diff --git a/tests/fuzzers/verkle-trie/corpus/data b/tests/fuzzers/verkle-trie/corpus/data new file mode 100644 index 000000000000..c4a4839cb80f --- /dev/null +++ b/tests/fuzzers/verkle-trie/corpus/data @@ -0,0 +1 @@ +asdlfkjasf23oiejfasdfadkfqlkjfasdlkfjalwk4jfalsdkfjawlefkjsadlfkjasldkfjwalefkjasdlfkjM \ No newline at end of file diff --git a/tests/fuzzers/verkle-trie/trie-fuzzer.go b/tests/fuzzers/verkle-trie/trie-fuzzer.go new file mode 100644 index 000000000000..0a399720f519 --- /dev/null +++ b/tests/fuzzers/verkle-trie/trie-fuzzer.go @@ -0,0 +1,192 @@ +// Copyright 2019 The go-ethereum Authors +// This file is part of the go-ethereum library. +// +// The go-ethereum library is free software: you can redistribute it and/or modify +// it under the terms of the GNU Lesser General Public License as published by +// the Free Software Foundation, either version 3 of the License, or +// (at your option) any later version. +// +// The go-ethereum library is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU Lesser General Public License for more details. +// +// You should have received a copy of the GNU Lesser General Public License +// along with the go-ethereum library. If not, see . + +package trie + +import ( + "bytes" + "encoding/binary" + "fmt" + + "github.com/ethereum/go-ethereum/core/rawdb" + "github.com/ethereum/go-ethereum/trie" + "github.com/gballet/go-verkle" +) + +// randTest performs random trie operations. +// Instances of this test are created by Generate. +type randTest []randTestStep + +type randTestStep struct { + op int + key []byte // for opUpdate, opGet + value []byte // for opUpdate + err error // for debugging +} + +type proofDb struct{} + +func (proofDb) Put(key []byte, value []byte) error { + return nil +} + +func (proofDb) Delete(key []byte) error { + return nil +} + +const ( + opUpdate = iota + opGet + opCommit + opHash + //opReset + opItercheckhash + //opProve TODO? + opMax // boundary value, not an actual op +) + +type dataSource struct { + input []byte + reader *bytes.Reader +} + +func newDataSource(input []byte) *dataSource { + return &dataSource{ + input, bytes.NewReader(input), + } +} +func (ds *dataSource) readByte() byte { + if b, err := ds.reader.ReadByte(); err != nil { + return 0 + } else { + return b + } +} +func (ds *dataSource) Read(buf []byte) (int, error) { + return ds.reader.Read(buf) +} +func (ds *dataSource) Ended() bool { + return ds.reader.Len() == 0 +} + +func Generate(input []byte) randTest { + + var allKeys [][]byte + r := newDataSource(input) + genKey := func() []byte { + + if len(allKeys) < 2 || r.readByte() < 0x0f { + // new key + key := make([]byte, 32) + r.Read(key) + allKeys = append(allKeys, key) + return key + } + // use existing key + return allKeys[int(r.readByte())%len(allKeys)] + } + + var steps randTest + + for i := 0; !r.Ended(); i++ { + + step := randTestStep{op: int(r.readByte()) % opMax} + switch step.op { + case opUpdate: + step.key = genKey() + step.value = make([]byte, 32) + binary.BigEndian.PutUint64(step.value, uint64(i)) + case opGet: + step.key = genKey() + } + steps = append(steps, step) + if len(steps) > 500 { + break + } + } + + return steps +} + +// The function must return +// 1 if the fuzzer should increase priority of the +// given input during subsequent fuzzing (for example, the input is lexically +// correct and was parsed successfully); +// -1 if the input must not be added to corpus even if gives new coverage; and +// 0 otherwise +// other values are reserved for future use. +func Fuzz(input []byte) int { + program := Generate(input) + if len(program) == 0 { + return 0 + } + if err := runRandTest(program); err != nil { + panic(err) + } + return 1 +} + +func runRandTest(rt randTest) error { + + verkle.GetConfig() + triedb := trie.NewDatabaseWithConfig(rawdb.NewMemoryDatabase(), &trie.Config{UseVerkle: true}) + tr := trie.NewVerkleTrie(verkle.New(), triedb) + values := make(map[string]string) // tracks content of the trie + + for i, step := range rt { + switch step.op { + case opUpdate: + // XXX check errors here? + _ = tr.TryUpdate(step.key, step.value) + values[string(step.key)] = string(step.value) + case opGet: + // XXX check errors here? + v, _ := tr.TryGet(step.key) + want := values[string(step.key)] + if string(v) != want { + rt[i].err = fmt.Errorf("mismatch for key 0x%x, got 0x%x want 0x%x", step.key, v, want) + } + case opCommit: + _, _, rt[i].err = tr.Commit(nil) + case opHash: + tr.Hash() + /* + TODO + case opReset: + hash, _, err := tr.Commit(nil) + if err != nil { + return err + } + newtr := trie.NewVerkleTrie(hash, triedb) + tr = newtr + */ + case opItercheckhash: + checktr := trie.NewVerkleTrie(verkle.New(), triedb) + it := trie.NewIterator(tr.NodeIterator(nil)) + for it.Next() { + checktr.TryUpdate(it.Key, it.Value) + } + if tr.Hash() != checktr.Hash() { + return fmt.Errorf("hash mismatch in opItercheckhash") + } + } + // Abort the test on error. + if rt[i].err != nil { + return rt[i].err + } + } + return nil +}