~FuzzedSock() and it will call
125    // close(m_socket) if m_socket is not INVALID_SOCKET.
126    // Avoid closing an arbitrary file descriptor (m_socket is just a random very high number which
127    // theoretically may concide with a real opened file descriptor).
128    m_socket = INVALID_SOCKET;
129}
130
131FuzzedSock& FuzzedSock::operator=(Sock&& other)
132{
133    assert(false && "Move of Sock into FuzzedSock not allowed.");
134    return *this;
135}
136
137ssize_t FuzzedSock::Send(const void* data, size_t len, int flags) const
138{
139    constexpr std::array send_errnos{
140        EACCES,
141        EAGAIN,
142        EALREADY,
143        EBADF,
144        ECONNRESET,
145        EDESTADDRREQ,
146        EFAULT,
147        EINTR,
148        EINVAL,
149        EISCONN,
150        EMSGSIZE,
151        ENOBUFS,
152        ENOMEM,
153        ENOTCONN,
154        ENOTSOCK,
155        EOPNOTSUPP,
156        EPIPE,
157        EWOULDBLOCK,
158    };
159    if (m_fuzzed_data_provider.ConsumeBool()) {
160        return len;
161    }
162    const ssize_t r = m_fuzzed_data_provider.ConsumeIntegralInRange<ssize_t>(-1, len);
163    if (r == -1) {
164        SetFuzzedErrNo(m_fuzzed_data_provider, send_errnos);
165    }
166    return r;
167}
168
169ssize_t FuzzedSock::Recv(void* buf, size_t len, int flags) const
170{
171    // Have a permanent error at recv_errnos[0] because when the fuzzed data is exhausted
172    // SetFuzzedErrNo() will always return the first element and we want to avoid Recv()
173    // returning -1 and setting errno to EAGAIN repeatedly.
174    constexpr std::array recv_errnos{
175        ECONNREFUSED,
176        EAGAIN,
177        EBADF,
178        EFAULT,
179        EINTR,
180        EINVAL,
181        ENOMEM,
182        ENOTCONN,
183        ENOTSOCK,
184        EWOULDBLOCK,
185    };
186    assert(buf != nullptr || len == 0);
187
188    // Do the latency before any of the "return" statements.
189    if (m_fuzzed_data_provider.ConsumeBool() && std::getenv("FUZZED_SOCKET_FAKE_LATENCY") != nullptr) {
190        std::this_thread::sleep_for(std::chrono::milliseconds{2});
191    }
192
193    if (len == 0 || m_fuzzed_data_provider.ConsumeBool()) {
194        const ssize_t r = m_fuzzed_data_provider.ConsumeBool() ? 0 : -1;
195        if (r == -1) {
196            SetFuzzedErrNo(m_fuzzed_data_provider, recv_errnos);
197        }
198        return r;
199    }
200
201    size_t copied_so_far{0};
202
203    if (!m_peek_data.empty()) {
204        // `MSG_PEEK` was used in the preceding `Recv()` call, copy the first bytes from `m_peek_data`.
205        const size_t copy_len{std::min(len, m_peek_data.size())};
206        std::memcpy(buf, m_peek_data.data(), copy_len);
207        copied_so_far += copy_len;
208        if ((flags & MSG_PEEK) == 0) {
209            m_peek_data.erase(m_peek_data.begin(), m_peek_data.begin() + copy_len);
210        }
211    }
212
213    if (copied_so_far == len) {
214        return copied_so_far;
215    }
216
217    auto new_data = ConsumeRandomLengthByteVector(m_fuzzed_data_provider, len - copied_so_far);
218    if (new_data.empty()) return copied_so_far;
219
220    std::memcpy(reinterpret_cast<uint8_t*>(buf) + copied_so_far, new_data.data(), new_data.size());
221    copied_so_far += new_data.size();
222
223    if ((flags & MSG_PEEK) != 0) {
224        m_peek_data.insert(m_peek_data.end(), new_data.begin(), new_data.end());
225    }
226
227    if (copied_so_far == len || m_fuzzed_data_provider.ConsumeBool()) {
228        return copied_so_far;
229    }
230
231    // Pad to len bytes.
232    std::memset(reinterpret_cast<uint8_t*>(buf) + copied_so_far, 0x0, len - copied_so_far);
233
234    return len;
235}
236
237int FuzzedSock::Connect(const sockaddr*, socklen_t) const
238{
239    // Have a permanent error at connect_errnos[0] because when the fuzzed data is exhausted
240    // SetFuzzedErrNo() will always return the first element and we want to avoid Connect()
241    // returning -1 and setting errno to EAGAIN repeatedly.
242    constexpr std::array connect_errnos{
243        ECONNREFUSED,
244        EAGAIN,
245        ECONNRESET,
246        EHOSTUNREACH,
247        EINPROGRESS,
248        EINTR,
249        ENETUNREACH,
250        ETIMEDOUT,

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.