2015-07-07 03:54:22 +03:00
|
|
|
// Copyright 2014 The go-ethereum Authors
|
2015-07-22 19:48:40 +03:00
|
|
|
// This file is part of the go-ethereum library.
|
2015-07-07 03:54:22 +03:00
|
|
|
//
|
2015-07-23 19:35:11 +03:00
|
|
|
// The go-ethereum library is free software: you can redistribute it and/or modify
|
2015-07-07 03:54:22 +03:00
|
|
|
// it under the terms of the GNU Lesser General Public License as published by
|
|
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
|
|
// (at your option) any later version.
|
|
|
|
//
|
2015-07-22 19:48:40 +03:00
|
|
|
// The go-ethereum library is distributed in the hope that it will be useful,
|
2015-07-07 03:54:22 +03:00
|
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-07-22 19:48:40 +03:00
|
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
2015-07-07 03:54:22 +03:00
|
|
|
// GNU Lesser General Public License for more details.
|
|
|
|
//
|
|
|
|
// You should have received a copy of the GNU Lesser General Public License
|
2015-07-22 19:48:40 +03:00
|
|
|
// along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
|
2015-07-07 03:54:22 +03:00
|
|
|
|
2014-10-18 14:31:20 +03:00
|
|
|
package vm
|
2014-10-08 13:01:36 +03:00
|
|
|
|
|
|
|
import (
|
2017-02-18 11:24:12 +03:00
|
|
|
"crypto/sha256"
|
common: move big integer math to common/math (#3699)
* common: remove CurrencyToString
Move denomination values to params instead.
* common: delete dead code
* common: move big integer operations to common/math
This commit consolidates all big integer operations into common/math and
adds tests and documentation.
There should be no change in semantics for BigPow, BigMin, BigMax, S256,
U256, Exp and their behaviour is now locked in by tests.
The BigD, BytesToBig and Bytes2Big functions don't provide additional
value, all uses are replaced by new(big.Int).SetBytes().
BigToBytes is now called PaddedBigBytes, its minimum output size
parameter is now specified as the number of bytes instead of bits. The
single use of this function is in the EVM's MSTORE instruction.
Big and String2Big are replaced by ParseBig, which is slightly stricter.
It previously accepted leading zeros for hexadecimal inputs but treated
decimal inputs as octal if a leading zero digit was present.
ParseUint64 is used in places where String2Big was used to decode a
uint64.
The new functions MustParseBig and MustParseUint64 are now used in many
places where parsing errors were previously ignored.
* common: delete unused big integer variables
* accounts/abi: replace uses of BytesToBig with use of encoding/binary
* common: remove BytesToBig
* common: remove Bytes2Big
* common: remove BigTrue
* cmd/utils: add BigFlag and use it for error-checked integer flags
While here, remove environment variable processing for DirectoryFlag
because we don't use it.
* core: add missing error checks in genesis block parser
* common: remove String2Big
* cmd/evm: use utils.BigFlag
* common/math: check for 256 bit overflow in ParseBig
This is supposed to prevent silent overflow/truncation of values in the
genesis block JSON. Without this check, a genesis block that set a
balance larger than 256 bits would lead to weird behaviour in the VM.
* cmd/utils: fixup import
2017-02-27 00:21:51 +03:00
|
|
|
"math/big"
|
2017-02-18 11:24:12 +03:00
|
|
|
|
2015-03-16 12:27:38 +02:00
|
|
|
"github.com/ethereum/go-ethereum/common"
|
2015-03-19 05:56:06 +02:00
|
|
|
"github.com/ethereum/go-ethereum/crypto"
|
2017-02-22 15:10:07 +03:00
|
|
|
"github.com/ethereum/go-ethereum/log"
|
2015-04-02 06:17:15 +03:00
|
|
|
"github.com/ethereum/go-ethereum/params"
|
2017-02-18 11:24:12 +03:00
|
|
|
"golang.org/x/crypto/ripemd160"
|
2014-10-08 13:01:36 +03:00
|
|
|
)
|
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
// Precompiled contract is the basic interface for native Go contracts. The implementation
|
|
|
|
// requires a deterministic gas count based on the input size of the Run method of the
|
|
|
|
// contract.
|
|
|
|
type PrecompiledContract interface {
|
2017-01-04 22:17:24 +03:00
|
|
|
RequiredGas(inputSize int) uint64 // RequiredPrice calculates the contract gas use
|
|
|
|
Run(input []byte) []byte // Run runs the precompiled contract
|
2014-10-08 13:01:36 +03:00
|
|
|
}
|
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
// Precompiled contains the default set of ethereum contracts
|
|
|
|
var PrecompiledContracts = map[common.Address]PrecompiledContract{
|
|
|
|
common.BytesToAddress([]byte{1}): &ecrecover{},
|
2017-02-18 11:24:12 +03:00
|
|
|
common.BytesToAddress([]byte{2}): &sha256hash{},
|
|
|
|
common.BytesToAddress([]byte{3}): &ripemd160hash{},
|
2017-01-05 13:52:10 +03:00
|
|
|
common.BytesToAddress([]byte{4}): &dataCopy{},
|
2014-10-08 13:01:36 +03:00
|
|
|
}
|
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
// RunPrecompile runs and evaluate the output of a precompiled contract defined in contracts.go
|
|
|
|
func RunPrecompiledContract(p PrecompiledContract, input []byte, contract *Contract) (ret []byte, err error) {
|
|
|
|
gas := p.RequiredGas(len(input))
|
|
|
|
if contract.UseGas(gas) {
|
|
|
|
ret = p.Run(input)
|
|
|
|
|
|
|
|
return ret, nil
|
|
|
|
} else {
|
|
|
|
return nil, ErrOutOfGas
|
2015-01-13 11:30:52 +02:00
|
|
|
}
|
2014-10-08 13:01:36 +03:00
|
|
|
}
|
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
// ECRECOVER implemented as a native contract
|
|
|
|
type ecrecover struct{}
|
2014-10-08 13:01:36 +03:00
|
|
|
|
2017-01-04 22:17:24 +03:00
|
|
|
func (c *ecrecover) RequiredGas(inputSize int) uint64 {
|
2017-01-05 13:52:10 +03:00
|
|
|
return params.EcrecoverGas
|
2014-10-08 13:01:36 +03:00
|
|
|
}
|
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
func (c *ecrecover) Run(in []byte) []byte {
|
|
|
|
const ecRecoverInputLength = 128
|
2014-10-08 13:01:36 +03:00
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
in = common.RightPadBytes(in, ecRecoverInputLength)
|
2015-06-09 16:41:15 +03:00
|
|
|
// "in" is (hash, v, r, s), each 32 bytes
|
|
|
|
// but for ecrecover we want (r, s, v)
|
2015-03-29 16:02:49 +03:00
|
|
|
|
common: move big integer math to common/math (#3699)
* common: remove CurrencyToString
Move denomination values to params instead.
* common: delete dead code
* common: move big integer operations to common/math
This commit consolidates all big integer operations into common/math and
adds tests and documentation.
There should be no change in semantics for BigPow, BigMin, BigMax, S256,
U256, Exp and their behaviour is now locked in by tests.
The BigD, BytesToBig and Bytes2Big functions don't provide additional
value, all uses are replaced by new(big.Int).SetBytes().
BigToBytes is now called PaddedBigBytes, its minimum output size
parameter is now specified as the number of bytes instead of bits. The
single use of this function is in the EVM's MSTORE instruction.
Big and String2Big are replaced by ParseBig, which is slightly stricter.
It previously accepted leading zeros for hexadecimal inputs but treated
decimal inputs as octal if a leading zero digit was present.
ParseUint64 is used in places where String2Big was used to decode a
uint64.
The new functions MustParseBig and MustParseUint64 are now used in many
places where parsing errors were previously ignored.
* common: delete unused big integer variables
* accounts/abi: replace uses of BytesToBig with use of encoding/binary
* common: remove BytesToBig
* common: remove Bytes2Big
* common: remove BigTrue
* cmd/utils: add BigFlag and use it for error-checked integer flags
While here, remove environment variable processing for DirectoryFlag
because we don't use it.
* core: add missing error checks in genesis block parser
* common: remove String2Big
* cmd/evm: use utils.BigFlag
* common/math: check for 256 bit overflow in ParseBig
This is supposed to prevent silent overflow/truncation of values in the
genesis block JSON. Without this check, a genesis block that set a
balance larger than 256 bits would lead to weird behaviour in the VM.
* cmd/utils: fixup import
2017-02-27 00:21:51 +03:00
|
|
|
r := new(big.Int).SetBytes(in[64:96])
|
|
|
|
s := new(big.Int).SetBytes(in[96:128])
|
2017-01-05 13:35:23 +03:00
|
|
|
v := in[63] - 27
|
2015-06-09 16:41:15 +03:00
|
|
|
|
2015-11-27 16:40:29 +02:00
|
|
|
// tighter sig s values in homestead only apply to tx sigs
|
common: move big integer math to common/math (#3699)
* common: remove CurrencyToString
Move denomination values to params instead.
* common: delete dead code
* common: move big integer operations to common/math
This commit consolidates all big integer operations into common/math and
adds tests and documentation.
There should be no change in semantics for BigPow, BigMin, BigMax, S256,
U256, Exp and their behaviour is now locked in by tests.
The BigD, BytesToBig and Bytes2Big functions don't provide additional
value, all uses are replaced by new(big.Int).SetBytes().
BigToBytes is now called PaddedBigBytes, its minimum output size
parameter is now specified as the number of bytes instead of bits. The
single use of this function is in the EVM's MSTORE instruction.
Big and String2Big are replaced by ParseBig, which is slightly stricter.
It previously accepted leading zeros for hexadecimal inputs but treated
decimal inputs as octal if a leading zero digit was present.
ParseUint64 is used in places where String2Big was used to decode a
uint64.
The new functions MustParseBig and MustParseUint64 are now used in many
places where parsing errors were previously ignored.
* common: delete unused big integer variables
* accounts/abi: replace uses of BytesToBig with use of encoding/binary
* common: remove BytesToBig
* common: remove Bytes2Big
* common: remove BigTrue
* cmd/utils: add BigFlag and use it for error-checked integer flags
While here, remove environment variable processing for DirectoryFlag
because we don't use it.
* core: add missing error checks in genesis block parser
* common: remove String2Big
* cmd/evm: use utils.BigFlag
* common/math: check for 256 bit overflow in ParseBig
This is supposed to prevent silent overflow/truncation of values in the
genesis block JSON. Without this check, a genesis block that set a
balance larger than 256 bits would lead to weird behaviour in the VM.
* cmd/utils: fixup import
2017-02-27 00:21:51 +03:00
|
|
|
if !allZero(in[32:63]) || !crypto.ValidateSignatureValues(v, r, s, false) {
|
|
|
|
log.Trace("ECRECOVER error: v, r or s value invalid")
|
2015-03-19 05:56:06 +02:00
|
|
|
return nil
|
|
|
|
}
|
2017-01-05 13:35:23 +03:00
|
|
|
// v needs to be at the end for libsecp256k1
|
|
|
|
pubKey, err := crypto.Ecrecover(in[:32], append(in[64:128], v))
|
2015-03-29 16:02:49 +03:00
|
|
|
// make sure the public key is a valid one
|
2015-04-05 20:31:18 +03:00
|
|
|
if err != nil {
|
2017-02-28 14:35:17 +03:00
|
|
|
log.Trace("ECRECOVER failed", "err", err)
|
2015-03-19 05:56:06 +02:00
|
|
|
return nil
|
|
|
|
}
|
2015-03-29 16:02:49 +03:00
|
|
|
|
2015-03-19 05:56:06 +02:00
|
|
|
// the first byte of pubkey is bitcoin heritage
|
2016-02-21 20:40:27 +02:00
|
|
|
return common.LeftPadBytes(crypto.Keccak256(pubKey[1:])[12:], 32)
|
2014-10-08 13:01:36 +03:00
|
|
|
}
|
2015-01-05 18:37:30 +02:00
|
|
|
|
2017-01-05 13:52:10 +03:00
|
|
|
// SHA256 implemented as a native contract
|
2017-02-18 11:24:12 +03:00
|
|
|
type sha256hash struct{}
|
2017-01-05 13:52:10 +03:00
|
|
|
|
2017-01-04 22:17:24 +03:00
|
|
|
// RequiredGas returns the gas required to execute the pre-compiled contract.
|
|
|
|
//
|
|
|
|
// This method does not require any overflow checking as the input size gas costs
|
|
|
|
// required for anything significant is so high it's impossible to pay for.
|
2017-02-18 11:24:12 +03:00
|
|
|
func (c *sha256hash) RequiredGas(inputSize int) uint64 {
|
2017-01-04 22:17:24 +03:00
|
|
|
return uint64(inputSize+31)/32*params.Sha256WordGas + params.Sha256Gas
|
2017-01-05 13:52:10 +03:00
|
|
|
}
|
2017-02-18 11:24:12 +03:00
|
|
|
func (c *sha256hash) Run(in []byte) []byte {
|
|
|
|
h := sha256.Sum256(in)
|
|
|
|
return h[:]
|
2017-01-05 13:52:10 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
// RIPMED160 implemented as a native contract
|
2017-02-18 11:24:12 +03:00
|
|
|
type ripemd160hash struct{}
|
2017-01-05 13:52:10 +03:00
|
|
|
|
2017-01-04 22:17:24 +03:00
|
|
|
// RequiredGas returns the gas required to execute the pre-compiled contract.
|
|
|
|
//
|
|
|
|
// This method does not require any overflow checking as the input size gas costs
|
|
|
|
// required for anything significant is so high it's impossible to pay for.
|
2017-02-18 11:24:12 +03:00
|
|
|
func (c *ripemd160hash) RequiredGas(inputSize int) uint64 {
|
2017-01-04 22:17:24 +03:00
|
|
|
return uint64(inputSize+31)/32*params.Ripemd160WordGas + params.Ripemd160Gas
|
2017-01-05 13:52:10 +03:00
|
|
|
}
|
2017-02-18 11:24:12 +03:00
|
|
|
func (c *ripemd160hash) Run(in []byte) []byte {
|
|
|
|
ripemd := ripemd160.New()
|
|
|
|
ripemd.Write(in)
|
|
|
|
return common.LeftPadBytes(ripemd.Sum(nil), 32)
|
2017-01-05 13:52:10 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
// data copy implemented as a native contract
|
|
|
|
type dataCopy struct{}
|
|
|
|
|
2017-01-04 22:17:24 +03:00
|
|
|
// RequiredGas returns the gas required to execute the pre-compiled contract.
|
|
|
|
//
|
|
|
|
// This method does not require any overflow checking as the input size gas costs
|
|
|
|
// required for anything significant is so high it's impossible to pay for.
|
|
|
|
func (c *dataCopy) RequiredGas(inputSize int) uint64 {
|
|
|
|
return uint64(inputSize+31)/32*params.IdentityWordGas + params.IdentityGas
|
2017-01-05 13:52:10 +03:00
|
|
|
}
|
|
|
|
func (c *dataCopy) Run(in []byte) []byte {
|
2015-01-05 18:37:30 +02:00
|
|
|
return in
|
|
|
|
}
|