forked from dogecoin/dogecoin
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Changes are as below: Wrap CBlockHeader::nVersion into a new class (CBlockVersion). This allows to take care of interpreting the field into a base version, auxpow flag and the chain ID. Update getauxblock.py for new 'generate' RPC call. Add 'auxpow' to block JSON. Accept auxpow as PoW verification. Add unit tests for auxpow verification. Add check for memory-layout of CBlockVersion. Weaken auxpow chain ID checks for the testnet. Allow Params() to overrule when to check the auxpow chain ID and for legacy blocks. Use this to disable the checks on testnet. Introduce CPureBlockHeader. Split the block header part that is used by auxpow and the "real" block header (that uses auxpow) to resolve the cyclic dependency between the two. Differentiate between uint256 and arith_uint256. This change was done upstream, modify the auxpow code. Add missing lock in auxpow_tests. Fix REST header check for auxpow headers. Those can be longer, thus take that into account. Also perform the check actually on an auxpow header. Correctly set the coinbase for getauxblock results. Call IncrementExtraNonce in getauxblock so that the coinbase is actually initialised with the stuff it should be. (BIP30 block height and COINBASE_FLAGS.) Implement getauxblock plus regression test. Turn auxpow test into FIXTURE test. This allows using of the Params() calls. Move CMerkleTx code to auxpow.cpp. Otherwise we get linker errors when building without wallet. Fix rebase with BIP66. Update the code to handle BIP66's nVersion=3. Enforce that auxpow parent blocks have no auxpow block version. This is for compatibility with namecoind. See also namecoin/namecoin-legacy#199. Move auxpow-related parameters to Consensus::Params.
- Loading branch information
1 parent
b7413c2
commit 45525cd
Showing
40 changed files
with
2,437 additions
and
84 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,215 @@ | ||
// Copyright (c) 2009-2010 Satoshi Nakamoto | ||
// Copyright (c) 2011 Vince Durham | ||
// Copyright (c) 2009-2014 The Bitcoin developers | ||
// Copyright (c) 2014-2019 Daniel Kraft | ||
// Distributed under the MIT/X11 software license, see the accompanying | ||
// file license.txt or http://www.opensource.org/licenses/mit-license.php. | ||
|
||
#include <auxpow.h> | ||
|
||
#include <consensus/consensus.h> | ||
#include <consensus/merkle.h> | ||
#include <hash.h> | ||
#include <primitives/block.h> | ||
#include <script/script.h> | ||
#include <util/strencodings.h> | ||
#include <util/system.h> | ||
|
||
#include <algorithm> | ||
|
||
namespace | ||
{ | ||
|
||
/** | ||
* Decodes a 32-bit little endian integer from raw bytes. | ||
*/ | ||
uint32_t | ||
DecodeLE32 (const unsigned char* bytes) | ||
{ | ||
uint32_t res = 0; | ||
for (int i = 0; i < 4; ++i) | ||
{ | ||
res <<= 8; | ||
res |= bytes[3 - i]; | ||
} | ||
return res; | ||
} | ||
|
||
} // anonymous namespace | ||
|
||
bool | ||
CAuxPow::check (const uint256& hashAuxBlock, int nChainId, | ||
const Consensus::Params& params) const | ||
{ | ||
if (params.fStrictChainId && parentBlock.GetChainId () == nChainId) | ||
return error("Aux POW parent has our chain ID"); | ||
|
||
if (vChainMerkleBranch.size() > 30) | ||
return error("Aux POW chain merkle branch too long"); | ||
|
||
// Check that the chain merkle root is in the coinbase | ||
const uint256 nRootHash | ||
= CheckMerkleBranch (hashAuxBlock, vChainMerkleBranch, nChainIndex); | ||
std::vector<unsigned char> vchRootHash(nRootHash.begin(), nRootHash.end()); | ||
std::reverse (vchRootHash.begin(), vchRootHash.end()); // correct endian | ||
|
||
// Check that we are in the parent block merkle tree | ||
if (CheckMerkleBranch(coinbaseTx->GetHash(), vMerkleBranch, 0) | ||
!= parentBlock.hashMerkleRoot) | ||
return error("Aux POW merkle root incorrect"); | ||
|
||
// Check that there is at least one input. | ||
if (coinbaseTx->vin.empty()) | ||
return error("Aux POW coinbase has no inputs"); | ||
|
||
const CScript script = coinbaseTx->vin[0].scriptSig; | ||
|
||
// Check that the same work is not submitted twice to our chain. | ||
// | ||
|
||
const unsigned char* const mmHeaderBegin = pchMergedMiningHeader; | ||
const unsigned char* const mmHeaderEnd | ||
= mmHeaderBegin + sizeof (pchMergedMiningHeader); | ||
CScript::const_iterator pcHead = | ||
std::search(script.begin(), script.end(), mmHeaderBegin, mmHeaderEnd); | ||
|
||
CScript::const_iterator pc = | ||
std::search(script.begin(), script.end(), vchRootHash.begin(), vchRootHash.end()); | ||
|
||
if (pc == script.end()) | ||
return error("Aux POW missing chain merkle root in parent coinbase"); | ||
|
||
if (pcHead != script.end()) | ||
{ | ||
// Enforce only one chain merkle root by checking that a single instance of the merged | ||
// mining header exists just before. | ||
if (script.end() != std::search(pcHead + 1, script.end(), | ||
mmHeaderBegin, mmHeaderEnd)) | ||
return error("Multiple merged mining headers in coinbase"); | ||
if (pcHead + sizeof(pchMergedMiningHeader) != pc) | ||
return error("Merged mining header is not just before chain merkle root"); | ||
} | ||
else | ||
{ | ||
// For backward compatibility. | ||
// Enforce only one chain merkle root by checking that it starts early in the coinbase. | ||
// 8-12 bytes are enough to encode extraNonce and nBits. | ||
if (pc - script.begin() > 20) | ||
return error("Aux POW chain merkle root must start in the first 20 bytes of the parent coinbase"); | ||
} | ||
|
||
|
||
// Ensure we are at a deterministic point in the merkle leaves by hashing | ||
// a nonce and our chain ID and comparing to the index. | ||
pc += vchRootHash.size(); | ||
if (script.end() - pc < 8) | ||
return error("Aux POW missing chain merkle tree size and nonce in parent coinbase"); | ||
|
||
const uint32_t nSize = DecodeLE32 (&pc[0]); | ||
const unsigned merkleHeight = vChainMerkleBranch.size (); | ||
if (nSize != (1u << merkleHeight)) | ||
return error("Aux POW merkle branch size does not match parent coinbase"); | ||
|
||
const uint32_t nNonce = DecodeLE32 (&pc[4]); | ||
if (nChainIndex != getExpectedIndex (nNonce, nChainId, merkleHeight)) | ||
return error("Aux POW wrong index"); | ||
|
||
return true; | ||
} | ||
|
||
int | ||
CAuxPow::getExpectedIndex (uint32_t nNonce, int nChainId, unsigned h) | ||
{ | ||
// Choose a pseudo-random slot in the chain merkle tree | ||
// but have it be fixed for a size/nonce/chain combination. | ||
// | ||
// This prevents the same work from being used twice for the | ||
// same chain while reducing the chance that two chains clash | ||
// for the same slot. | ||
|
||
/* This computation can overflow the uint32 used. This is not an issue, | ||
though, since we take the mod against a power-of-two in the end anyway. | ||
This also ensures that the computation is, actually, consistent | ||
even if done in 64 bits as it was in the past on some systems. | ||
Note that h is always <= 30 (enforced by the maximum allowed chain | ||
merkle branch length), so that 32 bits are enough for the computation. */ | ||
|
||
uint32_t rand = nNonce; | ||
rand = rand * 1103515245 + 12345; | ||
rand += nChainId; | ||
rand = rand * 1103515245 + 12345; | ||
|
||
return rand % (1u << h); | ||
} | ||
|
||
uint256 | ||
CAuxPow::CheckMerkleBranch (uint256 hash, | ||
const std::vector<uint256>& vMerkleBranch, | ||
int nIndex) | ||
{ | ||
if (nIndex == -1) | ||
return uint256 (); | ||
for (std::vector<uint256>::const_iterator it(vMerkleBranch.begin()); | ||
it != vMerkleBranch.end(); ++it) | ||
{ | ||
if (nIndex & 1) | ||
hash = Hash(*it, hash); | ||
else | ||
hash = Hash(hash, *it); | ||
nIndex >>= 1; | ||
} | ||
return hash; | ||
} | ||
|
||
std::unique_ptr<CAuxPow> | ||
CAuxPow::createAuxPow (const CPureBlockHeader& header) | ||
{ | ||
assert (header.IsAuxpow ()); | ||
|
||
/* Build a minimal coinbase script input for merge-mining. */ | ||
const uint256 blockHash = header.GetHash(); | ||
std::vector<unsigned char> inputData(blockHash.begin(), blockHash.end()); | ||
std::reverse (inputData.begin(), inputData.end()); | ||
inputData.push_back (1); | ||
inputData.insert (inputData.end(), 7, 0); | ||
|
||
/* Fake a parent-block coinbase with just the required input | ||
script and no outputs. */ | ||
CMutableTransaction coinbase; | ||
coinbase.vin.resize (1); | ||
coinbase.vin[0].prevout.SetNull (); | ||
coinbase.vin[0].scriptSig = (CScript () << inputData); | ||
assert (coinbase.vout.empty ()); | ||
CTransactionRef coinbaseRef = MakeTransactionRef (coinbase); | ||
|
||
/* Build a fake parent block with the coinbase. */ | ||
CBlock parent; | ||
parent.nVersion = 1; | ||
parent.vtx.resize (1); | ||
parent.vtx[0] = coinbaseRef; | ||
parent.hashMerkleRoot = BlockMerkleRoot (parent); | ||
|
||
/* Construct the auxpow object. */ | ||
std::unique_ptr<CAuxPow> auxpow(new CAuxPow (std::move (coinbaseRef))); | ||
assert (auxpow->vMerkleBranch.empty ()); | ||
assert (auxpow->vChainMerkleBranch.empty ()); | ||
auxpow->nChainIndex = 0; | ||
auxpow->parentBlock = parent; | ||
|
||
return auxpow; | ||
} | ||
|
||
CPureBlockHeader& | ||
CAuxPow::initAuxPow (CBlockHeader& header) | ||
{ | ||
/* Set auxpow flag right now, since we take the block hash below when creating | ||
the minimal auxpow for header. */ | ||
header.SetAuxpowFlag(true); | ||
|
||
std::unique_ptr<CAuxPow> apow = createAuxPow (header); | ||
CPureBlockHeader& result = apow->parentBlock; | ||
header.SetAuxpow (std::move (apow)); | ||
|
||
return result; | ||
} |
Oops, something went wrong.