READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

10,238 bytes · SHA-256 3181f23b9d6a2499… · View upstream ↗

1// Copyright (c) 2012-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <addresstype.h>
6#include <coins.h>
7#include <consensus/consensus.h>
8#include <consensus/tx_verify.h>
9#include <key.h>
10#include <pubkey.h>
11#include <script/interpreter.h>
12#include <script/script.h>
13#include <script/solver.h>
14#include <test/util/setup_common.h>
15#include <uint256.h>
16
17#include <vector>
18
19#include <boost/test/unit_test.hpp>
20
21// Helpers:
22static std::vector<unsigned char>
23Serialize(const CScript& s)
24{
25    std::vector<unsigned char> sSerialized(s.begin(), s.end());
26    return sSerialized;
27}
28
29BOOST_FIXTURE_TEST_SUITE(sigopcount_tests, BasicTestingSetup)
30
31BOOST_AUTO_TEST_CASE(GetSigOpCount)
32{
33    // Test CScript::GetSigOpCount()
34    CScript s1;
35    BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 0U);
36    BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 0U);
37
38    uint160 dummy;
39    s1 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << OP_2 << OP_CHECKMULTISIG;
40    BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 2U);
41    s1 << OP_IF << OP_CHECKSIG << OP_ENDIF;
42    BOOST_CHECK_EQUAL(s1.GetSigOpCount(true), 3U);
43    BOOST_CHECK_EQUAL(s1.GetSigOpCount(false), 21U);
44
45    CScript p2sh = GetScriptForDestination(ScriptHash(s1));
46    CScript scriptSig;
47    scriptSig << OP_0 << Serialize(s1);
48    BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig), 3U);
49
50    std::vector<CPubKey> keys;
51    for (int i = 0; i < 3; i++)
52    {
53        CKey k = GenerateRandomKey();
54        keys.push_back(k.GetPubKey());
55    }
56    CScript s2 = GetScriptForMultisig(1, keys);
57    BOOST_CHECK_EQUAL(s2.GetSigOpCount(true), 3U);
58    BOOST_CHECK_EQUAL(s2.GetSigOpCount(false), 20U);
59
60    p2sh = GetScriptForDestination(ScriptHash(s2));
61    BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(true), 0U);
62    BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(false), 0U);
63    CScript scriptSig2;
64    scriptSig2 << OP_1 << ToByteVector(dummy) << ToByteVector(dummy) << Serialize(s2);
65    BOOST_CHECK_EQUAL(p2sh.GetSigOpCount(scriptSig2), 3U);
66}
67
68/**
69 * Verifies script execution of the zeroth scriptPubKey of tx output and
70 * zeroth scriptSig and witness of tx input.
71 */
72static ScriptError VerifyWithFlag(const CTransaction& output, const CMutableTransaction& input, script_verify_flags flags)
73{
74    ScriptError error;
75    CTransaction inputi(input);
76    bool ret = VerifyScript(inputi.vin[0].scriptSig, output.vout[0].scriptPubKey, &inputi.vin[0].scriptWitness, flags, TransactionSignatureChecker(&inputi, 0, output.vout[0].nValue, MissingDataBehavior::ASSERT_FAIL), &error);
77    BOOST_CHECK((ret == true) == (error == SCRIPT_ERR_OK));
78
79    return error;
80}
81
82/**
83 * Builds a creationTx from scriptPubKey and a spendingTx from scriptSig
84 * and witness such that spendingTx spends output zero of creationTx.
85 * Also inserts creationTx's output into the coins view.
86 */
87static void BuildTxs(CMutableTransaction& spendingTx, CCoinsViewCache& coins, CMutableTransaction& creationTx, const CScript& scriptPubKey, const CScript& scriptSig, const CScriptWitness& witness)
88{
89    creationTx.version = 1;
90    creationTx.vin.resize(1);
91    creationTx.vin[0].prevout.SetNull();
92    creationTx.vin[0].scriptSig = CScript();
93    creationTx.vout.resize(1);
94    creationTx.vout[0].nValue = 1;
95    creationTx.vout[0].scriptPubKey = scriptPubKey;
96
97    spendingTx.version = 1;
98    spendingTx.vin.resize(1);
99    spendingTx.vin[0].prevout.hash = creationTx.GetHash();
100    spendingTx.vin[0].prevout.n = 0;
101    spendingTx.vin[0].scriptSig = scriptSig;
102    spendingTx.vin[0].scriptWitness = witness;
103    spendingTx.vout.resize(1);
104    spendingTx.vout[0].nValue = 1;
105    spendingTx.vout[0].scriptPubKey = CScript();
106
107    AddCoins(coins, CTransaction(creationTx), 0);
108}
109
110BOOST_AUTO_TEST_CASE(GetTxSigOpCost)
111{
112    // Transaction creates outputs
113    CMutableTransaction creationTx;
114    // Transaction that spends outputs and whose
115    // sig op cost is going to be tested
116    CMutableTransaction spendingTx;
117
118    // Create utxo set
119    CCoinsViewCache coins{&CoinsViewEmpty::Get()};
120    // Create key
121    CKey key = GenerateRandomKey();
122    CPubKey pubkey = key.GetPubKey();
123    // Default flags
124    const script_verify_flags flags{SCRIPT_VERIFY_WITNESS | SCRIPT_VERIFY_P2SH};
125
126    // Multisig script (legacy counting)
127    {
128        CScript scriptPubKey = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
129        // Do not use a valid signature to avoid using wallet operations.
130        CScript scriptSig = CScript() << OP_0 << OP_0;
131
132        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness());
133        // Legacy counting only includes signature operations in scriptSigs and scriptPubKeys
134        // of a transaction and does not take the actual executed sig operations into account.
135        // spendingTx in itself does not contain a signature operation.
136        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
137        // creationTx contains two signature operations in its scriptPubKey, but legacy counting
138        // is not accurate.
139        assert(GetTransactionSigOpCost(CTransaction(creationTx), coins, flags) == MAX_PUBKEYS_PER_MULTISIG * WITNESS_SCALE_FACTOR);
140        // Sanity check: script verification fails because of an invalid signature.
141        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
142    }
143
144    // Multisig nested in P2SH
145    {
146        CScript redeemScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
147        CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript));
148        CScript scriptSig = CScript() << OP_0 << OP_0 << ToByteVector(redeemScript);
149
150        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, CScriptWitness());
151        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2 * WITNESS_SCALE_FACTOR);
152        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
153
154        // P2SH sigops are not counted if we don't set the SCRIPT_VERIFY_P2SH flag
155        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, /*flags=*/0) == 0);
156    }
157
158    // P2WPKH witness program
159    {
160        CScript scriptPubKey = GetScriptForDestination(WitnessV0KeyHash(pubkey));
161        CScript scriptSig = CScript();
162        CScriptWitness scriptWitness;
163        scriptWitness.stack.emplace_back(0);
164        scriptWitness.stack.emplace_back(0);
165
166
167        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
168        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1);
169        // No signature operations if we don't verify the witness.
170        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0);
171        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY);
172
173        // The sig op cost for witness version != 0 is zero.
174        assert(scriptPubKey[0] == 0x00);
175        scriptPubKey[0] = 0x51;
176        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
177        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
178        scriptPubKey[0] = 0x00;
179        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
180
181        // The witness of a coinbase transaction is not taken into account.
182        spendingTx.vin[0].prevout.SetNull();
183        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 0);
184    }
185
186    // P2WPKH nested in P2SH
187    {
188        CScript scriptSig = GetScriptForDestination(WitnessV0KeyHash(pubkey));
189        CScript scriptPubKey = GetScriptForDestination(ScriptHash(scriptSig));
190        scriptSig = CScript() << ToByteVector(scriptSig);
191        CScriptWitness scriptWitness;
192        scriptWitness.stack.emplace_back(0);
193        scriptWitness.stack.emplace_back(0);
194
195        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
196        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 1);
197        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_EQUALVERIFY);
198    }
199
200    // P2WSH witness program
201    {
202        CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
203        CScript scriptPubKey = GetScriptForDestination(WitnessV0ScriptHash(witnessScript));
204        CScript scriptSig = CScript();
205        CScriptWitness scriptWitness;
206        scriptWitness.stack.emplace_back(0);
207        scriptWitness.stack.emplace_back(0);
208        scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end());
209
210        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
211        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2);
212        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags & ~SCRIPT_VERIFY_WITNESS) == 0);
213        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
214    }
215
216    // P2WSH nested in P2SH
217    {
218        CScript witnessScript = CScript() << 1 << ToByteVector(pubkey) << ToByteVector(pubkey) << 2 << OP_CHECKMULTISIGVERIFY;
219        CScript redeemScript = GetScriptForDestination(WitnessV0ScriptHash(witnessScript));
220        CScript scriptPubKey = GetScriptForDestination(ScriptHash(redeemScript));
221        CScript scriptSig = CScript() << ToByteVector(redeemScript);
222        CScriptWitness scriptWitness;
223        scriptWitness.stack.emplace_back(0);
224        scriptWitness.stack.emplace_back(0);
225        scriptWitness.stack.emplace_back(witnessScript.begin(), witnessScript.end());
226
227        BuildTxs(spendingTx, coins, creationTx, scriptPubKey, scriptSig, scriptWitness);
228        assert(GetTransactionSigOpCost(CTransaction(spendingTx), coins, flags) == 2);
229        assert(VerifyWithFlag(CTransaction(creationTx), spendingTx, flags) == SCRIPT_ERR_CHECKMULTISIGVERIFY);
230    }
231}
232
233BOOST_AUTO_TEST_SUITE_END()
234

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.