READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

5,984 bytes · SHA-256 a7a7552f2ee5ca2b… · View upstream ↗

1#!/usr/bin/env python3
2# Copyright (c) 2015-present The Bitcoin Core developers
3# Distributed under the MIT software license, see the accompanying
4# file COPYING or http://www.opensource.org/licenses/mit-license.php.
5"""Test node responses to invalid blocks.
6
7In this test we connect to one node over p2p, and test block requests:
81) Valid blocks should be requested and become chain tip.
92) Invalid block with duplicated transaction should be re-requested.
103) Invalid block with bad coinbase value should be rejected and not
11re-requested.
124) Invalid block due to future timestamp is later accepted when that timestamp
13becomes valid.
14"""
15import copy
16import time
17
18from test_framework.blocktools import (
19    MAX_FUTURE_BLOCK_TIME,
20    create_block,
21    create_coinbase,
22    create_tx_with_script,
23)
24from test_framework.messages import COIN
25from test_framework.p2p import P2PDataStore
26from test_framework.script import OP_TRUE
27from test_framework.test_framework import BitcoinTestFramework
28from test_framework.util import (
29    assert_equal,
30    assert_not_equal,
31)
32
33
34class InvalidBlockRequestTest(BitcoinTestFramework):
35    def set_test_params(self):
36        self.num_nodes = 1
37        self.setup_clean_chain = True
38        # whitelist peers to speed up tx relay / mempool sync
39        self.noban_tx_relay = True
40
41    def run_test(self):
42        # Add p2p connection to node0
43        node = self.nodes[0]  # convenience reference to the node
44        peer = node.add_p2p_connection(P2PDataStore())
45
46        best_block = node.getblock(node.getbestblockhash())
47        tip = int(node.getbestblockhash(), 16)
48        height = best_block["height"] + 1
49        block_time = best_block["time"] + 1
50
51        self.log.info("Create a new block with an anyone-can-spend coinbase")
52
53        block = create_block(tip, height=height, ntime=block_time)
54        block.solve()
55        # Save the coinbase for later
56        block1 = block
57        peer.send_blocks_and_test([block1], node, success=True)
58
59        self.log.info("Mature the block.")
60        self.generatetoaddress(node, 100, node.get_deterministic_priv_key().address)
61
62        best_block = node.getblock(node.getbestblockhash())
63        tip = int(node.getbestblockhash(), 16)
64        height = best_block["height"] + 1
65        block_time = best_block["time"] + 1
66
67        # Use merkle-root malleability to generate an invalid block with
68        # same blockheader (CVE-2012-2459).
69        # Manufacture a block with 3 transactions (coinbase, spend of prior
70        # coinbase, spend of that spend).  Duplicate the 3rd transaction to
71        # leave merkle root and blockheader unchanged but invalidate the block.
72        # For more information on merkle-root malleability see src/consensus/merkle.cpp.
73        self.log.info("Test merkle root malleability.")
74
75        tx1 = create_tx_with_script(block1.vtx[0], 0, script_sig=bytes([OP_TRUE]), amount=50 * COIN)
76        tx2 = create_tx_with_script(tx1, 0, script_sig=bytes([OP_TRUE]), amount=50 * COIN)
77        block2 = create_block(tip, height=height, ntime=block_time, txlist=[tx1, tx2])
78        block_time += 1
79        block2.solve()
80        orig_hash = block2.hash_int
81        block2_orig = copy.deepcopy(block2)
82
83        # Mutate block 2
84        block2.vtx.append(tx2)
85        assert_equal(block2.hashMerkleRoot, block2.calc_merkle_root())
86        assert_equal(orig_hash, block2.hash_int)
87        assert_not_equal(block2_orig.vtx, block2.vtx)
88
89        peer.send_blocks_and_test([block2], node, success=False, reject_reason='bad-txns-duplicate')
90
91        # Check transactions for duplicate inputs (CVE-2018-17144)
92        self.log.info("Test duplicate input block.")
93
94        block2_dup = copy.deepcopy(block2_orig)
95        block2_dup.vtx[2].vin.append(block2_dup.vtx[2].vin[0])
96        block2_dup.hashMerkleRoot = block2_dup.calc_merkle_root()
97        block2_dup.solve()
98        peer.send_blocks_and_test([block2_dup], node, success=False, reject_reason='bad-txns-inputs-duplicate')
99
100        self.log.info("Test very broken block.")
101
102        block3 = create_block(tip, create_coinbase(height, nValue=100), ntime=block_time)
103        block_time += 1
104        block3.solve()
105
106        peer.send_blocks_and_test([block3], node, success=False, reject_reason='bad-cb-amount')
107
108
109        # Complete testing of CVE-2012-2459 by sending the original block.
110        # It should be accepted even though it has the same hash as the mutated one.
111
112        self.log.info("Test accepting original block after rejecting its mutated version.")
113        peer.send_blocks_and_test([block2_orig], node, success=True, timeout=5)
114
115        # Update tip info
116        height += 1
117        block_time += 1
118        tip = block2_orig.hash_int
119
120        # Complete testing of CVE-2018-17144, by checking for the inflation bug.
121        # Create a block that spends the output of a tx in a previous block.
122        tx3 = create_tx_with_script(tx2, 0, script_sig=bytes([OP_TRUE]), amount=50 * COIN)
123        tx3.vin.append(tx3.vin[0])  # Duplicates input
124        block4 = create_block(tip, height=height, ntime=block_time, txlist=[tx3])
125        block4.solve()
126        self.log.info("Test inflation by duplicating input")
127        peer.send_blocks_and_test([block4], node, success=False,  reject_reason='bad-txns-inputs-duplicate')
128
129        self.log.info("Test accepting identical block after rejecting it due to a future timestamp.")
130        t = int(time.time())
131        node.setmocktime(t)
132        # Set block time +1 second past max future validity
133        block = create_block(tip, height=height, ntime=t + MAX_FUTURE_BLOCK_TIME + 1)
134        block.solve()
135        # Need force_send because the block will get rejected without a getdata otherwise
136        peer.send_blocks_and_test([block], node, force_send=True, success=False, reject_reason='time-too-new')
137        node.setmocktime(t + 1)
138        peer.send_blocks_and_test([block], node, success=True)
139
140
141if __name__ == '__main__':
142    InvalidBlockRequestTest(__file__).main()
143

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.