• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

libbitcoin / libbitcoin-system / 14957620207

11 May 2025 04:23PM UTC coverage: 82.287% (-0.2%) from 82.469%
14957620207

push

github

web-flow
Merge pull request #1659 from evoskuil/master

Refactor sig operations, reintroduce multisighash caching.

54 of 124 new or added lines in 8 files covered. (43.55%)

9 existing lines in 6 files now uncovered.

10299 of 12516 relevant lines covered (82.29%)

3849629.69 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

74.02
/src/chain/transaction.cpp
1
/**
2
 * Copyright (c) 2011-2025 libbitcoin developers (see AUTHORS)
3
 *
4
 * This file is part of libbitcoin.
5
 *
6
 * This program is free software: you can redistribute it and/or modify
7
 * it under the terms of the GNU Affero General Public License as published by
8
 * the Free Software Foundation, either version 3 of the License, or
9
 * (at your option) any later version.
10
 *
11
 * This program is distributed in the hope that it will be useful,
12
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14
 * GNU Affero General Public License for more details.
15
 *
16
 * You should have received a copy of the GNU Affero General Public License
17
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
18
 */
19
#include <bitcoin/system/chain/transaction.hpp>
20

21
#include <algorithm>
22
#include <iterator>
23
#include <numeric>
24
#include <type_traits>
25
#include <utility>
26
#include <vector>
27
#include <bitcoin/system/chain/context.hpp>
28
#include <bitcoin/system/chain/enums/coverage.hpp>
29
#include <bitcoin/system/chain/enums/magic_numbers.hpp>
30
#include <bitcoin/system/chain/header.hpp>
31
#include <bitcoin/system/chain/input.hpp>
32
#include <bitcoin/system/chain/output.hpp>
33
#include <bitcoin/system/chain/script.hpp>
34
#include <bitcoin/system/data/data.hpp>
35
#include <bitcoin/system/define.hpp>
36
#include <bitcoin/system/error/error.hpp>
37
#include <bitcoin/system/hash/hash.hpp>
38
#include <bitcoin/system/machine/machine.hpp>
39
#include <bitcoin/system/math/math.hpp>
40
#include <bitcoin/system/stream/stream.hpp>
41

42
namespace libbitcoin {
43
namespace system {
44
namespace chain {
45

46
BC_PUSH_WARNING(NO_THROW_IN_NOEXCEPT)
47

48
// Constructors.
49
// ----------------------------------------------------------------------------
50

51
transaction::transaction() NOEXCEPT
21✔
52
  : transaction(0,
53
      to_shared<input_cptrs>(),
21✔
54
      to_shared<output_cptrs>(),
21✔
55
      0, false, false)
42✔
56
{
57
}
21✔
58

59
transaction::transaction(uint32_t version, chain::inputs&& inputs,
905✔
60
    chain::outputs&& outputs, uint32_t locktime) NOEXCEPT
905✔
61
  : transaction(version, to_shareds(std::move(inputs)),
905✔
62
      to_shareds(std::move(outputs)), locktime)
2,715✔
63
{
64
}
905✔
65

66
transaction::transaction(uint32_t version, const chain::inputs& inputs,
1✔
67
    const chain::outputs& outputs, uint32_t locktime) NOEXCEPT
1✔
68
  : transaction(version, to_shareds(inputs), to_shareds(outputs), locktime,
1✔
69
      segregated(inputs), true)
3✔
70
{
71
}
1✔
72

73
transaction::transaction(uint32_t version, const inputs_cptr& inputs,
905✔
74
    const outputs_cptr& outputs, uint32_t locktime) NOEXCEPT
905✔
75
  : transaction(version, inputs, outputs, locktime, segregated(*inputs), true)
905✔
76
{
77
}
905✔
78

79
transaction::transaction(stream::in::fast&& stream, bool witness) NOEXCEPT
41✔
80
  : transaction(read::bytes::fast(stream), witness)
41✔
81
{
82
}
41✔
83

84
transaction::transaction(stream::in::fast& stream, bool witness) NOEXCEPT
2✔
85
  : transaction(read::bytes::fast(stream), witness)
2✔
86
{
87
}
2✔
88

89
transaction::transaction(std::istream&& stream, bool witness) NOEXCEPT
×
90
  : transaction(read::bytes::istream(stream), witness)
×
91
{
92
}
×
93

94
transaction::transaction(std::istream& stream, bool witness) NOEXCEPT
4✔
95
  : transaction(read::bytes::istream(stream), witness)
4✔
96
{
97
}
4✔
98

99
transaction::transaction(reader&& source, bool witness) NOEXCEPT
47✔
100
  : transaction(source, witness)
47✔
101
{
102
}
×
103

104
transaction::transaction(reader& source, bool witness) NOEXCEPT
204✔
105
  : version_(source.read_4_bytes_little_endian()),
408✔
106
    inputs_(CREATE(input_cptrs, source.get_allocator())),
204✔
107
    outputs_(CREATE(output_cptrs, source.get_allocator()))
612✔
108
{
109
    assign_data(source, witness);
204✔
110
}
204✔
111

112
// protected
113
transaction::transaction(uint32_t version,
927✔
114
    const chain::inputs_cptr& inputs, const chain::outputs_cptr& outputs,
115
    uint32_t locktime, bool segregated, bool valid) NOEXCEPT
927✔
116
  : version_(version),
927✔
117
    inputs_(inputs ? inputs : to_shared<input_cptrs>()),
1,854✔
118
    outputs_(outputs ? outputs : to_shared<output_cptrs>()),
927✔
119
    locktime_(locktime),
927✔
120
    segregated_(segregated),
927✔
121
    valid_(valid),
927✔
122
    size_(serialized_size(*inputs, *outputs, segregated))
1,854✔
123
{
124
}
927✔
125

126
// Operators.
127
// ----------------------------------------------------------------------------
128

129
bool transaction::operator==(const transaction& other) const NOEXCEPT
60✔
130
{
131
    // Compares input/output elements, not pointers, cache not compared.
132
    return (version_ == other.version_)
60✔
133
        && (locktime_ == other.locktime_)
58✔
134
        && ((inputs_ == other.inputs_) || 
84✔
135
            deep_equal(*inputs_, *other.inputs_))
26✔
136
        && ((outputs_ == other.outputs_) ||
144✔
137
            deep_equal(*outputs_, *other.outputs_));
26✔
138
}
139

140
bool transaction::operator!=(const transaction& other) const NOEXCEPT
2✔
141
{
142
    return !(*this == other);
2✔
143
}
144

145
// Deserialization.
146
// ----------------------------------------------------------------------------
147

148
// private
149
BC_PUSH_WARNING(NO_UNGUARDED_POINTERS)
150
void transaction::assign_data(reader& source, bool witness) NOEXCEPT
204✔
151
{
152
    auto& allocator = source.get_allocator();
204✔
153
    auto ins = to_non_const_raw_ptr(inputs_);
204✔
154
    auto count = source.read_size(max_block_size);
204✔
155
    ins->reserve(count);
204✔
156
    for (size_t in = 0; in < count; ++in)
453✔
157
        ins->emplace_back(CREATE(input, allocator, source));
249✔
158

159
    // Expensive repeated recomputation, so cache segregated state.
160
    // Detect witness as no inputs (marker) and expected flag [bip144].
161
    segregated_ = 
204✔
162
        inputs_->size() == witness_marker &&
220✔
163
        source.peek_byte() == witness_enabled;
16✔
164

165
    if (segregated_)
204✔
166
    {
167
        // Skip over the peeked witness flag.
168
        source.skip_byte();
16✔
169

170
        count = source.read_size(max_block_size);
16✔
171
        ins->reserve(count);
16✔
172
        for (size_t in = 0; in < count; ++in)
37✔
173
            ins->emplace_back(CREATE(input, allocator, source));
21✔
174

175
        auto outs = to_non_const_raw_ptr(outputs_);
16✔
176
        count = source.read_size(max_block_size);
16✔
177
        outs->reserve(count);
16✔
178
        for (size_t out = 0; out < count; ++out)
41✔
179
            outs->emplace_back(CREATE(output, allocator, source));
25✔
180

181
        // Read or skip witnesses as specified.
182
        if (witness)
16✔
183
        {
184
            for (auto& input: *inputs_)
35✔
185
                to_non_const_raw_ptr(input)->set_witness(source);
20✔
186
        }
187
        else
188
        {
189
            // Default witness is populated on input construct.
190
            for (size_t in = 0; in < inputs_->size(); ++in)
2✔
191
                witness::skip(source, true);
1✔
192
        }
193
    }
194
    else
195
    {
196
        auto outs = to_non_const_raw_ptr(outputs_);
188✔
197
        count = source.read_size(max_block_size);
188✔
198
        outs->reserve(count);
188✔
199
        for (size_t out = 0; out < count; ++out)
437✔
200
            outs->emplace_back(CREATE(output, allocator, source));
249✔
201
    }
202

203
    locktime_ = source.read_4_bytes_little_endian();
204✔
204
    size_ = serialized_size(*inputs_, *outputs_, segregated_);
204✔
205
    valid_ = source;
204✔
206
}
204✔
207
BC_POP_WARNING()
208

209
// Serialization.
210
// ----------------------------------------------------------------------------
211

212
// Transactions with empty witnesses always use old serialization [bip144].
213
// If no inputs are witness programs then witness hash is tx hash [bip141].
214
data_chunk transaction::to_data(bool witness) const NOEXCEPT
10✔
215
{
216
    witness &= segregated_;
10✔
217

218
    data_chunk data(serialized_size(witness));
10✔
219
    stream::out::fast ostream(data);
10✔
220
    write::bytes::fast out(ostream);
10✔
221
    to_data(out, witness);
10✔
222
    return data;
20✔
223
}
10✔
224

225
void transaction::to_data(std::ostream& stream, bool witness) const NOEXCEPT
1✔
226
{
227
    witness &= segregated_;
1✔
228

229
    write::bytes::ostream out(stream);
1✔
230
    to_data(out, witness);
1✔
231
}
1✔
232

233
void transaction::to_data(writer& sink, bool witness) const NOEXCEPT
966✔
234
{
235
    witness &= segregated_;
966✔
236

237
    sink.write_4_bytes_little_endian(version_);
966✔
238

239
    if (witness)
966✔
240
    {
241
        sink.write_byte(witness_marker);
2✔
242
        sink.write_byte(witness_enabled);
2✔
243
    }
244

245
    sink.write_variable(inputs_->size());
966✔
246
    for (const auto& input: *inputs_)
2,352✔
247
        input->to_data(sink);
1,386✔
248

249
    sink.write_variable(outputs_->size());
966✔
250
    for (const auto& output: *outputs_)
2,634✔
251
        output->to_data(sink);
1,668✔
252

253
    if (witness)
966✔
254
        for (auto& input: *inputs_)
5✔
255
            input->witness().to_data(sink, true);
3✔
256

257
    sink.write_4_bytes_little_endian(locktime_);
966✔
258
}
966✔
259

260
// static/private
261
transaction::sizes transaction::serialized_size(const input_cptrs& inputs,
1,131✔
262
    const output_cptrs& outputs, bool segregated) NOEXCEPT
263
{
264
    sizes size{ zero, zero };
1,131✔
265

266
    std::for_each(inputs.begin(), inputs.end(), [&](const auto& in) NOEXCEPT
2,314✔
267
    {
268
        size.nominal = ceilinged_add(size.nominal, in->nominal_size());
1,183✔
269
        if (segregated)
1,183✔
270
            size.witnessed = ceilinged_add(size.witnessed, in->witnessed_size());
64✔
271
    });
1,183✔
272

273
    const auto outs = [](size_t total, const auto& output) NOEXCEPT
394✔
274
    {
275
        return ceilinged_add(total, output->serialized_size());
394✔
276
    };
277

278
    constexpr auto base_const_size = sizeof(version_) + sizeof(locktime_);
1,131✔
279
    constexpr auto witness_const_size = sizeof(witness_marker) +
1,131✔
280
        sizeof(witness_enabled);
281

282
    const auto base_size =
1,131✔
283
        ceilinged_add(ceilinged_add(ceilinged_add(base_const_size,
1,131✔
284
            variable_size(inputs.size())), variable_size(outputs.size())),
285
            std::accumulate(outputs.begin(), outputs.end(), zero, outs));
286

287
    const auto nominal_size = ceilinged_add(base_size, size.nominal);
1,131✔
288

289
    // For non-segregated transactions, witnessed_size is nominal_size.
290
    const auto witnessed_size = segregated ? ceilinged_add(ceilinged_add(
1,131✔
291
        base_size, witness_const_size), size.witnessed) : nominal_size;
292

293
    // For non-segregated transactions, values are the same.
294
    return { nominal_size, witnessed_size };
1,131✔
295
}
296

297
size_t transaction::serialized_size(bool witness) const NOEXCEPT
613✔
298
{
299
    witness &= segregated_;
613✔
300

301
    return witness ? size_.witnessed : size_.nominal;
613✔
302
}
303

304
// Properties.
305
// ----------------------------------------------------------------------------
306

307
bool transaction::is_valid() const NOEXCEPT
777✔
308
{
309
    return valid_;
777✔
310
}
311

312
size_t transaction::spends() const NOEXCEPT
×
313
{
314
    return is_coinbase() ? zero : inputs_->size();
×
315
}
316

317
size_t transaction::inputs() const NOEXCEPT
1,569✔
318
{
319
    return inputs_->size();
1,569✔
320
}
321

322
size_t transaction::outputs() const NOEXCEPT
1✔
323
{
324
    return outputs_->size();
1✔
325
}
326

327
uint32_t transaction::version() const NOEXCEPT
6✔
328
{
329
    return version_;
4✔
330
}
331

332
uint32_t transaction::locktime() const NOEXCEPT
13✔
333
{
334
    return locktime_;
4✔
335
}
336

337
const inputs_cptr& transaction::inputs_ptr() const NOEXCEPT
2,446✔
338
{
339
    return inputs_;
2,446✔
340
}
341

342
const outputs_cptr& transaction::outputs_ptr() const NOEXCEPT
62✔
343
{
344
    return outputs_;
62✔
345
}
346

347
uint64_t transaction::fee() const NOEXCEPT
4✔
348
{
349
    // Underflow returns zero (and is_overspent() will be true).
350
    // This is value of prevouts spent by inputs minus that claimed by outputs.
351
    return floored_subtract(value(), claim());
4✔
352
}
353

354
// Hashing.
355
// ----------------------------------------------------------------------------
356

357
void transaction::set_nominal_hash(const hash_digest& hash) const NOEXCEPT
20✔
358
{
359
    nominal_hash_ = hash;
20✔
360
}
1✔
361

362
void transaction::set_witness_hash(const hash_digest& hash) const NOEXCEPT
2✔
363
{
364
    witness_hash_ = hash;
2✔
365
}
1✔
366

367
const hash_digest& transaction::get_hash(bool witness) const NOEXCEPT
26✔
368
{
369
    if (witness)
26✔
370
    {
371
        if (!witness_hash_) set_witness_hash(hash(witness));
4✔
372
        return *witness_hash_;
3✔
373
    }
374
    else
375
    {
376
        if (!nominal_hash_) set_nominal_hash(hash(witness));
42✔
377
        return *nominal_hash_;
23✔
378
    }
379
}
380

381
hash_digest transaction::hash(bool witness) const NOEXCEPT
934✔
382
{
383
    if (segregated_)
934✔
384
    {
385
        if (witness)
23✔
386
        {
387
            // Witness coinbase tx hash is assumed to be null_hash [bip141].
388
            if (witness_hash_) return *witness_hash_;
×
389
            if (is_coinbase()) return null_hash;
×
390
        }
391
        else
392
        {
393
            if (nominal_hash_) return *nominal_hash_;
23✔
394
        }
395
    }
396
    else
397
    {
398
        if (nominal_hash_) return *nominal_hash_;
911✔
399
    }
400

401
    hash_digest digest{};
927✔
402
    stream::out::fast stream{ digest };
927✔
403
    hash::sha256x2::fast sink{ stream };
927✔
404
    to_data(sink, witness);
927✔
405
    sink.flush();
927✔
406
    return digest;
927✔
407
}
927✔
408

409
// static
410
hash_digest transaction::desegregated_hash(size_t witnessed,
×
411
    size_t unwitnessed, const uint8_t* data) NOEXCEPT
412
{
413
    if (is_null(data))
×
414
        return null_hash;
×
415

416
    constexpr auto preamble = sizeof(uint32_t) + two * sizeof(uint8_t);
×
417
    const auto puts = floored_subtract(unwitnessed, two * sizeof(uint32_t));
×
418
    const auto locktime = floored_subtract(witnessed, sizeof(uint32_t));
×
419

420
    hash_digest digest{};
×
421
    stream::out::fast stream{ digest };
×
422
    hash::sha256x2::fast sink{ stream };
×
423
    sink.write_bytes(data, sizeof(uint32_t));
×
424
    sink.write_bytes(std::next(data, preamble), puts);
×
425
    sink.write_bytes(std::next(data, locktime), sizeof(uint32_t));
×
426
    sink.flush();
×
427
    return digest;
×
428
}
×
429

430
// Methods.
431
// ----------------------------------------------------------------------------
432

433
bool transaction::is_dusty(uint64_t minimum_output_value) const NOEXCEPT
6✔
434
{
435
    const auto dusty = [=](const auto& output) NOEXCEPT
9✔
436
    {
437
        return output->is_dust(minimum_output_value);
9✔
438
    };
6✔
439

440
    return std::any_of(outputs_->begin(), outputs_->end(), dusty);
6✔
441
}
442

443
size_t transaction::signature_operations(bool bip16, bool bip141) const NOEXCEPT
1✔
444
{
445
    // Overflow returns max_size_t.
446
    const auto in = [=](size_t total, const auto& input) NOEXCEPT
×
447
    {
NEW
448
        const auto add = input->signature_operations(bip16, bip141);
×
NEW
449
        return ceilinged_add(total, add);
×
450
    };
1✔
451

452
    // Overflow returns max_size_t.
UNCOV
453
    const auto out = [=](size_t total, const auto& output) NOEXCEPT
×
454
    {
NEW
455
        const auto add = output->signature_operations(bip141);
×
NEW
456
        return ceilinged_add(total, add);
×
457
    };
1✔
458

459
    // Overflow returns max_size_t.
460
    return ceilinged_add(
1✔
461
        std::accumulate(inputs_->begin(), inputs_->end(), zero, in),
462
        std::accumulate(outputs_->begin(), outputs_->end(), zero, out));
1✔
463
}
464

465
// private
466
chain::points transaction::points() const NOEXCEPT
4✔
467
{
468
    chain::points out(inputs_->size());
4✔
469

470
    const auto point = [](const auto& input) NOEXCEPT
8✔
471
    {
472
        return input->point();
8✔
473
    };
474

475
    std::transform(inputs_->begin(), inputs_->end(), out.begin(), point);
4✔
476
    return out;
4✔
477
}
478

479
// Signatures (public)
480
// ----------------------------------------------------------------------------
481

482
hash_digest transaction::signature_hash(const input_iterator& input,
41✔
483
    const script& subscript, uint64_t value, uint8_t sighash_flags,
484
    script_version version, bool bip143, bool bip342) const NOEXCEPT
485
{
486
    // There is no rational interpretation of a signature hash for a coinbase.
487
    BC_ASSERT(!is_coinbase());
41✔
488

489
    // This is where the connection between bip141 and bip143 is made. If a
490
    // versioned 1 program (segwit) extracted by bip141 but bip143 (segwit
491
    // hashing) is not active, then drop down to unversioned signature hashing.
492
    if (bip143 && version == script_version::segwit)
41✔
493
        return version_0_sighash(input, subscript, value, sighash_flags);
22✔
494

495
    // This is where the connection between bip341 and bip342 is made. If a
496
    // version 2 program (taproot) extracted by bip341 but bip342 (tapscript)
497
    // is not active then drop down to unversioned signature hashing. 
498
    if (bip342 && version == script_version::taproot)
19✔
499
        return version_1_sighash(input, subscript, value, sighash_flags);
×
500

501
    // Given above forks are documented to activate together, this distinction
502
    // is moot, however these are distinct BIPs and therefore must be either be
503
    // differentiated as such in code, or the BIP distiction would be ignored.
504
    return unversioned_sighash(input, subscript, sighash_flags);
19✔
505
}
506

507
// This is not used internal to the library.
508
bool transaction::check_signature(const ec_signature& signature,
2✔
509
    const data_slice& public_key, const script& subscript, uint32_t index,
510
    uint64_t value, uint8_t sighash_flags, script_version version,
511
    uint32_t flags) const NOEXCEPT
512
{
513
    if ((index >= inputs_->size()) || signature.empty() || public_key.empty())
2✔
514
        return false;
515

516
    const auto bip143 = script::is_enabled(flags, flags::bip143_rule);
2✔
517
    const auto bip341 = script::is_enabled(flags, flags::bip341_rule);
2✔
518

519
    const auto sighash = signature_hash(input_at(index), subscript, value,
2✔
520
        sighash_flags, version, bip143, bip341);
521

522
    // Validate the EC signature.
523
    return ecdsa::verify_signature(public_key, sighash, signature);
2✔
524
}
525

526
// This is not used internal to the library.
527
bool transaction::create_endorsement(endorsement& out, const ec_secret& secret,
2✔
528
    const script& subscript, uint32_t index, uint64_t value,
529
    uint8_t sighash_flags, script_version version,
530
    uint32_t flags) const NOEXCEPT
531
{
532
    if (index >= inputs_->size())
2✔
533
        return false;
534

535
    const auto bip143 = script::is_enabled(flags, flags::bip143_rule);
2✔
536
    const auto bip341 = script::is_enabled(flags, flags::bip341_rule);
2✔
537

538
    out.reserve(max_endorsement_size);
2✔
539
    const auto sighash = signature_hash(input_at(index), subscript, value,
2✔
540
        sighash_flags, version, bip143, bip341);
541

542
    // Create the EC signature and encode as DER.
543
    ec_signature signature;
2✔
544
    if (!ecdsa::sign(signature, secret, sighash) ||
4✔
545
        !ecdsa::encode_signature(out, signature))
2✔
546
        return false;
×
547

548
    // Add the sighash type to the end of the DER signature -> endorsement.
549
    out.push_back(sighash_flags);
2✔
550
    ////out.shrink_to_fit();
551
    return true;
2✔
552
}
553

554
// Guard (context free).
555
// ----------------------------------------------------------------------------
556

557
bool transaction::is_coinbase() const NOEXCEPT
80✔
558
{
559
    return is_one(inputs_->size()) && inputs_->front()->point().is_null();
80✔
560
}
561

562
bool transaction::is_internal_double_spend() const NOEXCEPT
4✔
563
{
564
    // TODO: optimize (see block.is_internal_double_spend).
565
    return !is_distinct(points());
4✔
566
}
567

568
// TODO: a pool (non-coinbase) tx must fit into a block (with a coinbase).
569
bool transaction::is_oversized() const NOEXCEPT
×
570
{
571
    return serialized_size(false) > max_block_size;
×
572
}
573

574
// Guard (contextual).
575
// ----------------------------------------------------------------------------
576

577
// static/private
578
bool transaction::segregated(const chain::inputs& inputs) NOEXCEPT
1✔
579
{
580
    const auto witnessed = [](const auto& input) NOEXCEPT
2✔
581
    {
582
        return !input.witness().stack().empty();
1✔
583
    };
584

585
    return std::any_of(inputs.begin(), inputs.end(), witnessed);
1✔
586
}
587

588
// static/private
589
bool transaction::segregated(const input_cptrs& inputs) NOEXCEPT
905✔
590
{
591
    const auto witnessed = [](const auto& input) NOEXCEPT
908✔
592
    {
593
        return !input->witness().stack().empty();
908✔
594
    };
595

596
    return std::any_of(inputs.begin(), inputs.end(), witnessed);
905✔
597
}
598

599
bool transaction::is_segregated() const NOEXCEPT
4✔
600
{
601
    return segregated_;
4✔
602
}
603

604
size_t transaction::weight() const NOEXCEPT
×
605
{
606
    // Block weight is 3 * base size * + 1 * total size [bip141].
607
    return ceilinged_add(
×
608
        ceilinged_multiply(base_size_contribution, serialized_size(false)),
609
        ceilinged_multiply(total_size_contribution, serialized_size(true)));
×
610
}
611

612
bool transaction::is_overweight() const NOEXCEPT
×
613
{
614
    return weight() > max_block_weight;
×
615
}
616

617
//*****************************************************************************
618
// CONSENSUS: Legacy sigops are counted in coinbase scripts despite the fact
619
// that coinbase input scripts are never executed. There is no need to exclude
620
// p2sh coinbase sigops since there is never a script to count.
621
//*****************************************************************************
NEW
622
bool transaction::is_signature_operations_limited(bool bip16,
×
623
    bool bip141) const NOEXCEPT
624
{
625
    const auto limit = bip141 ? max_fast_sigops : max_block_sigops;
×
626
    return signature_operations(bip16, bip141) > limit;
×
627
}
628

629
// Check (context free).
630
// ----------------------------------------------------------------------------
631

632
bool transaction::is_empty() const NOEXCEPT
9✔
633
{
634
    return inputs_->empty() || outputs_->empty();
9✔
635
}
636

637
bool transaction::is_null_non_coinbase() const NOEXCEPT
7✔
638
{
639
    BC_ASSERT(!is_coinbase());
7✔
640

641
    const auto invalid = [](const auto& input) NOEXCEPT
9✔
642
    {
643
        return input->point().is_null();
9✔
644
    };
645

646
    // True if not coinbase but has null previous_output(s).
647
    return std::any_of(inputs_->begin(), inputs_->end(), invalid);
7✔
648
}
649

650
bool transaction::is_invalid_coinbase_size() const NOEXCEPT
9✔
651
{
652
    BC_ASSERT(is_coinbase());
9✔
653

654
    // True if coinbase and has invalid input[0] script size.
655
    const auto script_size = inputs_->front()->script().serialized_size(false);
9✔
656
    return script_size < min_coinbase_size || script_size > max_coinbase_size;
9✔
657
}
658

659
// Accept (contextual).
660
// ----------------------------------------------------------------------------
661

662
bool transaction::is_absolute_locked(size_t height, uint32_t timestamp,
5✔
663
    uint32_t median_time_past, bool bip113) const NOEXCEPT
664
{
665
    // BIP113: comparing the locktime against the median of the past 11 block
666
    // timestamps, rather than the timestamp of the block including the tx.
667
    const auto time = bip113 ? median_time_past : timestamp;
5✔
668

669
    const auto finalized = [](const auto& input) NOEXCEPT
2✔
670
    {
671
        return input->is_final();
2✔
672
    };
673

674
    const auto height_time = locktime_ < locktime_threshold ? height : time;
5✔
675

676
    return !(is_zero(locktime_) || locktime_ < height_time ||
8✔
677
        std::all_of(inputs_->begin(), inputs_->end(), finalized));
3✔
678
}
679

680
bool transaction::is_missing_prevouts() const NOEXCEPT
3✔
681
{
682
    BC_ASSERT(!is_coinbase());
3✔
683

684
    // Null or invalid prevout indicates not found.
685
    const auto missing = [](const auto& input) NOEXCEPT
2✔
686
    {
687
        return !input->prevout;
688
    };
689

690
    return std::any_of(inputs_->begin(), inputs_->end(), missing);
3✔
691
}
692

693
uint64_t transaction::claim() const NOEXCEPT
8✔
694
{
695
    // Overflow returns max_uint64.
696
    const auto sum = [](uint64_t total, const auto& output) NOEXCEPT
8✔
697
    {
698
        return ceilinged_add(total, output->value());
8✔
699
    };
700

701
    // The amount claimed by outputs.
702
    return std::accumulate(outputs_->begin(), outputs_->end(), 0_u64, sum);
8✔
703
}
704

705
uint64_t transaction::value() const NOEXCEPT
9✔
706
{
707
    // Overflow, not populated, and coinbase (default) return max_uint64.
708
    const auto sum = [](uint64_t total, const auto& input) NOEXCEPT
7✔
709
    {
710
        const auto value = input->prevout ? input->prevout->value() : max_uint64;
7✔
711
        return ceilinged_add(total, value);
7✔
712
    };
713

714
    // The amount of prevouts (referenced by inputs).
715
    return std::accumulate(inputs_->begin(), inputs_->end(), 0_u64, sum);
9✔
716
}
717

718
bool transaction::is_overspent() const NOEXCEPT
2✔
719
{
720
    BC_ASSERT(!is_coinbase());
2✔
721

722
    return claim() > value();
2✔
723
}
724

725
constexpr bool is_non_coinbase_mature(size_t tx_height, size_t height) NOEXCEPT
2✔
726
{
727
    return tx_height <= height;
2✔
728
}
729

730
// static
731
//*****************************************************************************
732
// CONSENSUS: Coinbase output matures at 100 blocks depth.
733
// CONSENSUS: Genesis coinbase is forever immature (exception).
734
//*****************************************************************************
735
bool transaction::is_coinbase_mature(size_t coinbase_height,
3✔
736
    size_t height) NOEXCEPT
737
{
738
    return !is_zero(coinbase_height) &&
5✔
739
        ceilinged_add(coinbase_height, coinbase_maturity) <= height;
3✔
740
}
741

742
bool transaction::is_immature(size_t height) const NOEXCEPT
6✔
743
{
744
    BC_ASSERT(!is_coinbase());
6✔
745

746
    // Spends internal to a block are handled by block validation.
747
    const auto mature = [=](const auto& input) NOEXCEPT
5✔
748
    {
749
        return input->metadata.coinbase ?
5✔
750
            is_coinbase_mature(input->metadata.height, height) :
3✔
751
            is_non_coinbase_mature(input->metadata.height, height);
2✔
752
    };
6✔
753

754
    return !std::all_of(inputs_->begin(), inputs_->end(), mature);
6✔
755
}
756

757
// static
758
bool transaction::is_relative_locktime_applied(bool coinbase, uint32_t version,
×
759
    uint32_t sequence) NOEXCEPT
760
{
761
    // BIP68: not applied to the sequence of the input of a coinbase.
762
    // BIP68: if bit 31 is set then no consensus meaning is applied.
763
    // BIP68: applied to txs with a version greater than or equal to two.
764
    return !coinbase && input::is_relative_locktime_applied(sequence) &&
×
765
        (version >= relative_locktime_min_version);
×
766
}
767

768
bool transaction::is_internally_locked(const input& in) const NOEXCEPT
×
769
{
770
    // BIP68: not applied to the sequence of the input of a coinbase.
771
    BC_ASSERT(!is_coinbase());
×
772

773
    // BIP68: applied to txs with a version greater than or equal to two.
774
    if (version_ < relative_locktime_min_version)
×
775
        return false;
776

777
    // Internal spends have no relative height/mtp (own metadata vs. itself).
778
    return in.is_relative_locked(in.metadata.height,
×
779
        in.metadata.median_time_past);
×
780
}
781

782
bool transaction::is_relative_locked(size_t height,
4✔
783
    uint32_t median_time_past) const NOEXCEPT
784
{
785
    // BIP68: not applied to the sequence of the input of a coinbase.
786
    BC_ASSERT(!is_coinbase());
4✔
787

788
    // BIP68: applied to txs with a version greater than or equal to two.
789
    if (version_ < relative_locktime_min_version)
4✔
790
        return false;
791

792
    // BIP68: references to median time past are as defined by bip113.
793
    const auto locked = [=](const auto& input) NOEXCEPT
2✔
794
    {
795
        return input->is_relative_locked(height, median_time_past);
2✔
796
    };
2✔
797

798
    return std::any_of(inputs_->begin(), inputs_->end(), locked);
2✔
799
}
800

801
// Spends internal to a block are handled by block validation.
802
bool transaction::is_unconfirmed_spend(size_t height) const NOEXCEPT
×
803
{
804
    BC_ASSERT(!is_coinbase());
×
805

806
    // Zero is either genesis or not found.
807
    // Test maturity first to obtain proper error code.
808
    // Spends internal to a block are handled by block validation.
809
    const auto unconfirmed = [=](const auto& input) NOEXCEPT
×
810
    {
811
        const auto prevout_height = input->metadata.height;
×
812
        return is_zero(prevout_height) && !(height > prevout_height);
×
813
    };
×
814

815
    return std::any_of(inputs_->begin(), inputs_->end(), unconfirmed);
×
816
}
817

818
bool transaction::is_confirmed_double_spend(size_t height) const NOEXCEPT
4✔
819
{
820
    BC_ASSERT(!is_coinbase());
4✔
821

822
    // Spends internal to a block are handled by block validation.
823
    const auto spent = [=](const auto& input) NOEXCEPT
3✔
824
    {
825
        return input->metadata.spent && height > input->metadata.height;
3✔
826
    };
4✔
827

828
    return std::any_of(inputs_->begin(), inputs_->end(), spent);
4✔
829
}
830

831
// Guards (for tx pool without compact blocks).
832
// ----------------------------------------------------------------------------
833

834
// Pools do not have coinbases.
835
// Redundant with block is_internal_double_spend check.
836
// Redundant with block max_block_size check.
837
code transaction::guard_check() const NOEXCEPT
×
838
{
839
    if (is_coinbase())
×
840
        return error::coinbase_transaction;
×
841
    if (is_internal_double_spend())
×
842
        return error::transaction_internal_double_spend;
×
843
    if (is_oversized())
×
844
        return error::transaction_size_limit;
×
845

846
    return error::transaction_success;
×
847
}
848

849
// Redundant with block max_block_weight accept.
850
code transaction::guard_check(const context& ctx) const NOEXCEPT
×
851
{
852
    const auto bip141 = ctx.is_enabled(flags::bip141_rule);
×
853

854
     if (!bip141 && is_segregated())
×
855
        return error::unexpected_witness_transaction;
×
856
     if (bip141 && is_overweight())
×
857
        return error::transaction_weight_limit;
×
858

859
    return error::transaction_success;
×
860
}
861

862
// Redundant with block max_block_sigops accept.
863
code transaction::guard_accept(const context& ctx) const NOEXCEPT
×
864
{
865
    const auto bip16 = ctx.is_enabled(flags::bip16_rule);
×
866
    const auto bip141 = ctx.is_enabled(flags::bip141_rule);
×
867

868
    if (is_missing_prevouts())
×
869
        return error::missing_previous_output;
×
NEW
870
    if (is_signature_operations_limited(bip16, bip141))
×
871
        return error::transaction_sigop_limit;
×
872

873
    return error::transaction_success;
×
874
}
875

876
// Validation.
877
// ----------------------------------------------------------------------------
878

879
// DO invoke on coinbase.
880
code transaction::check() const NOEXCEPT
5✔
881
{
882
    const auto coinbase = is_coinbase();
5✔
883

884
    if (is_empty())
5✔
885
        return error::empty_transaction;
×
886
    if (coinbase && is_invalid_coinbase_size())
5✔
887
        return error::invalid_coinbase_script_size;
×
888
    if (!coinbase && is_null_non_coinbase())
5✔
889
        return error::previous_output_null;
×
890

891
    return error::transaction_success;
5✔
892
}
893

894
// forks
895
// height
896
// timestamp
897
// median_time_past
898

899
// DO invoke on coinbase.
900
code transaction::check(const context& ctx) const NOEXCEPT
×
901
{
902
    const auto bip113 = ctx.is_enabled(bip113_rule);
×
903

904
    if (is_absolute_locked(ctx.height, ctx.timestamp, ctx.median_time_past, bip113))
×
905
        return error::absolute_time_locked;
×
906

907
    return error::transaction_success;
×
908
}
909

910
// Do not need to invoke on coinbase.
911
// This assumes that prevout caching is completed on all inputs.
912
code transaction::accept(const context&) const NOEXCEPT
×
913
{
914
    ////BC_ASSERT(!is_coinbase());
915

916
    if (is_coinbase())
×
917
        return error::transaction_success;
×
918
    if (is_missing_prevouts())
×
919
        return error::missing_previous_output;
×
920
    if (is_overspent())
×
921
        return error::spend_exceeds_value;
×
922

923
    return error::transaction_success;
×
924
}
925

926
// forks
927
// height
928
// median_time_past
929

930
// Do not need to invoke on coinbase.
931
// Node performs these checks through database query.
932
// This assumes that prevout and metadata caching are completed on all inputs.
933
code transaction::confirm(const context& ctx) const NOEXCEPT
×
934
{
935
    ////BC_ASSERT(!is_coinbase());
936
    const auto bip68 = ctx.is_enabled(bip68_rule);
×
937

938
    if (is_coinbase())
×
939
        return error::transaction_success;
×
940
    if (bip68 && is_relative_locked(ctx.height, ctx.median_time_past))
×
941
        return error::relative_time_locked;
×
942
    if (is_immature(ctx.height))
×
943
        return error::coinbase_maturity;
×
944
    if (is_unconfirmed_spend(ctx.height))
×
945
        return error::unconfirmed_spend;
×
946
    if (is_confirmed_double_spend(ctx.height))
×
947
        return error::confirmed_double_spend;
×
948

949
    return error::transaction_success;
×
950
}
951

952
// Delegated.
953
// ----------------------------------------------------------------------------
954

955
code transaction::connect_input(const context& ctx,
4✔
956
    const input_iterator& it) const NOEXCEPT
957
{
958
    using namespace machine;
4✔
959

960
    // TODO: evaluate performance tradeoff.
961
    if ((*it)->is_roller())
4✔
962
    {
963
        // Evaluate rolling scripts with linear search but constant erase.
964
        return interpreter<linked_stack>::connect(ctx, *this, it);
×
965
    }
966

967
    // Evaluate non-rolling scripts with constant search but linear erase.
968
    return interpreter<contiguous_stack>::connect(ctx, *this, it);
4✔
969
}
970

971
// Connect (contextual).
972
// ----------------------------------------------------------------------------
973
// TODO: accumulate sigops from each connect result and add coinbase.
974
// TODO: return in override with out parameter. more impactful with segwit.
975

976
// forks
977

978
// Do not need to invoke on coinbase.
979
// This assumes that prevout caching is completed on all inputs.
980
code transaction::connect(const context& ctx) const NOEXCEPT
2✔
981
{
982
    ////BC_ASSERT(!is_coinbase());
983

984
    if (is_coinbase())
2✔
985
        return error::transaction_success;
×
986

987
    initialize_sighash_cache();
2✔
988

989
    for (auto in = inputs_->begin(); in != inputs_->end(); ++in)
6✔
990
        if (const auto ec = connect_input(ctx, in))
4✔
991
            return ec;
×
992

993
    return error::transaction_success;
2✔
994
}
995

996
BC_POP_WARNING()
997

998
// JSON value convertors.
999
// ----------------------------------------------------------------------------
1000

1001
namespace json = boost::json;
1002

1003
// boost/json will soon have NOEXCEPT: github.com/boostorg/json/pull/636
1004
BC_PUSH_WARNING(NO_THROW_IN_NOEXCEPT)
1005

1006
transaction tag_invoke(json::value_to_tag<transaction>,
2✔
1007
    const json::value& value) NOEXCEPT
1008
{
1009
    return
2✔
1010
    {
1011
        value.at("version").to_number<uint32_t>(),
2✔
1012
        json::value_to<chain::inputs>(value.at("inputs")),
2✔
1013
        json::value_to<chain::outputs>(value.at("outputs")),
4✔
1014
        value.at("locktime").to_number<uint32_t>()
4✔
1015
    };
4✔
1016
}
1017

1018
void tag_invoke(json::value_from_tag, json::value& value,
4✔
1019
    const transaction& tx) NOEXCEPT
1020
{
1021
    value =
4✔
1022
    {
1023
        { "version", tx.version() },
1024
        { "inputs", *tx.inputs_ptr() },
1025
        { "outputs", *tx.outputs_ptr() },
1026
        { "locktime", tx.locktime() }
1027
    };
4✔
1028
}
4✔
1029

1030
BC_POP_WARNING()
1031

1032
transaction::cptr tag_invoke(json::value_to_tag<transaction::cptr>,
×
1033
    const json::value& value) NOEXCEPT
1034
{
1035
    return to_shared(tag_invoke(json::value_to_tag<transaction>{}, value));
×
1036
}
1037

1038
// Shared pointer overload is required for navigation.
1039
BC_PUSH_WARNING(SMART_PTR_NOT_NEEDED)
1040
BC_PUSH_WARNING(NO_VALUE_OR_CONST_REF_SHARED_PTR)
1041

1042
void tag_invoke(json::value_from_tag tag, json::value& value,
2✔
1043
    const transaction::cptr& tx) NOEXCEPT
1044
{
1045
    tag_invoke(tag, value, *tx);
2✔
1046
}
2✔
1047

1048
BC_POP_WARNING()
1049
BC_POP_WARNING()
1050

1051
} // namespace chain
1052
} // namespace system
1053
} // namespace libbitcoin
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc