#![allow(non_snake_case)]
use alloc::{
vec,
vec::Vec,
};
use test_case::test_case;
use fuel_asm::{
op,
GTFArgs,
PanicReason::MemoryOverflow,
RegId,
};
use fuel_crypto::{
secp256r1::encode_pubkey,
Hasher,
PublicKey,
SecretKey,
Signature,
};
use fuel_tx::{
ConsensusParameters,
TransactionBuilder,
};
use fuel_types::ChainId;
use rand::{
rngs::StdRng,
SeedableRng,
};
use sha3::{
Digest,
Keccak256,
};
use crate::{
prelude::*,
storage::predicate::EmptyStorage,
tests::test_helpers::set_full_word,
util::test_helpers::check_expected_reason_for_instructions,
};
#[cfg(feature = "std")]
use crate::checked_transaction::CheckPredicateParams;
#[cfg(feature = "std")]
use crate::tests::predicate::TokioWithRayon;
use super::test_helpers::{
assert_success,
run_script,
};
#[test]
fn secp256k1_recover() {
let rng = &mut StdRng::seed_from_u64(2322u64);
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let secret = SecretKey::random(rng);
let public = secret.public_key();
let message = b"The gift of words is the gift of deception and illusion.";
let message = Message::new(message);
let signature = Signature::sign(&secret, &message);
#[rustfmt::skip]
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, signature.as_ref().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::eck1(0x11, 0x20, 0x21),
op::meq(0x12, 0x22, 0x11, 0x10),
op::log(0x12, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
].into_iter().collect();
let script_data = signature
.as_ref()
.iter()
.copied()
.chain(message.as_ref().iter().copied())
.chain(public.as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(success);
}
#[test]
fn ecrecover_tx_id() {
let rng = &mut StdRng::seed_from_u64(2322u64);
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let secret = SecretKey::random(rng);
let public = secret.public_key();
let chain_id = ChainId::default();
#[rustfmt::skip]
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::move_(0x21, 0x20),
op::gtf_args(0x22, 0x00, GTFArgs::WitnessData),
op::movi(0x23, 0),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::eck1(0x11, 0x22, 0x23),
op::meq(0x12, 0x21, 0x11, 0x10),
op::ret(0x12),
].into_iter().collect();
let script_data = public.as_ref().to_vec();
let mut tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize();
tx.sign_inputs(&secret, &chain_id);
let consensus_params = ConsensusParameters::standard_with_id(chain_id);
let tx = tx.into_checked(height, &consensus_params).unwrap();
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Return{ val, .. } if *val == 1));
assert!(success);
}
#[cfg(feature = "std")]
#[tokio::test]
async fn recover_tx_id_predicate() {
use crate::{
checked_transaction::EstimatePredicates,
pool::DummyPool,
};
use rand::Rng;
let rng = &mut StdRng::seed_from_u64(1234u64);
let gas_limit = 1_000_000;
let maturity = Default::default();
let secret = SecretKey::random(rng);
let public = secret.public_key();
let check_params = CheckPredicateParams::default();
let consensus_params = ConsensusParameters::standard();
#[rustfmt::skip]
let predicate = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::move_(0x21, 0x20),
op::gtf_args(0x22, 0x00, GTFArgs::WitnessData),
op::movi(0x23, 0),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::eck1(0x11, 0x22, 0x23),
op::meq(0x12, 0x21, 0x11, 0x10),
op::ret(0x12),
].into_iter().collect();
let script_data = public.as_ref().to_vec();
let input = Input::coin_predicate(
rng.gen(),
Input::predicate_owner(&predicate),
1000,
rng.gen(),
Default::default(),
0,
predicate,
vec![],
);
let mut tx = TransactionBuilder::script(vec![], script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_input(input)
.add_unsigned_coin_input(
secret,
rng.gen(),
rng.gen(),
rng.gen(),
Default::default(),
)
.finalize();
{
let mut tx_for_async = tx.clone();
tx_for_async
.estimate_predicates_async::<TokioWithRayon>(
&check_params,
&DummyPool,
&EmptyStorage,
)
.await
.expect("Should estimate predicate successfully");
tx_for_async
.into_checked(maturity, &consensus_params)
.expect("Should check predicate successfully");
}
tx.estimate_predicates(&check_params, MemoryInstance::new(), &EmptyStorage)
.expect("Should estimate predicate successfully");
tx.into_checked(maturity, &consensus_params)
.expect("Should check predicate successfully");
}
#[test]
fn secp256k1_recover_error() {
let rng = &mut StdRng::seed_from_u64(2322u64);
let secret = SecretKey::random(rng);
let message = b"The gift of words is the gift of deception and illusion.";
let message = Message::new(message);
let signature = Signature::sign(&secret, &message);
#[rustfmt::skip]
let script = vec![
op::addi(0x21, 0x20, signature.as_ref().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::eck1(0x11, 0x20, 0x21),
op::log(RegId::ERR, RegId::ZERO, RegId::ZERO, RegId::ZERO),
op::ret(RegId::ONE),
];
let receipts = run_script(script);
assert_success(&receipts);
let Some(Receipt::Log { ra, .. }) = receipts.first() else {
panic!("Expected log receipt");
};
assert_eq!(*ra, 1, "Verification should have failed");
}
#[test]
fn secp256k1_recover__register_a_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::eck1(reg_a, reg_b, reg_b),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn secp256k1_recover__register_b_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::eck1(reg_b, reg_a, reg_b),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn secp256k1_recover__register_c_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 31),
op::eck1(reg_b, reg_b, reg_a),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn secp256r1_recover() {
use p256::ecdsa::SigningKey;
let rng = &mut StdRng::seed_from_u64(2322u64);
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let message = b"The gift of words is the gift of deception and illusion.";
let message = Message::new(message);
let secret_key = SigningKey::random(rng);
let (signature, _recovery_id) =
secret_key.sign_prehash_recoverable(&*message).unwrap();
let public_key = secret_key.verifying_key();
#[rustfmt::skip]
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, signature.to_bytes().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, 64),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::ecr1(0x11, 0x20, 0x21),
op::meq(0x12, 0x22, 0x11, 0x10),
op::log(0x12, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
].into_iter().collect();
let script_data = signature
.to_bytes()
.iter()
.copied()
.chain(message.as_ref().iter().copied())
.chain(encode_pubkey(*public_key))
.collect();
let tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(success);
}
#[test]
fn secp256r1_recover_error() {
let rng = &mut StdRng::seed_from_u64(2322u64);
let secret = SecretKey::random(rng);
let message = b"The gift of words is the gift of deception and illusion.";
let message = Message::new(message);
let signature = Signature::sign(&secret, &message);
#[rustfmt::skip]
let script = vec![
op::addi(0x21, 0x20, signature.as_ref().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::ecr1(0x11, 0x20, 0x21),
op::log(RegId::ERR, RegId::ZERO, RegId::ZERO, RegId::ZERO),
op::ret(RegId::ONE),
];
let receipts = run_script(script);
assert_success(&receipts);
let Some(Receipt::Log { ra, .. }) = receipts.first() else {
panic!("Expected log receipt");
};
assert_eq!(*ra, 1, "Verification should have failed");
}
#[test]
fn secp256r1_recover__register_a_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::ecr1(reg_a, reg_b, reg_b),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn secp256r1_recover__register_b_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::ecr1(reg_b, reg_a, reg_b),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn secp256r1_recover__register_c_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 31),
op::ecr1(reg_b, reg_b, reg_a),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn ed25519_verifies_message() {
use ed25519_dalek::Signer;
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let mut rng = rand::rngs::OsRng;
let signing_key = ed25519_dalek::SigningKey::generate(&mut rng);
let message = b"The gift of words is the gift of deception and illusion.";
let signature = signing_key.sign(&message[..]);
let mut script = set_full_word(0x23, message.len() as Word);
script.extend([
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, signature.to_bytes().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::ed19(0x22, 0x20, 0x21, 0x23),
op::log(RegId::ERR, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
]);
let script: Vec<u8> = script.into_iter().collect();
let script_data = signature
.to_bytes()
.iter()
.copied()
.chain(message.as_ref().iter().copied())
.chain(signing_key.verifying_key().as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script.clone(), script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 0));
assert!(success);
let altered_message = b"The gift of words is the gift of deception and illusion!";
assert_eq!(message.len(), altered_message.len());
let script_data = signature
.to_bytes()
.iter()
.copied()
.chain(altered_message.as_ref().iter().copied())
.chain(signing_key.verifying_key().as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script.clone(), script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let errors = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(errors);
let altered_signature = signing_key.sign(&altered_message[..]);
let script_data = altered_signature
.to_bytes()
.iter()
.copied()
.chain(message.as_ref().iter().copied())
.chain(signing_key.verifying_key().as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let errors = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(errors);
}
#[test]
fn ed25519_zero_length_is_treated_as_32() {
use ed25519_dalek::Signer;
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let mut rng = rand::rngs::OsRng;
let signing_key = ed25519_dalek::SigningKey::generate(&mut rng);
let message = [1u8; 32];
let signature = signing_key.sign(&message[..]);
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, signature.to_bytes().len() as Immediate12),
op::addi(0x22, 0x21, message.as_ref().len() as Immediate12),
op::movi(0x10, PublicKey::LEN as Immediate18),
op::aloc(0x10),
op::ed19(0x22, 0x20, 0x21, 0),
op::log(RegId::ERR, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
];
let script: Vec<u8> = script.into_iter().collect();
let script_data = signature
.to_bytes()
.iter()
.copied()
.chain(message.as_ref().iter().copied())
.chain(signing_key.verifying_key().as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script.clone(), script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 0));
assert!(success);
}
#[test]
fn ed25519_verify__register_a_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
let reg_c = 0x22;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::movi(reg_c, 32),
op::ed19(reg_a, reg_b, reg_b, reg_c),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn ed25519_verify__register_b_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
let reg_c = 0x22;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, 63),
op::movi(reg_c, 32),
op::ed19(reg_b, reg_a, reg_b, reg_c),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test_case(31, 32 => (); "Just over the end with 32 bits")]
#[test_case(63, 64 => (); "Just over the end with 64 bits")]
#[test_case(31, 0 => (); "Zero defaults to 32")]
#[test_case(31, 100 => (); "Way over the end")]
#[test_case(0, 32 => (); "Empty range, goes over it")]
fn ed25519_verify__message_overflows_ram(offset: u16, len: u32) {
let reg_a = 0x20;
let reg_b = 0x21;
let reg_c = 0x22;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::subi(reg_a, reg_a, offset),
op::movi(reg_c, len),
op::ed19(reg_b, reg_b, reg_a, reg_c),
op::ret(RegId::ONE),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn sha256() {
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let message = b"I say let the world go to hell, but I should always have my tea.";
let hash = Hasher::hash(message);
#[rustfmt::skip]
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, message.len() as Immediate12),
op::movi(0x10, Bytes32::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::movi(0x12, message.len() as Immediate18),
op::s256(0x11, 0x20, 0x12),
op::meq(0x13, 0x11, 0x21, 0x10),
op::log(0x13, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
].into_iter().collect();
let script_data = message
.iter()
.copied()
.chain(hash.as_ref().iter().copied())
.collect();
let tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(success);
}
#[test]
fn s256__register_a_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::s256(reg_a, reg_b, reg_b),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn s256__register_c_overflows() {
let reg_a = 0x20;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::s256(RegId::ZERO, RegId::ZERO, reg_a),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn s256___register_b_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::s256(reg_b, reg_a, reg_b),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn keccak256() {
let mut client = MemoryClient::default();
let gas_limit = 1_000_000;
let maturity = Default::default();
let height = Default::default();
let message = b"...and, moreover, I consider it my duty to warn you that the cat is an ancient, inviolable animal.";
let mut hasher = Keccak256::new();
hasher.update(message);
let hash = hasher.finalize();
#[rustfmt::skip]
let script = vec![
op::gtf_args(0x20, 0x00, GTFArgs::ScriptData),
op::addi(0x21, 0x20, message.len() as Immediate12),
op::movi(0x10, Bytes32::LEN as Immediate18),
op::aloc(0x10),
op::move_(0x11, RegId::HP),
op::movi(0x12, message.len() as Immediate18),
op::k256(0x11, 0x20, 0x12),
op::meq(0x13, 0x11, 0x21, 0x10),
op::log(0x13, 0x00, 0x00, 0x00),
op::ret(RegId::ONE),
].into_iter().collect();
let script_data = message
.iter()
.copied()
.chain(hash.iter().copied())
.collect();
let tx = TransactionBuilder::script(script, script_data)
.script_gas_limit(gas_limit)
.maturity(maturity)
.add_fee_input()
.finalize_checked(height);
let receipts = client.transact(tx);
let success = receipts
.iter()
.any(|r| matches!(r, Receipt::Log{ ra, .. } if *ra == 1));
assert!(success);
}
#[test]
fn k256__register_a_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::k256(reg_a, reg_b, reg_b),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn k256_c_gt_mem_max() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::k256(reg_b, reg_b, reg_a),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}
#[test]
fn k256__register_b_overflows() {
let reg_a = 0x20;
let reg_b = 0x21;
#[rustfmt::skip]
let script = vec![
op::not(reg_a, RegId::ZERO),
op::k256(reg_b, reg_a, reg_b),
];
check_expected_reason_for_instructions(script, MemoryOverflow);
}