d10a2f6ab7
This change modifies the fuzzers to use the native golang fuzzing framework instead of go-fuzz
334 lines
8.9 KiB
Go
334 lines
8.9 KiB
Go
// Copyright 2021 The go-ethereum Authors
|
|
// This file is part of the go-ethereum library.
|
|
//
|
|
// The go-ethereum library is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Lesser General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// The go-ethereum library is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Lesser General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Lesser General Public License
|
|
// along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package vflux
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/binary"
|
|
"io"
|
|
"math"
|
|
"math/big"
|
|
"time"
|
|
|
|
"github.com/ethereum/go-ethereum/common/mclock"
|
|
"github.com/ethereum/go-ethereum/ethdb/memorydb"
|
|
"github.com/ethereum/go-ethereum/les/vflux"
|
|
vfs "github.com/ethereum/go-ethereum/les/vflux/server"
|
|
"github.com/ethereum/go-ethereum/log"
|
|
"github.com/ethereum/go-ethereum/p2p/enode"
|
|
"github.com/ethereum/go-ethereum/p2p/enr"
|
|
"github.com/ethereum/go-ethereum/rlp"
|
|
)
|
|
|
|
var (
|
|
debugMode = false
|
|
doLog = func(msg string, ctx ...interface{}) {
|
|
if !debugMode {
|
|
return
|
|
}
|
|
log.Info(msg, ctx...)
|
|
}
|
|
)
|
|
|
|
type fuzzer struct {
|
|
peers [256]*clientPeer
|
|
disconnectList []*clientPeer
|
|
input io.Reader
|
|
exhausted bool
|
|
activeCount, activeCap uint64
|
|
maxCount, maxCap uint64
|
|
}
|
|
|
|
type clientPeer struct {
|
|
fuzzer *fuzzer
|
|
node *enode.Node
|
|
freeID string
|
|
timeout time.Duration
|
|
|
|
balance vfs.ConnectedBalance
|
|
capacity uint64
|
|
}
|
|
|
|
func (p *clientPeer) Node() *enode.Node {
|
|
return p.node
|
|
}
|
|
|
|
func (p *clientPeer) FreeClientId() string {
|
|
return p.freeID
|
|
}
|
|
|
|
func (p *clientPeer) InactiveAllowance() time.Duration {
|
|
return p.timeout
|
|
}
|
|
|
|
func (p *clientPeer) UpdateCapacity(newCap uint64, requested bool) {
|
|
origin, originTotal := p.capacity, p.fuzzer.activeCap
|
|
p.fuzzer.activeCap -= p.capacity
|
|
if p.capacity != 0 {
|
|
p.fuzzer.activeCount--
|
|
}
|
|
p.capacity = newCap
|
|
p.fuzzer.activeCap += p.capacity
|
|
if p.capacity != 0 {
|
|
p.fuzzer.activeCount++
|
|
}
|
|
doLog("Update capacity", "peer", p.node.ID(), "origin", origin, "cap", newCap, "origintotal", originTotal, "total", p.fuzzer.activeCap, "requested", requested)
|
|
}
|
|
|
|
func (p *clientPeer) Disconnect() {
|
|
origin, originTotal := p.capacity, p.fuzzer.activeCap
|
|
p.fuzzer.disconnectList = append(p.fuzzer.disconnectList, p)
|
|
p.fuzzer.activeCap -= p.capacity
|
|
if p.capacity != 0 {
|
|
p.fuzzer.activeCount--
|
|
}
|
|
p.capacity = 0
|
|
p.balance = nil
|
|
doLog("Disconnect", "peer", p.node.ID(), "origin", origin, "origintotal", originTotal, "total", p.fuzzer.activeCap)
|
|
}
|
|
|
|
func newFuzzer(input []byte) *fuzzer {
|
|
f := &fuzzer{
|
|
input: bytes.NewReader(input),
|
|
}
|
|
for i := range f.peers {
|
|
f.peers[i] = &clientPeer{
|
|
fuzzer: f,
|
|
node: enode.SignNull(new(enr.Record), enode.ID{byte(i)}),
|
|
freeID: string([]byte{byte(i)}),
|
|
timeout: f.randomDelay(),
|
|
}
|
|
}
|
|
return f
|
|
}
|
|
|
|
func (f *fuzzer) read(size int) []byte {
|
|
out := make([]byte, size)
|
|
if _, err := f.input.Read(out); err != nil {
|
|
f.exhausted = true
|
|
}
|
|
return out
|
|
}
|
|
|
|
func (f *fuzzer) randomByte() byte {
|
|
d := f.read(1)
|
|
return d[0]
|
|
}
|
|
|
|
func (f *fuzzer) randomBool() bool {
|
|
d := f.read(1)
|
|
return d[0]&1 == 1
|
|
}
|
|
|
|
func (f *fuzzer) randomInt(max int) int {
|
|
if max == 0 {
|
|
return 0
|
|
}
|
|
if max <= 256 {
|
|
return int(f.randomByte()) % max
|
|
}
|
|
var a uint16
|
|
if err := binary.Read(f.input, binary.LittleEndian, &a); err != nil {
|
|
f.exhausted = true
|
|
}
|
|
return int(a % uint16(max))
|
|
}
|
|
|
|
func (f *fuzzer) randomTokenAmount(signed bool) int64 {
|
|
x := uint64(f.randomInt(65000))
|
|
x = x * x * x * x
|
|
|
|
if signed && (x&1) == 1 {
|
|
if x <= math.MaxInt64 {
|
|
return -int64(x)
|
|
}
|
|
return math.MinInt64
|
|
}
|
|
if x <= math.MaxInt64 {
|
|
return int64(x)
|
|
}
|
|
return math.MaxInt64
|
|
}
|
|
|
|
func (f *fuzzer) randomDelay() time.Duration {
|
|
delay := f.randomByte()
|
|
if delay < 128 {
|
|
return time.Duration(delay) * time.Second
|
|
}
|
|
return 0
|
|
}
|
|
|
|
func (f *fuzzer) randomFactors() vfs.PriceFactors {
|
|
return vfs.PriceFactors{
|
|
TimeFactor: float64(f.randomByte()) / 25500,
|
|
CapacityFactor: float64(f.randomByte()) / 255,
|
|
RequestFactor: float64(f.randomByte()) / 255,
|
|
}
|
|
}
|
|
|
|
func (f *fuzzer) connectedBalanceOp(balance vfs.ConnectedBalance, id enode.ID) {
|
|
switch f.randomInt(3) {
|
|
case 0:
|
|
cost := uint64(f.randomTokenAmount(false))
|
|
balance.RequestServed(cost)
|
|
doLog("Serve request cost", "id", id, "amount", cost)
|
|
case 1:
|
|
posFactor, negFactor := f.randomFactors(), f.randomFactors()
|
|
balance.SetPriceFactors(posFactor, negFactor)
|
|
doLog("Set price factor", "pos", posFactor, "neg", negFactor)
|
|
case 2:
|
|
balance.GetBalance()
|
|
balance.GetRawBalance()
|
|
balance.GetPriceFactors()
|
|
}
|
|
}
|
|
|
|
func (f *fuzzer) atomicBalanceOp(balance vfs.AtomicBalanceOperator, id enode.ID) {
|
|
switch f.randomInt(3) {
|
|
case 0:
|
|
amount := f.randomTokenAmount(true)
|
|
balance.AddBalance(amount)
|
|
doLog("Add balance", "id", id, "amount", amount)
|
|
case 1:
|
|
pos, neg := uint64(f.randomTokenAmount(false)), uint64(f.randomTokenAmount(false))
|
|
balance.SetBalance(pos, neg)
|
|
doLog("Set balance", "id", id, "pos", pos, "neg", neg)
|
|
case 2:
|
|
balance.GetBalance()
|
|
balance.GetRawBalance()
|
|
balance.GetPriceFactors()
|
|
}
|
|
}
|
|
|
|
func fuzzClientPool(input []byte) int {
|
|
if len(input) > 10000 {
|
|
return -1
|
|
}
|
|
f := newFuzzer(input)
|
|
if f.exhausted {
|
|
return 0
|
|
}
|
|
clock := &mclock.Simulated{}
|
|
db := memorydb.New()
|
|
pool := vfs.NewClientPool(db, 10, f.randomDelay(), clock, func() bool { return true })
|
|
pool.Start()
|
|
defer pool.Stop()
|
|
|
|
count := 0
|
|
for !f.exhausted && count < 1000 {
|
|
count++
|
|
switch f.randomInt(11) {
|
|
case 0:
|
|
i := int(f.randomByte())
|
|
f.peers[i].balance = pool.Register(f.peers[i])
|
|
doLog("Register peer", "id", f.peers[i].node.ID())
|
|
case 1:
|
|
i := int(f.randomByte())
|
|
f.peers[i].Disconnect()
|
|
doLog("Disconnect peer", "id", f.peers[i].node.ID())
|
|
case 2:
|
|
f.maxCount = uint64(f.randomByte())
|
|
f.maxCap = uint64(f.randomByte())
|
|
f.maxCap *= f.maxCap
|
|
|
|
count, cap := pool.Limits()
|
|
pool.SetLimits(f.maxCount, f.maxCap)
|
|
doLog("Set limits", "maxcount", f.maxCount, "maxcap", f.maxCap, "origincount", count, "oricap", cap)
|
|
case 3:
|
|
bias := f.randomDelay()
|
|
pool.SetConnectedBias(f.randomDelay())
|
|
doLog("Set connection bias", "bias", bias)
|
|
case 4:
|
|
pos, neg := f.randomFactors(), f.randomFactors()
|
|
pool.SetDefaultFactors(pos, neg)
|
|
doLog("Set default factors", "pos", pos, "neg", neg)
|
|
case 5:
|
|
pos, neg := uint64(f.randomInt(50000)), uint64(f.randomInt(50000))
|
|
pool.SetExpirationTCs(pos, neg)
|
|
doLog("Set expiration constants", "pos", pos, "neg", neg)
|
|
case 6:
|
|
var (
|
|
index = f.randomByte()
|
|
reqCap = uint64(f.randomByte())
|
|
bias = f.randomDelay()
|
|
requested = f.randomBool()
|
|
)
|
|
pool.SetCapacity(f.peers[index].node, reqCap, bias, requested)
|
|
doLog("Set capacity", "id", f.peers[index].node.ID(), "reqcap", reqCap, "bias", bias, "requested", requested)
|
|
case 7:
|
|
index := f.randomByte()
|
|
if balance := f.peers[index].balance; balance != nil {
|
|
f.connectedBalanceOp(balance, f.peers[index].node.ID())
|
|
}
|
|
case 8:
|
|
index := f.randomByte()
|
|
pool.BalanceOperation(f.peers[index].node.ID(), f.peers[index].freeID, func(balance vfs.AtomicBalanceOperator) {
|
|
count := f.randomInt(4)
|
|
for i := 0; i < count; i++ {
|
|
f.atomicBalanceOp(balance, f.peers[index].node.ID())
|
|
}
|
|
})
|
|
case 9:
|
|
pool.TotalTokenAmount()
|
|
pool.GetExpirationTCs()
|
|
pool.Active()
|
|
pool.Limits()
|
|
pool.GetPosBalanceIDs(f.peers[f.randomByte()].node.ID(), f.peers[f.randomByte()].node.ID(), f.randomInt(100))
|
|
case 10:
|
|
req := vflux.CapacityQueryReq{
|
|
Bias: uint64(f.randomByte()),
|
|
AddTokens: make([]vflux.IntOrInf, f.randomInt(vflux.CapacityQueryMaxLen+1)),
|
|
}
|
|
for i := range req.AddTokens {
|
|
v := vflux.IntOrInf{Type: uint8(f.randomInt(4))}
|
|
if v.Type < 2 {
|
|
v.Value = *big.NewInt(f.randomTokenAmount(false))
|
|
}
|
|
req.AddTokens[i] = v
|
|
}
|
|
reqEnc, err := rlp.EncodeToBytes(&req)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
p := int(f.randomByte())
|
|
if p < len(reqEnc) {
|
|
reqEnc[p] = f.randomByte()
|
|
}
|
|
pool.Handle(f.peers[f.randomByte()].node.ID(), f.peers[f.randomByte()].freeID, vflux.CapacityQueryName, reqEnc)
|
|
}
|
|
|
|
for _, peer := range f.disconnectList {
|
|
pool.Unregister(peer)
|
|
doLog("Unregister peer", "id", peer.node.ID())
|
|
}
|
|
f.disconnectList = nil
|
|
if d := f.randomDelay(); d > 0 {
|
|
clock.Run(d)
|
|
}
|
|
doLog("Clientpool stats in fuzzer", "count", f.activeCap, "maxcount", f.maxCount, "cap", f.activeCap, "maxcap", f.maxCap)
|
|
activeCount, activeCap := pool.Active()
|
|
doLog("Clientpool stats in pool", "count", activeCount, "cap", activeCap)
|
|
if activeCount != f.activeCount || activeCap != f.activeCap {
|
|
panic(nil)
|
|
}
|
|
if f.activeCount > f.maxCount || f.activeCap > f.maxCap {
|
|
panic(nil)
|
|
}
|
|
}
|
|
return 0
|
|
}
|