/Users/eugenesiegel/btc/bitcoin/src/consensus/tx_check.cpp
Line | Count | Source (jump to first uncovered line) |
1 | | // Copyright (c) 2017-2021 The Bitcoin Core developers |
2 | | // Distributed under the MIT software license, see the accompanying |
3 | | // file COPYING or http://www.opensource.org/licenses/mit-license.php. |
4 | | |
5 | | #include <consensus/tx_check.h> |
6 | | |
7 | | #include <consensus/amount.h> |
8 | | #include <primitives/transaction.h> |
9 | | #include <consensus/validation.h> |
10 | | |
11 | | bool CheckTransaction(const CTransaction& tx, TxValidationState& state) |
12 | 1.20M | { |
13 | | // Basic checks that don't depend on any context |
14 | 1.20M | if (tx.vin.empty()) |
15 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-vin-empty"); |
16 | 1.20M | if (tx.vout.empty()) |
17 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-vout-empty"); |
18 | | // Size limits (this doesn't take the witness into account, as that hasn't been checked for malleability) |
19 | 1.20M | if (::GetSerializeSize(TX_NO_WITNESS(tx)) * WITNESS_SCALE_FACTOR > MAX_BLOCK_WEIGHT) { |
20 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-oversize"); |
21 | 0 | } |
22 | | |
23 | | // Check for negative or overflow output values (see CVE-2010-5139) |
24 | 1.20M | CAmount nValueOut = 0; |
25 | 1.20M | for (const auto& txout : tx.vout) |
26 | 1.53M | { |
27 | 1.53M | if (txout.nValue < 0) |
28 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-vout-negative"); |
29 | 1.53M | if (txout.nValue > MAX_MONEY) |
30 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-vout-toolarge"); |
31 | 1.53M | nValueOut += txout.nValue; |
32 | 1.53M | if (!MoneyRange(nValueOut)) |
33 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-txouttotal-toolarge"); |
34 | 1.53M | } |
35 | | |
36 | | // Check for duplicate inputs (see CVE-2018-17144) |
37 | | // While Consensus::CheckTxInputs does check if all inputs of a tx are available, and UpdateCoins marks all inputs |
38 | | // of a tx as spent, it does not check if the tx has duplicate inputs. |
39 | | // Failure to run this check will result in either a crash or an inflation bug, depending on the implementation of |
40 | | // the underlying coins database. |
41 | 1.20M | std::set<COutPoint> vInOutPoints; |
42 | 1.20M | for (const auto& txin : tx.vin) { |
43 | 1.20M | if (!vInOutPoints.insert(txin.prevout).second) |
44 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-inputs-duplicate"); |
45 | 1.20M | } |
46 | | |
47 | 1.20M | if (tx.IsCoinBase()) |
48 | 337k | { |
49 | 337k | if (tx.vin[0].scriptSig.size() < 2 || tx.vin[0].scriptSig.size() > 100) |
50 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-cb-length"); |
51 | 337k | } |
52 | 862k | else |
53 | 862k | { |
54 | 862k | for (const auto& txin : tx.vin) |
55 | 862k | if (txin.prevout.IsNull()) |
56 | 0 | return state.Invalid(TxValidationResult::TX_CONSENSUS, "bad-txns-prevout-null"); |
57 | 862k | } |
58 | | |
59 | 1.20M | return true; |
60 | 1.20M | } |