Line data Source code
1 : #include "fd_vm_syscall.h"
2 :
3 : #include "../../../ballet/bn254/fd_bn254.h"
4 : #include "../../../ballet/bn254/fd_poseidon.h"
5 : #include "../../../ballet/secp256k1/fd_secp256k1.h"
6 : #include "../../runtime/fd_bank.h"
7 :
8 : int
9 : fd_vm_syscall_sol_alt_bn128_group_op( void * _vm,
10 : ulong group_op,
11 : ulong input_addr,
12 : ulong input_sz,
13 : ulong result_addr,
14 0 : FD_PARAM_UNUSED ulong r5 ) {
15 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1509 */
16 0 : fd_vm_t * vm = (fd_vm_t *)_vm;
17 0 : ulong ret = 1UL; /* by default return Ok(1) == error */
18 :
19 : /* G1/pairing little endian syscalls are under feature gate alt_bn128_little_endian.
20 : To clean up the feature gate after activation, just remove this block
21 : (the rest of the function will behave correctly). */
22 0 : {
23 0 : if( FD_UNLIKELY(
24 0 : !FD_FEATURE_ACTIVE_BANK( vm->instr_ctx->bank, alt_bn128_little_endian )
25 0 : && ( group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G1_ADD_LE
26 0 : || group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G1_MUL_LE
27 0 : || group_op==FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_LE )
28 0 : ) ) {
29 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE );
30 0 : return FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE; /* SyscallError::InvalidAttribute */
31 0 : }
32 0 : }
33 :
34 : /* G2 syscalls are under feature gate enable_alt_bn128_g2_syscalls.
35 : To clean up the feature gate after activation, just remove this block
36 : (the rest of the function will behave correctly). */
37 0 : {
38 0 : if( FD_UNLIKELY(
39 0 : !FD_FEATURE_ACTIVE_BANK( vm->instr_ctx->bank, enable_alt_bn128_g2_syscalls )
40 0 : && ( group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_BE
41 0 : || group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_LE
42 0 : || group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_BE
43 0 : || group_op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_LE )
44 0 : ) ) {
45 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE );
46 0 : return FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE; /* SyscallError::InvalidAttribute */
47 0 : }
48 0 : }
49 :
50 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1520-L1549 */
51 0 : ulong cost = 0UL;
52 0 : ulong output_sz = 0UL;
53 0 : switch( group_op ) {
54 :
55 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_ADD_BE:
56 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_ADD_LE:
57 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G1_SZ;
58 0 : cost = FD_VM_ALT_BN128_G1_ADDITION_COST;
59 0 : break;
60 :
61 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_MUL_BE:
62 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_MUL_LE:
63 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G1_SZ;
64 0 : cost = FD_VM_ALT_BN128_G1_MULTIPLICATION_COST;
65 0 : break;
66 :
67 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_BE:
68 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_LE:
69 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G2_SZ;
70 0 : cost = FD_VM_ALT_BN128_G2_ADDITION_COST;
71 0 : break;
72 :
73 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_BE:
74 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_LE:
75 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G2_SZ;
76 0 : cost = FD_VM_ALT_BN128_G2_MULTIPLICATION_COST;
77 0 : break;
78 :
79 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_BE:
80 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_LE:
81 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_OUTPUT_SZ;
82 0 : ulong elements_len = input_sz / FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_INPUT_EL_SZ;
83 0 : cost = FD_VM_ALT_BN128_PAIRING_ONE_PAIR_COST_FIRST
84 0 : + FD_VM_SHA256_BASE_COST
85 0 : + FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_OUTPUT_SZ;
86 0 : cost = fd_ulong_sat_add( cost,
87 0 : fd_ulong_sat_mul( FD_VM_ALT_BN128_PAIRING_ONE_PAIR_COST_OTHER,
88 0 : fd_ulong_sat_sub( elements_len, 1 ) ) );
89 0 : cost = fd_ulong_sat_add( cost, input_sz );
90 0 : break;
91 :
92 0 : default:
93 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE );
94 0 : return FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE; /* SyscallError::InvalidAttribute */
95 0 : }
96 :
97 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1551 */
98 :
99 0 : FD_VM_CU_UPDATE( vm, cost );
100 :
101 0 : uchar * call_result = FD_VM_HADDR_QUERY_U8_SLICE( vm, result_addr, output_sz );
102 0 : uchar const * input = FD_VM_MEM_SLICE_HADDR_LD( vm, input_addr, FD_VM_ALIGN_RUST_U8, input_sz );
103 :
104 0 : int big_endian = ( group_op & FD_VM_SYSCALL_SOL_ALT_BN128_LITTLE_ENDIAN_FLAG ) ? 0 : 1;
105 :
106 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1567-L1598
107 : Note: this implementation is post SIMD-0129, we only support the simplified error codes. */
108 0 : switch( group_op ) {
109 :
110 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_ADD_BE:
111 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_ADD_LE:
112 : /* Compute add */
113 0 : if( FD_LIKELY( fd_bn254_g1_add_syscall( call_result, input, input_sz, big_endian )==0 ) ) {
114 0 : ret = 0UL; /* success */
115 0 : }
116 0 : break;
117 :
118 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_MUL_BE:
119 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_MUL_LE:
120 : /* Compute scalar mul */
121 0 : if( FD_LIKELY( fd_bn254_g1_scalar_mul_syscall( call_result, input, input_sz, big_endian )==0 ) ) {
122 0 : ret = 0UL; /* success */
123 0 : }
124 0 : break;
125 :
126 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_BE:
127 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_ADD_LE:
128 : /* Compute add */
129 0 : if( FD_LIKELY( fd_bn254_g2_add_syscall( call_result, input, input_sz, big_endian )==0 ) ) {
130 0 : ret = 0UL; /* success */
131 0 : }
132 0 : break;
133 :
134 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_BE:
135 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_MUL_LE:
136 : /* Compute scalar mul */
137 0 : if( FD_LIKELY( fd_bn254_g2_scalar_mul_syscall( call_result, input, input_sz, big_endian )==0 ) ) {
138 0 : ret = 0UL; /* success */
139 0 : }
140 0 : break;
141 :
142 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_BE:
143 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_PAIRING_LE:
144 : /* Compute pairing, always checking that input length is a multiple of 192.
145 : https://github.com/anza-xyz/solana-sdk/blob/bn254%40v3.1.2/bn254/src/pairing.rs#L76-L82 */
146 0 : if( FD_LIKELY( fd_bn254_pairing_is_one_syscall( call_result, input, input_sz, big_endian )==0 ) ) {
147 0 : ret = 0UL; /* success */
148 0 : }
149 0 : break;
150 0 : }
151 :
152 0 : vm->reg[0] = ret;
153 0 : return FD_VM_SUCCESS; /* Ok(SUCCESS) or Ok(ERROR) */
154 0 : }
155 :
156 : int
157 : fd_vm_syscall_sol_alt_bn128_compression( void * _vm,
158 : ulong op,
159 : ulong input_addr,
160 : ulong input_sz,
161 : ulong result_addr,
162 0 : FD_PARAM_UNUSED ulong r5 ) {
163 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1776 */
164 0 : fd_vm_t * vm = (fd_vm_t *)_vm;
165 0 : ulong ret = 1UL; /* by default return Ok(1) == error */
166 :
167 : /* G1/G2 little endian syscalls are under feature gate alt_bn128_little_endian.
168 : To clean up the feature gate after activation, just remove this block
169 : (the rest of the function will behave correctly). */
170 0 : {
171 0 : if( FD_UNLIKELY(
172 0 : !FD_FEATURE_ACTIVE_BANK( vm->instr_ctx->bank, alt_bn128_little_endian )
173 0 : && ( op==FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESS_LE
174 0 : || op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESS_LE
175 0 : || op==FD_VM_SYSCALL_SOL_ALT_BN128_G1_DECOMPRESS_LE
176 0 : || op==FD_VM_SYSCALL_SOL_ALT_BN128_G2_DECOMPRESS_LE )
177 0 : ) ) {
178 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE );
179 0 : return FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE; /* SyscallError::InvalidAttribute */
180 0 : }
181 0 : }
182 :
183 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1791-L1811 */
184 0 : ulong cost = 0UL;
185 0 : ulong output_sz = 0UL;
186 0 : switch( op ) {
187 :
188 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESS_BE:
189 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESS_LE:
190 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESSED_SZ;
191 0 : cost = FD_VM_ALT_BN128_G1_COMPRESS;
192 0 : break;
193 :
194 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_DECOMPRESS_BE:
195 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_DECOMPRESS_LE:
196 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G1_SZ;
197 0 : cost = FD_VM_ALT_BN128_G1_DECOMPRESS;
198 0 : break;
199 :
200 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESS_BE:
201 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESS_LE:
202 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESSED_SZ;
203 0 : cost = FD_VM_ALT_BN128_G2_COMPRESS;
204 0 : break;
205 :
206 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_DECOMPRESS_BE:
207 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_DECOMPRESS_LE:
208 0 : output_sz = FD_VM_SYSCALL_SOL_ALT_BN128_G2_SZ;
209 0 : cost = FD_VM_ALT_BN128_G2_DECOMPRESS;
210 0 : break;
211 :
212 0 : default:
213 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE );
214 0 : return FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE; /* SyscallError::InvalidAttribute */
215 0 : }
216 0 : cost = fd_ulong_sat_add( cost, FD_VM_SYSCALL_BASE_COST );
217 :
218 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1813 */
219 :
220 0 : FD_VM_CU_UPDATE( vm, cost );
221 :
222 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1815-L1827 */
223 :
224 0 : uchar * call_result = FD_VM_HADDR_QUERY_U8_SLICE( vm, result_addr, output_sz );
225 0 : void const * input = FD_VM_MEM_SLICE_HADDR_LD( vm, input_addr, FD_VM_ALIGN_RUST_U8, input_sz );
226 :
227 0 : int big_endian = ( op & FD_VM_SYSCALL_SOL_ALT_BN128_LITTLE_ENDIAN_FLAG ) ? 0 : 1;
228 :
229 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1829-L1891
230 : Note: this implementation is post SIMD-0129, we only support the simplified error codes. */
231 0 : switch( op ) {
232 :
233 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESS_BE:
234 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESS_LE:
235 0 : if( FD_UNLIKELY( input_sz!=FD_VM_SYSCALL_SOL_ALT_BN128_G1_SZ ) ) {
236 0 : goto soft_error;
237 0 : }
238 0 : if( FD_LIKELY( fd_bn254_g1_compress( call_result, fd_type_pun_const(input), big_endian ) ) ) {
239 0 : ret = 0UL; /* success */
240 0 : }
241 0 : break;
242 :
243 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_DECOMPRESS_BE:
244 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G1_DECOMPRESS_LE:
245 0 : if( FD_UNLIKELY( input_sz!=FD_VM_SYSCALL_SOL_ALT_BN128_G1_COMPRESSED_SZ ) ) {
246 0 : goto soft_error;
247 0 : }
248 0 : if( FD_LIKELY( fd_bn254_g1_decompress( call_result, fd_type_pun_const(input), big_endian ) ) ) {
249 0 : ret = 0UL; /* success */
250 0 : }
251 0 : break;
252 :
253 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESS_BE:
254 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESS_LE:
255 0 : if( FD_UNLIKELY( input_sz!=FD_VM_SYSCALL_SOL_ALT_BN128_G2_SZ ) ) {
256 0 : goto soft_error;
257 0 : }
258 0 : if( FD_LIKELY( fd_bn254_g2_compress( call_result, fd_type_pun_const(input), big_endian ) ) ) {
259 0 : ret = 0UL; /* success */
260 0 : }
261 0 : break;
262 :
263 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_DECOMPRESS_BE:
264 0 : case FD_VM_SYSCALL_SOL_ALT_BN128_G2_DECOMPRESS_LE:
265 0 : if( FD_UNLIKELY( input_sz!=FD_VM_SYSCALL_SOL_ALT_BN128_G2_COMPRESSED_SZ ) ) {
266 0 : goto soft_error;
267 0 : }
268 0 : if( FD_LIKELY( fd_bn254_g2_decompress( call_result, fd_type_pun_const(input), big_endian ) ) ) {
269 0 : ret = 0UL; /* success */
270 0 : }
271 0 : break;
272 0 : }
273 :
274 0 : soft_error:
275 0 : vm->reg[0] = ret;
276 0 : return FD_VM_SUCCESS; /* Ok(SUCCESS) or Ok(ERROR) */
277 0 : }
278 :
279 : int
280 : fd_vm_syscall_sol_poseidon( void * _vm,
281 : ulong params,
282 : ulong endianness,
283 : ulong vals_addr,
284 : ulong vals_len,
285 0 : ulong result_addr ) {
286 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1678 */
287 0 : fd_vm_t * vm = (fd_vm_t *)_vm;
288 0 : ulong ret = 1UL; /* by default return Ok(1) == error */
289 :
290 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1688 */
291 :
292 0 : if( FD_UNLIKELY( params!=0UL ) ) {
293 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_POSEIDON_INVALID_PARAMS );
294 0 : return FD_VM_SYSCALL_ERR_POSEIDON_INVALID_PARAMS; /* PoseidonSyscallError::InvalidParameters */
295 0 : }
296 :
297 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1689 */
298 :
299 0 : if( FD_UNLIKELY(
300 0 : endianness!=0UL /* Big endian */
301 0 : && endianness!=1UL /* Little endian */
302 0 : ) ) {
303 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_POSEIDON_INVALID_ENDIANNESS );
304 0 : return FD_VM_SYSCALL_ERR_POSEIDON_INVALID_ENDIANNESS; /* PoseidonSyscallError::InvalidEndianness */
305 0 : }
306 :
307 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1691-L1698 */
308 :
309 0 : if( FD_UNLIKELY( vals_len > FD_VM_SYSCALL_SOL_POSEIDON_MAX_VALS ) ) {
310 : /* Max msg_sz = 47 - 3 + 20 = 64 < 127 => we can use printf */
311 0 : fd_log_collector_printf_dangerous_max_127( vm->instr_ctx,
312 0 : "Poseidon hashing %lu sequences is not supported", vals_len );
313 0 : FD_VM_ERR_FOR_LOG_SYSCALL( vm, FD_VM_SYSCALL_ERR_INVALID_LENGTH );
314 0 : return FD_VM_SYSCALL_ERR_INVALID_LENGTH; /* SyscallError::InvalidLength */
315 0 : }
316 :
317 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1700-L1707
318 : poseidon_cost(): https://github.com/solana-labs/solana/blob/v1.18.12/program-runtime/src/compute_budget.rs#L211 */
319 :
320 : /* vals_len^2 * A + C */
321 0 : ulong cost = fd_ulong_sat_add(
322 0 : fd_ulong_sat_mul(
323 0 : fd_ulong_sat_mul( vals_len, vals_len ),
324 0 : FD_VM_POSEIDON_COST_COEFFICIENT_A
325 0 : ),
326 0 : FD_VM_POSEIDON_COST_COEFFICIENT_C
327 0 : );
328 :
329 : /* The following can never happen, left as comment for completeness.
330 : if( FD_UNLIKELY( cost == ULONG_MAX ) ) {
331 : fd_vm_log_append_printf( vm, "Overflow while calculating the compute cost" );
332 : return FD_VM_SYSCALL_ERR_ARITHMETIC_OVERFLOW; // SyscallError::ArithmeticOverflow
333 : }
334 : */
335 :
336 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1708 */
337 :
338 0 : FD_VM_CU_UPDATE( vm, cost );
339 :
340 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1710-L1715 */
341 :
342 0 : uchar * hash_result = FD_VM_HADDR_QUERY_U8_SLICE( vm, result_addr, 32UL );
343 :
344 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1716-L1732 */
345 :
346 : /* Agave allocates a vector of translated slices (that can return a fatal
347 : error), and then computes Poseidon, returning a soft error in case of
348 : issues (e.g. invalid input).
349 :
350 : We must be careful in returning the correct fatal vs soft error.
351 :
352 : The special case of vals_len==0 returns Ok(1), so for simplicity
353 : we capture it explicitly. */
354 :
355 0 : if( FD_UNLIKELY( !vals_len ) ) {
356 0 : goto soft_error;
357 0 : }
358 :
359 : /* First loop to memory map. This can return a fatal error. */
360 0 : fd_vm_vec_t const * input_vec_haddr = (fd_vm_vec_t const *)FD_VM_MEM_HADDR_LD( vm, vals_addr, FD_VM_VEC_ALIGN, vals_len*sizeof(fd_vm_vec_t) );
361 0 : void const * inputs_haddr[ FD_VM_SYSCALL_SOL_POSEIDON_MAX_VALS ];
362 0 : for( ulong i=0UL; i<vals_len; i++ ) {
363 0 : inputs_haddr[i] = FD_VM_MEM_SLICE_HADDR_LD( vm, input_vec_haddr[i].addr, FD_VM_ALIGN_RUST_U8, input_vec_haddr[i].len );
364 0 : }
365 :
366 : /* https://github.com/anza-xyz/agave/blob/v1.18.12/programs/bpf_loader/src/syscalls/mod.rs#L1734-L1750
367 : Note: this implementation is post SIMD-0129, we only support the simplified error codes. */
368 :
369 : /* Second loop to computed Poseidon. This can return a soft error. */
370 0 : int big_endian = endianness==0;
371 0 : fd_poseidon_t pos[1];
372 0 : fd_poseidon_init( pos, big_endian );
373 :
374 0 : for( ulong i=0UL; i<vals_len; i++ ) {
375 0 : if( FD_UNLIKELY( fd_poseidon_append( pos, inputs_haddr[ i ], input_vec_haddr[i].len )==NULL ) ) {
376 0 : goto soft_error;
377 0 : }
378 0 : }
379 :
380 0 : ret = !fd_poseidon_fini( pos, hash_result );
381 :
382 0 : soft_error:
383 0 : vm->reg[0] = ret;
384 0 : return FD_VM_SUCCESS; /* Ok(1) == error */
385 0 : }
386 :
387 : int
388 : fd_vm_syscall_sol_secp256k1_recover( /**/ void * _vm,
389 : /**/ ulong hash_vaddr,
390 : /**/ ulong recovery_id_val,
391 : /**/ ulong signature_vaddr,
392 : /**/ ulong result_vaddr,
393 0 : FD_PARAM_UNUSED ulong r5 ) {
394 : /* https://github.com/anza-xyz/agave/blob/v1.18.8/programs/bpf_loader/src/syscalls/mod.rs#L810 */
395 0 : fd_vm_t * vm = (fd_vm_t *)_vm;
396 :
397 : /* https://github.com/anza-xyz/agave/blob/v1.18.8/programs/bpf_loader/src/syscalls/mod.rs#L820-L821 */
398 :
399 0 : FD_VM_CU_UPDATE( vm, FD_VM_SECP256K1_RECOVER_COST );
400 :
401 : /* https://github.com/anza-xyz/agave/blob/v2.3.1/programs/bpf_loader/src/syscalls/mod.rs#L957-L968 */
402 :
403 0 : uchar * pubkey_result = FD_VM_HADDR_QUERY_U8_SLICE( vm, result_vaddr, 64UL );
404 0 : uchar const * hash = FD_VM_MEM_HADDR_LD( vm, hash_vaddr, FD_VM_ALIGN_RUST_U8, 32UL );
405 0 : uchar const * sig = FD_VM_MEM_HADDR_LD( vm, signature_vaddr, FD_VM_ALIGN_RUST_U8, 64UL );
406 :
407 : /* CRITICAL */
408 :
409 : /* https://github.com/anza-xyz/agave/blob/v1.18.8/programs/bpf_loader/src/syscalls/mod.rs#L842-L853 */
410 :
411 : /* Secp256k1RecoverError::InvalidHash
412 : This can never happen, as `libsecp256k1::Message::parse_slice(hash)`
413 : only checks that hash is 32-byte long, and that's by construction.
414 : https://github.com/paritytech/libsecp256k1/blob/v0.6.0/src/lib.rs#L657-L665
415 :
416 : if( FD_UNLIKELY( 0 ) ) {
417 : vm->reg[0] = 1UL; // Secp256k1RecoverError::InvalidHash
418 : return FD_VM_SUCCESS;
419 : }
420 : */
421 :
422 : /* Secp256k1RecoverError::InvalidRecoveryId
423 : Agave code has 2 checks: the first is a cast from u64 to u8.
424 : The second is `libsecp256k1::RecoveryId::parse(adjusted_recover_id_val)` that
425 : checks if `adjusted_recover_id_val < 4`.
426 : https://github.com/paritytech/libsecp256k1/blob/v0.6.0/src/lib.rs#L674-L680
427 : */
428 :
429 0 : if( FD_UNLIKELY( recovery_id_val >= 4UL ) ) {
430 0 : vm->reg[0] = 2UL; /* Secp256k1RecoverError::InvalidRecoveryId */
431 0 : return FD_VM_SUCCESS;
432 0 : }
433 :
434 : /* Secp256k1RecoverError::InvalidSignature
435 : We omit this check, as this is done as part of fd_secp256k1_recover() below,
436 : and the return code is the same.
437 :
438 : In more details, this checks that the signature is valid, i.e. if the
439 : signature is represented as two scalars (r, s), it checks that both r
440 : and s are canonical scalars.
441 :
442 : Note the `?` at the end of this line:
443 : https://github.com/paritytech/libsecp256k1/blob/v0.6.0/src/lib.rs#L535
444 : And following the code, `scalar::check_overflow` is checks that the scalar is valid:
445 : https://github.com/paritytech/libsecp256k1/blob/master/core/src/scalar.rs#L70-L87 */
446 :
447 : /* https://github.com/anza-xyz/agave/blob/v1.18.8/programs/bpf_loader/src/syscalls/mod.rs#L855-L860 */
448 :
449 0 : uchar secp256k1_pubkey[64];
450 0 : if( FD_UNLIKELY( !fd_secp256k1_recover( secp256k1_pubkey, hash, sig, (int)recovery_id_val ) ) ) {
451 0 : vm->reg[0] = 3UL; /* Secp256k1RecoverError::InvalidSignature */
452 0 : return FD_VM_SUCCESS;
453 0 : }
454 :
455 0 : memcpy( pubkey_result, secp256k1_pubkey, 64UL );
456 :
457 0 : vm->reg[0] = 0UL;
458 0 : return FD_VM_SUCCESS;
459 0 : }
460 :
|
