READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

15,250 bytes · SHA-256 53de8ad23985b345… · View upstream ↗

1// Copyright (c) 2023-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <addresstype.h>
6#include <chainparams.h>
7#include <coins.h>
8#include <key.h>
9#include <primitives/transaction.h>
10#include <psbt.h>
11#include <script/descriptor.h>
12#include <script/interpreter.h>
13#include <script/script.h>
14#include <script/signingprovider.h>
15#include <sync.h>
16#include <test/fuzz/FuzzedDataProvider.h>
17#include <test/fuzz/fuzz.h>
18#include <test/fuzz/util.h>
19#include <test/fuzz/util/descriptor.h>
20#include <test/util/setup_common.h>
21#include <test/util/time.h>
22#include <util/check.h>
23#include <util/time.h>
24#include <util/translation.h>
25#include <util/string.h>
26#include <validation.h>
27#include <wallet/context.h>
28#include <wallet/scriptpubkeyman.h>
29#include <wallet/test/util.h>
30#include <wallet/types.h>
31#include <wallet/wallet.h>
32#include <wallet/walletutil.h>
33
34#include <map>
35#include <memory>
36#include <optional>
37#include <string>
38#include <utility>
39#include <variant>
40
41namespace wallet {
42namespace {
43const TestingSetup* g_setup;
44
45//! The converter of mocked descriptors, needs to be initialized when the target is.
46MockedDescriptorConverter MOCKED_DESC_CONVERTER;
47
48void initialize_spkm()
49{
50    static const auto testing_setup{MakeNoLogFileContext<const TestingSetup>()};
51    g_setup = testing_setup.get();
52    MOCKED_DESC_CONVERTER.Init();
53}
54
55void initialize_spkm_migration()
56{
57    static const auto testing_setup{MakeNoLogFileContext<const TestingSetup>()};
58    g_setup = testing_setup.get();
59}
60
61static std::optional<std::pair<WalletDescriptor, FlatSigningProvider>> CreateWalletDescriptor(FuzzedDataProvider& fuzzed_data_provider)
62{
63    const std::string mocked_descriptor{fuzzed_data_provider.ConsumeRandomLengthString()};
64    const auto desc_str{MOCKED_DESC_CONVERTER.GetDescriptor(mocked_descriptor)};
65    if (!desc_str.has_value()) return std::nullopt;
66    if (IsTooExpensive(MakeUCharSpan(*desc_str))) return {};
67
68    FlatSigningProvider keys;
69    std::string error;
70    std::vector<std::unique_ptr<Descriptor>> parsed_descs = Parse(desc_str.value(), keys, error, false);
71    if (parsed_descs.empty()) return std::nullopt;
72
73    // Verify expand succeeds before making WalletDescriptor
74    // Expansion results are not needed
75    FlatSigningProvider out_keys;
76    std::vector<CScript> scripts_temp;
77    DescriptorCache temp_cache;
78    if (!parsed_descs.at(0)->Expand(0, keys, scripts_temp, out_keys, &temp_cache)) return std::nullopt;
79
80    WalletDescriptor w_desc{std::move(parsed_descs.at(0)), /*creation_time=*/0, /*range_start=*/0, /*range_end=*/1, /*next_index=*/1};
81    return std::make_pair(w_desc, keys);
82}
83
84static DescriptorScriptPubKeyMan* CreateDescriptor(WalletDescriptor& wallet_desc, FlatSigningProvider& keys, CWallet& keystore)
85{
86    LOCK(keystore.cs_wallet);
87    auto spk_manager_res = keystore.AddWalletDescriptor(wallet_desc, keys, /*label=*/"", /*internal=*/false);
88    if (!spk_manager_res) return nullptr;
89    return &spk_manager_res.value().get();
90};
91
92FUZZ_TARGET(scriptpubkeyman, .init = initialize_spkm)
93{
94    SeedRandomStateForTest(SeedRand::ZEROS);
95    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
96    FakeNodeClock clock{ConsumeTime(fuzzed_data_provider)};
97    const auto& node{g_setup->m_node};
98    Chainstate& chainstate{node.chainman->ActiveChainstate()};
99    std::unique_ptr<CWallet> wallet_ptr{std::make_unique<CWallet>(node.chain.get(), "", CreateMockableWalletDatabase())};
100    CWallet& wallet{*wallet_ptr};
101    {
102        LOCK(wallet.cs_wallet);
103        wallet.SetWalletFlag(WALLET_FLAG_DESCRIPTORS);
104        wallet.SetLastBlockProcessed(chainstate.m_chain.Height(), chainstate.m_chain.Tip()->GetBlockHash());
105        wallet.m_keypool_size = 1;
106    }
107
108    auto wallet_desc{CreateWalletDescriptor(fuzzed_data_provider)};
109    if (!wallet_desc.has_value()) return;
110    auto spk_manager{CreateDescriptor(wallet_desc->first, wallet_desc->second, wallet)};
111    if (spk_manager == nullptr) return;
112
113    if (fuzzed_data_provider.ConsumeBool()) {
114        auto wallet_desc{CreateWalletDescriptor(fuzzed_data_provider)};
115        if (!wallet_desc.has_value()) {
116            return;
117        }
118        std::string error;
119        if (spk_manager->CanUpdateToWalletDescriptor(wallet_desc->first, error)) {
120            auto new_spk_manager{CreateDescriptor(wallet_desc->first, wallet_desc->second, wallet)};
121            if (new_spk_manager != nullptr) spk_manager = new_spk_manager;
122        }
123    }
124
125    bool good_data{true};
126    LIMITED_WHILE (good_data && fuzzed_data_provider.ConsumeBool(), 20) {
127        CallOneOf(
128            fuzzed_data_provider,
129            [&] {
130                const CScript script{ConsumeScript(fuzzed_data_provider)};
131                if (spk_manager->IsMine(script)) {
132                    assert(spk_manager->GetScriptPubKeys().contains(script));
133                }
134            },
135            [&] {
136                auto spks{spk_manager->GetScriptPubKeys()};
137                for (const CScript& spk : spks) {
138                    assert(spk_manager->IsMine(spk));
139                    CTxDestination dest;
140                    bool extract_dest{ExtractDestination(spk, dest)};
141                    if (extract_dest) {
142                        const std::string msg{fuzzed_data_provider.ConsumeRandomLengthString()};
143                        PKHash pk_hash{std::get_if<PKHash>(&dest) && fuzzed_data_provider.ConsumeBool() ?
144                                           *std::get_if<PKHash>(&dest) :
145                                           PKHash{ConsumeUInt160(fuzzed_data_provider)}};
146                        std::string str_sig;
147                        (void)spk_manager->SignMessage(msg, pk_hash, str_sig);
148                        (void)spk_manager->GetMetadata(dest);
149                    }
150                }
151            },
152            [&] {
153                auto spks{spk_manager->GetScriptPubKeys()};
154                if (!spks.empty()) {
155                    auto& spk{PickValue(fuzzed_data_provider, spks)};
156                    (void)spk_manager->MarkUnusedAddresses(spk);
157                }
158            },
159            [&] {
160                LOCK(spk_manager->cs_desc_man);
161                auto wallet_desc{spk_manager->GetWalletDescriptor()};
162                if (wallet_desc.descriptor->IsSingleType()) {
163                    auto output_type{wallet_desc.descriptor->GetOutputType()};
164                    if (output_type.has_value()) {
165                        auto dest{spk_manager->GetNewDestination(*output_type)};
166                        if (dest) {
167                            assert(IsValidDestination(*dest));
168                            assert(spk_manager->IsHDEnabled());
169                        }
170                    }
171                }
172            },
173            [&] {
174                CMutableTransaction tx_to;
175                const std::optional<CMutableTransaction> opt_tx_to{ConsumeDeserializable<CMutableTransaction>(fuzzed_data_provider, TX_WITH_WITNESS)};
176                if (!opt_tx_to) {
177                    good_data = false;
178                    return;
179                }
180                tx_to = *opt_tx_to;
181
182                std::map<COutPoint, Coin> coins{ConsumeCoins(fuzzed_data_provider)};
183                const int sighash{fuzzed_data_provider.ConsumeIntegral<int>()};
184                std::map<int, bilingual_str> input_errors;
185                (void)spk_manager->SignTransaction(tx_to, coins, sighash, input_errors);
186            },
187            [&] {
188                std::optional<PartiallySignedTransaction> opt_psbt{ConsumeDeserializableConstructor<PartiallySignedTransaction>(fuzzed_data_provider)};
189                if (!opt_psbt) {
190                    good_data = false;
191                    return;
192                }
193                auto psbt{*opt_psbt};
194                std::optional<PrecomputedTransactionData> txdata_res = PrecomputePSBTData(psbt);
195                if (!txdata_res) {
196                    return;
197                }
198                const PrecomputedTransactionData& txdata = *txdata_res;
199                common::PSBTFillOptions options{
200                    .sign = fuzzed_data_provider.ConsumeBool(),
201                    .sighash_type = fuzzed_data_provider.ConsumeIntegralInRange<int>(0, 151),
202                    .finalize = fuzzed_data_provider.ConsumeBool(),
203                    .bip32_derivs = fuzzed_data_provider.ConsumeBool()
204                };
205                if (options.sighash_type == 151) options.sighash_type = std::nullopt;
206                (void)spk_manager->FillPSBT(psbt, txdata, options);
207            }
208        );
209    }
210
211    std::string descriptor;
212    (void)spk_manager->GetDescriptorString(descriptor, /*priv=*/fuzzed_data_provider.ConsumeBool());
213    (void)spk_manager->GetEndRange();
214    (void)spk_manager->GetKeyPoolSize();
215}
216
217FUZZ_TARGET(spkm_migration, .init = initialize_spkm_migration)
218{
219    SeedRandomStateForTest(SeedRand::ZEROS);
220    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
221    FakeNodeClock clock{ConsumeTime(fuzzed_data_provider)};
222    const auto& node{g_setup->m_node};
223    Chainstate& chainstate{node.chainman->ActiveChainstate()};
224
225    std::unique_ptr<CWallet> wallet_ptr{std::make_unique<CWallet>(node.chain.get(), "", CreateMockableWalletDatabase())};
226    CWallet& wallet{*wallet_ptr};
227    wallet.m_keypool_size = 1;
228    {
229        LOCK(wallet.cs_wallet);
230        wallet.UnsetWalletFlag(WALLET_FLAG_DESCRIPTORS);
231        wallet.SetLastBlockProcessed(chainstate.m_chain.Height(), chainstate.m_chain.Tip()->GetBlockHash());
232    }
233
234    auto& legacy_data{*wallet.GetOrCreateLegacyDataSPKM()};
235
236    std::vector<CKey> keys;
237    LIMITED_WHILE (fuzzed_data_provider.ConsumeBool(), 30) {
238        const auto key{ConsumePrivateKey(fuzzed_data_provider)};
239        if (!key.IsValid()) return;
240        auto pub_key{key.GetPubKey()};
241        if (!pub_key.IsFullyValid()) return;
242        if (legacy_data.LoadKey(key, pub_key) && std::find(keys.begin(), keys.end(), key) == keys.end()) keys.push_back(key);
243    }
244
245    size_t added_chains = 0;
246    bool add_hd_chain{fuzzed_data_provider.ConsumeBool() && !keys.empty()};
247    CHDChain hd_chain;
248    auto version{fuzzed_data_provider.ConsumeBool() ? CHDChain::VERSION_HD_CHAIN_SPLIT : CHDChain::VERSION_HD_BASE};
249    CKey hd_key;
250    if (add_hd_chain) {

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.