core-lightning/tests/fuzz/fuzz-channel_id.c

#include "config.h"
#include <assert.h>
#include <bitcoin/pubkey.h>
#include <bitcoin/tx.h>

#include <common/channel_id.h>
#include <common/setup.h>
#include <tests/fuzz/libfuzz.h>
#include <wire/wire.h>

void init(int *argc, char ***argv)
{
	common_setup("fuzzer");
}

void run(const uint8_t *data, size_t size)
{
	struct channel_id chan_id;
	struct pubkey basepoint_1, basepoint_2;
	struct bitcoin_outpoint outpoint;
	const uint8_t **v1_chunks, **v2_chunks, **marshal_chunks;
	const uint8_t *wire_ptr;
	size_t wire_max;
	uint8_t *wire_buf;

	/* 32 (txid) + 4 (vout) */
	if (size < 36)
		return;

	v1_chunks = get_chunks(NULL, data, size, 36);
	for (size_t i = 0; i < tal_count(v1_chunks); i++) {
		wire_ptr = v1_chunks[i];
		wire_max = 36;
		fromwire_bitcoin_outpoint(&wire_ptr, &wire_max, &outpoint);
		assert(wire_ptr);
		derive_channel_id(&chan_id, &outpoint);
	}
	tal_free(v1_chunks);

	v2_chunks = get_chunks(NULL, data, size, PUBKEY_CMPR_LEN * 2);
	for (size_t i = 0; i < tal_count(v2_chunks); i++) {
		wire_ptr = v2_chunks[i];
		wire_max = PUBKEY_CMPR_LEN;
		fromwire_pubkey(&wire_ptr, &wire_max, &basepoint_1);
		if (!wire_ptr)
			continue;

		wire_max = PUBKEY_CMPR_LEN;
		fromwire_pubkey(&wire_ptr, &wire_max, &basepoint_2);
		if (!wire_ptr)
			continue;

		derive_channel_id_v2(&chan_id, &basepoint_1, &basepoint_2);
	}
	tal_free(v2_chunks);

	marshal_chunks = get_chunks(NULL, data, size, 32);
	for (size_t i = 0; i < tal_count(marshal_chunks); i++) {
		wire_ptr = marshal_chunks[i];
		wire_max = tal_count(marshal_chunks[i]);
		fromwire_channel_id(&wire_ptr, &wire_max, &chan_id);
		wire_buf = tal_arr(NULL, uint8_t, tal_count(marshal_chunks[i]));
		towire_channel_id(&wire_buf, &chan_id);
		tal_free(wire_buf);
	}
	tal_free(marshal_chunks);
}