Line data Source code
1 : #include "fd_solfuzz_private.h"
2 : #include "fd_instr_harness.h"
3 : #include "../fd_executor.h"
4 : #include "../fd_runtime.h"
5 : #include "../program/fd_bpf_loader_program.h"
6 : #include "../program/fd_precompiles.h"
7 : #include "../fd_system_ids.h"
8 : #include "../../progcache/fd_progcache_admin.h"
9 : #include "../../log_collector/fd_log_collector.h"
10 :
11 : void
12 : fd_solfuzz_pb_instr_ctx_create( fd_solfuzz_runner_t * runner,
13 : fd_exec_instr_ctx_t * ctx,
14 0 : fd_exec_test_instr_context_t const * test_ctx ) {
15 :
16 0 : memset( ctx, 0, sizeof(fd_exec_instr_ctx_t) );
17 :
18 : /* Create temporary fork for account loading */
19 :
20 0 : runner->bank->progcache_fork_id = fd_progcache_attach_child( runner->progcache->join, fd_progcache_fork_id_initial() );
21 0 : runner->bank->accdb_fork_id = fd_accdb_attach_child( runner->accdb, runner->root_fork_id );
22 0 : runner->bank->parent_accdb_fork_id = runner->bank->accdb_fork_id;
23 :
24 0 : fd_txn_in_t * txn_in = fd_spad_alloc( runner->spad, alignof(fd_txn_in_t), sizeof(fd_txn_in_t) );
25 0 : fd_txn_out_t * txn_out = fd_spad_alloc( runner->spad, alignof(fd_txn_out_t), sizeof(fd_txn_out_t) );
26 :
27 0 : fd_log_collector_t * log = fd_spad_alloc( runner->spad, alignof(fd_log_collector_t), sizeof(fd_log_collector_t) );
28 :
29 0 : fd_runtime_t * runtime = runner->runtime;
30 :
31 0 : runtime->log.log_collector = log;
32 :
33 0 : ctx->txn_out = txn_out;
34 0 : ctx->txn_in = txn_in;
35 :
36 0 : fd_memset( txn_out->accounts.keys, 0, sizeof(fd_pubkey_t)*MAX_TX_ACCOUNT_LOCKS );
37 0 : fd_memset( runtime->accounts.account, 0, sizeof(fd_acc_t)*MAX_TX_ACCOUNT_LOCKS );
38 0 : fd_memset( runtime->accounts.executable, 0, sizeof(fd_acc_t)*MAX_TX_ACCOUNT_LOCKS );
39 0 : for( ulong j=0UL; j<MAX_TX_ACCOUNT_LOCKS; j++ ) {
40 0 : txn_out->accounts.account[ j ] = &runtime->accounts.account[ j ];
41 0 : txn_out->accounts.executable[ j ] = &runtime->accounts.executable[ j ];
42 0 : }
43 0 : txn_out->accounts.executable_cnt = 0UL;
44 0 : fd_memset( txn_out->accounts.executable_from_parent, 0, sizeof(txn_out->accounts.executable_from_parent) );
45 0 : fd_memset( txn_out->accounts.executable_pd_write, 0, sizeof(txn_out->accounts.executable_pd_write) );
46 0 : txn_out->accounts.executable_skipped_cnt = 0;
47 :
48 : /* Bank manager */
49 0 : fd_banks_clear_bank( runner->banks, runner->bank );
50 :
51 : /* Restore features */
52 0 : FD_TEST( test_ctx->has_features );
53 0 : fd_features_t * features = &runner->bank->f.features;
54 0 : fd_exec_test_feature_set_t const * feature_set = &test_ctx->features;
55 0 : FD_TEST( fd_solfuzz_pb_restore_features( features, feature_set ) );
56 :
57 : /* Blockhash queue init */
58 0 : ulong blockhash_seed; FD_TEST( fd_rng_secure( &blockhash_seed, sizeof(ulong) ) );
59 0 : fd_blockhashes_t * blockhashes = fd_blockhashes_init( &runner->bank->f.block_hash_queue, blockhash_seed );
60 0 : fd_memset( fd_blockhash_deq_push_tail_nocopy( blockhashes->d.deque ), 0, sizeof(fd_hash_t) );
61 :
62 : /* Set up instruction context */
63 0 : fd_instr_info_t * info = fd_instr_info_new( &runtime->instr.trace[ 0UL ] );
64 0 : info->stack_height = 1;
65 :
66 : /* Set up mock txn descriptor and payload
67 : FIXME: More fields may need to be initialized. This seems to be
68 : the minimal set of fields needed to retain full context for
69 : precompile execution. */
70 0 : fd_txn_p_t * txn = fd_spad_alloc_check( runner->spad, alignof(fd_txn_p_t), sizeof(fd_txn_p_t) );
71 0 : fd_txn_t * txn_descriptor = TXN( txn );
72 :
73 0 : txn->payload_sz = 0UL;
74 0 : if( test_ctx->data ) {
75 0 : if( FD_UNLIKELY( test_ctx->data->size>FD_INSTR_DATA_MAX ) ) {
76 0 : FD_LOG_ERR(( "invariant violation: instr data sz is too large %u > %lu", test_ctx->data->size, FD_INSTR_DATA_MAX ));
77 0 : }
78 0 : info->data_sz = (ushort)test_ctx->data->size;
79 0 : memcpy( info->data, test_ctx->data->bytes, info->data_sz );
80 :
81 0 : ulong payload_sz = fd_ulong_min( test_ctx->data->size, sizeof(txn->payload) );
82 0 : memcpy( txn->payload, test_ctx->data->bytes, payload_sz );
83 0 : txn->payload_sz = payload_sz;
84 0 : }
85 0 : txn_descriptor->transaction_version = FD_TXN_VLEGACY;
86 0 : txn_descriptor->acct_addr_cnt = (ushort)test_ctx->accounts_count;
87 0 : txn_descriptor->instr_cnt = 1;
88 0 : txn_descriptor->instr[0] = (fd_txn_instr_t) {
89 0 : .acct_cnt = (ushort)test_ctx->accounts_count,
90 0 : .data_off = 0,
91 0 : .data_sz = (ushort)txn->payload_sz,
92 0 : };
93 :
94 0 : runtime->log.enable_log_collector = 0;
95 :
96 0 : fd_compute_budget_details_new( &txn_out->details.compute_budget );
97 0 : runtime->instr.stack_sz = 0;
98 0 : txn_out->accounts.cnt = 0UL;
99 0 : txn_out->accounts.executable_cnt = 0UL;
100 :
101 0 : txn_out->details.loaded_accounts_data_size = 0UL;
102 0 : txn_out->details.accounts_resize_delta = 0L;
103 :
104 0 : memset( txn_out->details.return_data.program_id.key, 0, sizeof(fd_pubkey_t) );
105 0 : txn_out->details.return_data.len = 0;
106 :
107 0 : runtime->log.capture_ctx = NULL;
108 0 : runtime->log.dump_proto_ctx = NULL;
109 0 : runtime->log.txn_dump_ctx = NULL;
110 :
111 0 : runtime->instr.trace_length = 1UL;
112 :
113 0 : txn_out->err.exec_err = 0;
114 0 : txn_out->err.exec_err_kind = FD_EXECUTOR_ERR_KIND_NONE;
115 0 : runtime->instr.current_idx = 0;
116 :
117 0 : txn_in->txn = txn;
118 0 : txn_out->details.compute_budget.compute_unit_limit = test_ctx->cu_avail;
119 0 : txn_out->details.compute_budget.compute_meter = test_ctx->cu_avail;
120 0 : runtime->log.enable_vm_tracing = runner->enable_vm_tracing;
121 0 : runtime->log.tracing_mem = runner->enable_vm_tracing ?
122 0 : fd_spad_alloc_check( runner->spad, FD_RUNTIME_VM_TRACE_STATIC_ALIGN, FD_RUNTIME_VM_TRACE_STATIC_FOOTPRINT * FD_MAX_INSTRUCTION_STACK_DEPTH ) :
123 0 : NULL;
124 :
125 : /* Prepare borrowed account table (correctly handles aliasing) */
126 :
127 0 : if( FD_UNLIKELY( test_ctx->accounts_count > MAX_TX_ACCOUNT_LOCKS ) ) {
128 0 : FD_LOG_ERR(( "invariant violation: too many accounts (%lu > %lu)",
129 0 : (ulong)test_ctx->accounts_count, (ulong)MAX_TX_ACCOUNT_LOCKS ));
130 0 : }
131 :
132 : /* Load accounts from input */
133 :
134 : /* Mimic Agave's mock_compile_message: put the program + referenced
135 : instruction accounts in the first txn slots, the rest after. */
136 0 : uchar account_in_message[ MAX_TX_ACCOUNT_LOCKS ] = {0};
137 0 : uint input_txn_idx [ MAX_TX_ACCOUNT_LOCKS ];
138 :
139 0 : for( ulong i=0UL; i<test_ctx->instr_accounts_count; i++ ) {
140 0 : uint index = test_ctx->instr_accounts[ i ].index;
141 0 : if( FD_UNLIKELY( index>=test_ctx->accounts_count ) ) {
142 0 : FD_LOG_ERR(( "invariant violation: instruction account index out of range (%u >= %u)",
143 0 : index, test_ctx->accounts_count ));
144 0 : }
145 0 : account_in_message[ index ] = 1;
146 0 : }
147 :
148 0 : ulong program_idx = ULONG_MAX;
149 0 : for( ulong i=0UL; i<test_ctx->accounts_count; i++ ) {
150 0 : if( !memcmp( test_ctx->accounts[ i ].address, test_ctx->program_id, sizeof(fd_pubkey_t) ) ) {
151 0 : account_in_message[ i ] = 1;
152 0 : program_idx = i;
153 0 : break;
154 0 : }
155 0 : }
156 :
157 : /* Ensure the program id is in the set of accounts */
158 0 : FD_TEST( program_idx!=ULONG_MAX );
159 :
160 : /* Compile the message by filling the transaction accounts with
161 : only accounts referenced by the instruction. */
162 0 : uint message_account_cnt = 0U;
163 0 : uint tail_txn_idx = test_ctx->accounts_count;
164 0 : for( ulong i=0UL; i<test_ctx->accounts_count; i++ ) {
165 0 : input_txn_idx[ i ] = account_in_message[ i ] ? message_account_cnt++ : --tail_txn_idx;
166 0 : }
167 :
168 0 : info->program_id = (uchar)input_txn_idx[ program_idx ];
169 0 : txn_out->accounts.cnt = message_account_cnt;
170 :
171 0 : for( ulong j=0UL; j < test_ctx->accounts_count; j++ ) {
172 0 : if( !account_in_message[j] ) continue;
173 :
174 0 : ulong txn_idx = input_txn_idx[j];
175 0 : fd_pubkey_t * acc_key = (fd_pubkey_t *)test_ctx->accounts[j].address;
176 :
177 0 : uint dlen = test_ctx->accounts[j].data ? test_ctx->accounts[j].data->size : 0U;
178 0 : uchar * data_buf = fd_spad_alloc( runner->spad, FD_ACCOUNT_REC_ALIGN, FD_RUNTIME_ACC_SZ_MAX );
179 0 : if( dlen ) {
180 0 : fd_memcpy( data_buf, test_ctx->accounts[j].data->bytes, dlen );
181 0 : }
182 :
183 : /* Initialize entry with in-memory account data (no DB backing) */
184 0 : fd_acc_t * acc = txn_out->accounts.account[txn_idx];
185 0 : memcpy( acc->pubkey, acc_key->key, 32 );
186 0 : memcpy( acc->owner, test_ctx->accounts[j].owner, 32 );
187 0 : acc->lamports = test_ctx->accounts[j].lamports;
188 0 : acc->executable = test_ctx->accounts[j].executable;
189 0 : acc->data_len = dlen;
190 0 : acc->data = data_buf;
191 0 : acc->_writable = 1;
192 0 : acc->commit = 0;
193 :
194 0 : txn_out->accounts.is_writable[txn_idx] = 1U;
195 0 : runtime->accounts.refcnt[txn_idx] = 0UL;
196 0 : txn_out->accounts.keys[txn_idx] = *acc_key;
197 0 : }
198 :
199 : /* Load in executable accounts */
200 0 : for( ulong i=0UL; i<test_ctx->accounts_count; i++ ) {
201 0 : fd_exec_test_acct_state_t const * prog = &test_ctx->accounts[i];
202 0 : fd_pubkey_t const * owner = fd_type_pun_const( prog->owner );
203 :
204 0 : if( !fd_executor_pubkey_is_bpf_loader( owner ) ) {
205 0 : continue;
206 0 : }
207 :
208 0 : if( FD_UNLIKELY( !memcmp( owner, fd_solana_bpf_loader_upgradeable_program_id.key, sizeof(fd_pubkey_t) ) ) ) {
209 0 : if( FD_UNLIKELY( !prog->data ) ) continue;
210 :
211 0 : fd_bpf_state_t program_loader_state[1];
212 0 : int err = fd_bpf_loader_program_get_state2( prog->data->bytes, prog->data->size, program_loader_state );
213 0 : if( FD_UNLIKELY( err!=FD_EXECUTOR_INSTR_SUCCESS ) ) {
214 0 : continue;
215 0 : }
216 :
217 0 : if( program_loader_state->discriminant!=FD_BPF_STATE_PROGRAM ) {
218 0 : continue;
219 0 : }
220 :
221 0 : fd_pubkey_t * programdata_acc = &program_loader_state->inner.program.programdata_address;
222 :
223 0 : fd_exec_test_acct_state_t const * pd = NULL;
224 0 : for( ulong j=0UL; j<test_ctx->accounts_count; j++ ) {
225 0 : if( !memcmp( test_ctx->accounts[j].address, programdata_acc, sizeof(fd_pubkey_t) ) ) {
226 0 : pd = &test_ctx->accounts[j];
227 0 : break;
228 0 : }
229 0 : }
230 0 : if( FD_UNLIKELY( pd==NULL || !pd->data ) ) {
231 0 : continue;
232 0 : }
233 :
234 0 : FD_TEST( txn_out->accounts.executable_cnt < MAX_TX_ACCOUNT_LOCKS );
235 0 : fd_acc_t * exe = txn_out->accounts.executable[ txn_out->accounts.executable_cnt ];
236 0 : memcpy( exe->pubkey, programdata_acc->key, 32 );
237 0 : memcpy( exe->owner, pd->owner, sizeof(fd_pubkey_t) );
238 : /* Agave loads a program into its ProgramCache from the
239 : programdata bytes independently of the on-chain lamports
240 : snapshot. An instruction fixture may capture a programdata
241 : account with zero lamports (a real 0-lamport account would
242 : otherwise have all its other fields cleared between
243 : transactions), and still expect the program to execute. The
244 : runtime treats an executable account as "deployed" only when it
245 : exists, so present the programdata as existing whenever it
246 : carries program data. This executable account is read-only on
247 : the invoke path and its lamports are never consumed, only used
248 : as an existence gate. */
249 0 : exe->lamports = ( !pd->lamports && pd->data->size ) ? 1UL : pd->lamports;
250 0 : exe->executable = pd->executable;
251 0 : exe->data_len = pd->data->size;
252 0 : exe->data = (uchar *)pd->data->bytes;
253 0 : txn_out->accounts.executable_cnt++;
254 0 : }
255 0 : }
256 :
257 : /* Load instruction accounts */
258 :
259 0 : if( FD_UNLIKELY( test_ctx->instr_accounts_count > FD_TXN_INSTR_ACCT_MAX ) ) {
260 0 : FD_LOG_ERR(( "invariant violation: too many instruction accounts (%lu > %lu)",
261 0 : (ulong)test_ctx->instr_accounts_count, (ulong)FD_TXN_INSTR_ACCT_MAX ));
262 0 : }
263 :
264 : /* Restore sysvar cache */
265 0 : fd_sysvar_cache_t * sysvar_cache = &runner->bank->f.sysvar_cache;
266 0 : ctx->sysvar_cache = sysvar_cache;
267 0 : for( ulong i=0UL; i<test_ctx->accounts_count; i++ ) {
268 0 : fd_exec_test_acct_state_t const * account = &test_ctx->accounts[i];
269 0 : if( FD_UNLIKELY( !account->data ) ) continue;
270 :
271 0 : fd_pubkey_t const * address = fd_type_pun_const( account->address );
272 0 : fd_sysvar_cache_restore_one( sysvar_cache,
273 0 : address,
274 0 : account->lamports,
275 0 : account->data->bytes,
276 0 : account->data->size );
277 0 : }
278 :
279 0 : ctx->runtime = runtime;
280 :
281 0 : fd_sol_sysvar_clock_t clock_[1];
282 0 : fd_sol_sysvar_clock_t * clock = fd_sysvar_cache_clock_read( ctx->sysvar_cache, clock_ );
283 0 : FD_TEST( clock );
284 0 : runner->bank->f.slot = clock->slot;
285 :
286 0 : runner->bank->progcache_fork_id = fd_progcache_attach_child( runner->progcache->join, runner->bank->progcache_fork_id );
287 :
288 0 : fd_epoch_schedule_t epoch_schedule_[1];
289 0 : fd_epoch_schedule_t * epoch_schedule = fd_sysvar_cache_epoch_schedule_read( ctx->sysvar_cache, epoch_schedule_ );
290 0 : FD_TEST( epoch_schedule );
291 0 : runner->bank->f.epoch_schedule = *epoch_schedule;
292 :
293 0 : fd_rent_t rent_[1];
294 0 : fd_rent_t * rent = fd_sysvar_cache_rent_read( ctx->sysvar_cache, rent_ );
295 0 : FD_TEST( rent );
296 0 : runner->bank->f.rent = *rent;
297 :
298 0 : if( !fd_sysvar_cache_recent_hashes_is_empty( sysvar_cache ) ) {
299 0 : uchar const * rbh_data = sysvar_cache->bin_recent_hashes;
300 0 : ulong rbh_len = FD_LOAD( ulong, rbh_data );
301 0 : ulong entry_off = sizeof(ulong) + ((rbh_len - 1UL) * 40UL);
302 0 : uchar const * entry = rbh_data + entry_off;
303 0 : FD_TEST( entry_off+40UL <= sysvar_cache->desc[ FD_SYSVAR_recent_hashes_IDX ].data_sz );
304 :
305 0 : fd_blockhashes_t * blockhashes = &runner->bank->f.block_hash_queue;
306 0 : fd_blockhashes_pop_new( blockhashes );
307 0 : fd_hash_t hash = FD_LOAD( fd_hash_t, entry );
308 0 : fd_blockhash_info_t * info = fd_blockhashes_push_new( blockhashes, &hash );
309 0 : info->lamports_per_signature = runner->bank->f.rbh_lamports_per_sig =
310 0 : FD_LOAD( ulong, entry+32UL );
311 0 : }
312 :
313 : /* Agave compiles the instruction into a message, OR-ing duplicate
314 : accounts' writable/signer flags. */
315 0 : uchar instr_is_writable[ FD_TXN_ACCT_ADDR_MAX ] = {0};
316 0 : uchar instr_is_signer [ FD_TXN_ACCT_ADDR_MAX ] = {0};
317 0 : int bpf_upgradeable_present = !memcmp( test_ctx->program_id, fd_solana_bpf_loader_upgradeable_program_id.key, sizeof(fd_pubkey_t) );
318 0 : for( ulong j=0UL; j < test_ctx->instr_accounts_count; j++ ) {
319 0 : uint index = test_ctx->instr_accounts[j].index;
320 :
321 0 : instr_is_writable[index] = (uchar)( instr_is_writable[index] | test_ctx->instr_accounts[j].is_writable );
322 0 : instr_is_signer[index] = (uchar)( instr_is_signer[index] | test_ctx->instr_accounts[j].is_signer );
323 0 : if( !memcmp( test_ctx->accounts[index].address, fd_solana_bpf_loader_upgradeable_program_id.key, sizeof(fd_pubkey_t) ) ) {
324 0 : bpf_upgradeable_present = 1;
325 0 : }
326 0 : }
327 :
328 0 : uchar acc_idx_seen[ FD_TXN_ACCT_ADDR_MAX ] = {0};
329 0 : for( ulong j=0UL; j < test_ctx->instr_accounts_count; j++ ) {
330 0 : uint index = test_ctx->instr_accounts[j].index;
331 :
332 : /* A program account is demoted to read-only unless the upgradeable
333 : loader is present. */
334 0 : uchar is_writable = instr_is_writable[index];
335 0 : if( !bpf_upgradeable_present && !memcmp( test_ctx->accounts[index].address, test_ctx->program_id, sizeof(fd_pubkey_t) ) ) {
336 0 : is_writable = 0;
337 0 : }
338 :
339 : /* Setup instruction accounts */
340 0 : fd_instr_info_setup_instr_account( info,
341 0 : acc_idx_seen,
342 0 : (ushort)input_txn_idx[index],
343 0 : (ushort)j,
344 0 : (ushort)j,
345 0 : is_writable,
346 0 : instr_is_signer[index] );
347 0 : }
348 0 : info->acct_cnt = (ushort)test_ctx->instr_accounts_count;
349 :
350 0 : ctx->instr = info;
351 0 : ctx->runtime->progcache = runner->progcache;
352 0 : ctx->runtime->accdb = runner->accdb;
353 :
354 0 : runtime->log.enable_log_collector = 0;
355 :
356 0 : fd_log_collector_init( ctx->runtime->log.log_collector, 0 );
357 0 : fd_base58_encode_32( txn_out->accounts.keys[ ctx->instr->program_id ].uc, NULL, ctx->program_id_base58 );
358 0 : }
359 :
360 : void
361 : fd_solfuzz_pb_instr_ctx_destroy( fd_solfuzz_runner_t * runner,
362 0 : fd_exec_instr_ctx_t * ctx ) {
363 0 : if( !ctx ) return;
364 :
365 0 : fd_progcache_reset( runner->progcache->join );
366 :
367 : /* Purge the fork attached in ctx_create so the accdb fork pool slot
368 : is released back for reuse. Without this, repeated harness
369 : invocations (e.g. under a fuzzer) exhaust max_live_slots. */
370 0 : fd_accdb_purge( runner->accdb, runner->bank->accdb_fork_id );
371 0 : int charge_busy = 0;
372 0 : fd_accdb_background( runner->accdb, &charge_busy );
373 :
374 : /* Compact the progcache allocator so empty superblocks are returned
375 : to the workspace. Required for the leak check to pass. */
376 0 : fd_alloc_compact( runner->progcache->join->alloc );
377 0 : }
378 :
379 : /* Txn index for addr among the compiled-message accounts [0,cnt).
380 : Returns ULONG_MAX if not found. */
381 : static ulong
382 0 : instr_harness_idx_of( fd_txn_out_t const * txn_out, uchar const * addr ) {
383 0 : for( ulong i=0UL; i<txn_out->accounts.cnt; i++ ) {
384 0 : if( !memcmp( txn_out->accounts.keys[i].key, addr, sizeof(fd_pubkey_t) ) ) return i;
385 0 : }
386 0 : return ULONG_MAX;
387 0 : }
388 :
389 : ulong
390 : fd_solfuzz_pb_instr_run( fd_solfuzz_runner_t * runner,
391 : void const * input_,
392 : void ** output_,
393 : void * output_buf,
394 0 : ulong output_bufsz ) {
395 0 : fd_exec_test_instr_context_t const * input = fd_type_pun_const( input_ );
396 0 : fd_exec_test_instr_effects_t ** output = fd_type_pun( output_ );
397 :
398 : /* Convert the Protobuf inputs to a fd_exec context */
399 0 : fd_exec_instr_ctx_t ctx[1];
400 0 : fd_solfuzz_pb_instr_ctx_create( runner, ctx, input );
401 :
402 0 : fd_instr_info_t * instr = (fd_instr_info_t *) ctx->instr;
403 :
404 : /* Execute the test */
405 0 : int exec_result = fd_execute_instr( ctx->runtime, runner->bank, ctx->txn_in, ctx->txn_out, instr );
406 :
407 : /* Allocate space to capture outputs */
408 0 : ulong output_end = (ulong)output_buf + output_bufsz;
409 0 : FD_SCRATCH_ALLOC_INIT( l, output_buf );
410 :
411 0 : fd_exec_test_instr_effects_t * effects =
412 0 : FD_SCRATCH_ALLOC_APPEND( l, alignof(fd_exec_test_instr_effects_t),
413 0 : sizeof (fd_exec_test_instr_effects_t) );
414 0 : if( FD_UNLIKELY( _l > output_end ) ) {
415 0 : fd_solfuzz_pb_instr_ctx_destroy( runner, ctx );
416 0 : return 0UL;
417 0 : }
418 0 : fd_memset( effects, 0, sizeof(fd_exec_test_instr_effects_t) );
419 :
420 : /* Capture error code */
421 :
422 0 : effects->result = -exec_result;
423 0 : effects->cu_avail = ctx->txn_out->details.compute_budget.compute_meter;
424 :
425 : /* Don't capture custom error codes if the program is a precompile */
426 0 : if( FD_LIKELY( effects->result ) ) {
427 0 : int program_id_idx = ctx->instr[ 0UL ].program_id;
428 0 : if( exec_result==FD_EXECUTOR_INSTR_ERR_CUSTOM_ERR &&
429 0 : fd_executor_lookup_native_precompile_program( &ctx->txn_out->accounts.keys[ program_id_idx ] )==NULL ) {
430 0 : effects->custom_err = ctx->txn_out->err.custom_err;
431 0 : }
432 0 : }
433 :
434 : /* Allocate space for captured accounts */
435 0 : ulong modified_acct_cnt = input->accounts_count;
436 :
437 0 : fd_exec_test_acct_state_t * modified_accts =
438 0 : FD_SCRATCH_ALLOC_APPEND( l, alignof(fd_exec_test_acct_state_t),
439 0 : sizeof (fd_exec_test_acct_state_t) * modified_acct_cnt );
440 0 : if( FD_UNLIKELY( _l > output_end ) ) {
441 0 : fd_solfuzz_pb_instr_ctx_destroy( runner, ctx );
442 0 : return 0;
443 0 : }
444 0 : effects->modified_accounts = modified_accts;
445 0 : effects->modified_accounts_count = 0UL;
446 :
447 : /* Capture any accounts which may have changed */
448 :
449 0 : for( ulong j=0UL; j < input->accounts_count; j++ ) {
450 0 : fd_exec_test_acct_state_t const * in_acct = &input->accounts[j];
451 :
452 0 : ulong lamports;
453 0 : uchar const * data;
454 0 : ulong data_len;
455 0 : int executable;
456 0 : uchar const * owner;
457 :
458 : /* Capture the account from the message in case it was modified,
459 : or just report the input account otherwise. */
460 0 : ulong txn_idx = instr_harness_idx_of( ctx->txn_out, in_acct->address );
461 0 : if( txn_idx!=ULONG_MAX ) {
462 0 : fd_acc_t const * acc = ctx->txn_out->accounts.account[txn_idx];
463 0 : lamports = acc->lamports;
464 0 : data = acc->data;
465 0 : data_len = acc->data_len;
466 0 : executable = acc->executable;
467 0 : owner = acc->owner;
468 0 : } else {
469 0 : lamports = in_acct->lamports;
470 0 : data = in_acct->data ? in_acct->data->bytes : NULL;
471 0 : data_len = in_acct->data ? in_acct->data->size : 0UL;
472 0 : executable = in_acct->executable;
473 0 : owner = in_acct->owner;
474 0 : }
475 :
476 0 : ulong modified_idx = effects->modified_accounts_count;
477 0 : if( FD_UNLIKELY( modified_idx >= modified_acct_cnt ) ) {
478 0 : FD_LOG_CRIT(( "invalid modified account index" ));
479 0 : }
480 :
481 0 : fd_exec_test_acct_state_t * out_acct = &effects->modified_accounts[ modified_idx ];
482 0 : memset( out_acct, 0, sizeof(fd_exec_test_acct_state_t) );
483 :
484 : /* Copy over account content */
485 0 : memcpy( out_acct->address, in_acct->address, sizeof(fd_pubkey_t) );
486 0 : out_acct->lamports = lamports;
487 0 : if( data_len>0UL ) {
488 0 : out_acct->data =
489 0 : FD_SCRATCH_ALLOC_APPEND( l, alignof(pb_bytes_array_t),
490 0 : PB_BYTES_ARRAY_T_ALLOCSIZE( data_len ) );
491 0 : if( FD_UNLIKELY( _l > output_end ) ) {
492 0 : fd_solfuzz_pb_instr_ctx_destroy( runner, ctx );
493 0 : return 0UL;
494 0 : }
495 0 : out_acct->data->size = (pb_size_t)data_len;
496 0 : fd_memcpy( out_acct->data->bytes, data, data_len );
497 0 : }
498 :
499 0 : out_acct->executable = executable;
500 0 : memcpy( out_acct->owner, owner, sizeof(fd_pubkey_t) );
501 :
502 0 : effects->modified_accounts_count++;
503 0 : }
504 :
505 0 : fd_solfuzz_direct_mapping_handle_cu_exhaustion(
506 0 : runner, effects->cu_avail, effects->result,
507 0 : effects->modified_accounts, (pb_size_t)effects->modified_accounts_count );
508 :
509 : /* Capture return data */
510 0 : fd_txn_return_data_t * return_data = &ctx->txn_out->details.return_data;
511 0 : if( return_data->len>0UL ) {
512 0 : effects->return_data = FD_SCRATCH_ALLOC_APPEND(l, alignof(pb_bytes_array_t),
513 0 : PB_BYTES_ARRAY_T_ALLOCSIZE( return_data->len ) );
514 0 : if( FD_UNLIKELY( _l > output_end ) ) {
515 0 : fd_solfuzz_pb_instr_ctx_destroy( runner, ctx );
516 0 : return 0UL;
517 0 : }
518 0 : effects->return_data->size = (pb_size_t)return_data->len;
519 0 : fd_memcpy( effects->return_data->bytes, return_data->data, return_data->len );
520 0 : }
521 :
522 0 : ulong actual_end = FD_SCRATCH_ALLOC_FINI( l, 1UL );
523 0 : fd_solfuzz_pb_instr_ctx_destroy( runner, ctx );
524 :
525 0 : *output = effects;
526 0 : return actual_end - (ulong)output_buf;
527 0 : }
|
