2015-04-12 13:38:25 +03:00
|
|
|
package downloader
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/binary"
|
2015-06-11 18:13:13 +03:00
|
|
|
"fmt"
|
2015-04-12 13:38:25 +03:00
|
|
|
"math/big"
|
|
|
|
"testing"
|
|
|
|
"time"
|
|
|
|
|
|
|
|
"github.com/ethereum/go-ethereum/common"
|
2015-06-08 14:06:36 +03:00
|
|
|
"github.com/ethereum/go-ethereum/core"
|
2015-04-12 13:38:25 +03:00
|
|
|
"github.com/ethereum/go-ethereum/core/types"
|
2015-05-15 13:26:34 +03:00
|
|
|
"github.com/ethereum/go-ethereum/event"
|
2015-04-12 13:38:25 +03:00
|
|
|
)
|
|
|
|
|
2015-05-14 15:24:18 +03:00
|
|
|
var (
|
|
|
|
knownHash = common.Hash{1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
|
|
|
|
unknownHash = common.Hash{9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9}
|
2015-05-29 21:04:20 +03:00
|
|
|
bannedHash = common.Hash{5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5}
|
2015-06-11 17:14:45 +03:00
|
|
|
|
|
|
|
genesis = createBlock(1, common.Hash{}, knownHash)
|
2015-05-14 15:24:18 +03:00
|
|
|
)
|
2015-04-12 13:38:25 +03:00
|
|
|
|
2015-04-13 17:38:32 +03:00
|
|
|
func createHashes(start, amount int) (hashes []common.Hash) {
|
2015-04-12 13:38:25 +03:00
|
|
|
hashes = make([]common.Hash, amount+1)
|
|
|
|
hashes[len(hashes)-1] = knownHash
|
|
|
|
|
|
|
|
for i := range hashes[:len(hashes)-1] {
|
2015-05-29 19:47:00 +03:00
|
|
|
binary.BigEndian.PutUint64(hashes[i][:8], uint64(start+i+2))
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2015-05-15 14:48:57 +03:00
|
|
|
func createBlock(i int, parent, hash common.Hash) *types.Block {
|
2015-05-03 15:09:33 +03:00
|
|
|
header := &types.Header{Number: big.NewInt(int64(i))}
|
|
|
|
block := types.NewBlockWithHeader(header)
|
|
|
|
block.HeaderHash = hash
|
2015-05-15 14:48:57 +03:00
|
|
|
block.ParentHeaderHash = parent
|
2015-05-03 15:09:33 +03:00
|
|
|
return block
|
|
|
|
}
|
|
|
|
|
2015-04-12 13:38:25 +03:00
|
|
|
func createBlocksFromHashes(hashes []common.Hash) map[common.Hash]*types.Block {
|
|
|
|
blocks := make(map[common.Hash]*types.Block)
|
2015-05-15 14:48:57 +03:00
|
|
|
for i := 0; i < len(hashes); i++ {
|
|
|
|
parent := knownHash
|
|
|
|
if i < len(hashes)-1 {
|
|
|
|
parent = hashes[i+1]
|
|
|
|
}
|
|
|
|
blocks[hashes[i]] = createBlock(len(hashes)-i, parent, hashes[i])
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
return blocks
|
|
|
|
}
|
|
|
|
|
|
|
|
type downloadTester struct {
|
2015-05-14 15:24:18 +03:00
|
|
|
downloader *Downloader
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
ownHashes []common.Hash // Hash chain belonging to the tester
|
|
|
|
ownBlocks map[common.Hash]*types.Block // Blocks belonging to the tester
|
|
|
|
peerHashes map[string][]common.Hash // Hash chain belonging to different test peers
|
|
|
|
peerBlocks map[string]map[common.Hash]*types.Block // Blocks belonging to different test peers
|
2015-05-14 15:24:18 +03:00
|
|
|
|
2015-05-21 08:07:58 +03:00
|
|
|
maxHashFetch int // Overrides the maximum number of retrieved hashes
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
func newTester() *downloadTester {
|
2015-05-14 15:24:18 +03:00
|
|
|
tester := &downloadTester{
|
2015-06-11 17:14:45 +03:00
|
|
|
ownHashes: []common.Hash{knownHash},
|
|
|
|
ownBlocks: map[common.Hash]*types.Block{knownHash: genesis},
|
|
|
|
peerHashes: make(map[string][]common.Hash),
|
|
|
|
peerBlocks: make(map[string]map[common.Hash]*types.Block),
|
2015-05-14 15:24:18 +03:00
|
|
|
}
|
2015-05-15 13:26:34 +03:00
|
|
|
var mux event.TypeMux
|
2015-06-11 18:13:13 +03:00
|
|
|
downloader := New(&mux, tester.hasBlock, tester.getBlock, tester.dropPeer)
|
2015-04-12 13:38:25 +03:00
|
|
|
tester.downloader = downloader
|
|
|
|
|
|
|
|
return tester
|
|
|
|
}
|
|
|
|
|
2015-05-15 11:58:37 +03:00
|
|
|
// syncTake is starts synchronising with a remote peer, but concurrently it also
|
|
|
|
// starts fetching blocks that the downloader retrieved. IT blocks until both go
|
|
|
|
// routines terminate.
|
2015-05-26 14:00:21 +03:00
|
|
|
func (dl *downloadTester) syncTake(peerId string, head common.Hash) ([]*Block, error) {
|
2015-05-15 11:58:37 +03:00
|
|
|
// Start a block collector to take blocks as they become available
|
|
|
|
done := make(chan struct{})
|
2015-05-26 14:00:21 +03:00
|
|
|
took := []*Block{}
|
2015-05-15 11:58:37 +03:00
|
|
|
go func() {
|
|
|
|
for running := true; running; {
|
|
|
|
select {
|
|
|
|
case <-done:
|
|
|
|
running = false
|
|
|
|
default:
|
|
|
|
time.Sleep(time.Millisecond)
|
|
|
|
}
|
|
|
|
// Take a batch of blocks and accumulate
|
2015-06-11 17:14:45 +03:00
|
|
|
blocks := dl.downloader.TakeBlocks()
|
|
|
|
for _, block := range blocks {
|
|
|
|
dl.ownHashes = append(dl.ownHashes, block.RawBlock.Hash())
|
|
|
|
dl.ownBlocks[block.RawBlock.Hash()] = block.RawBlock
|
|
|
|
}
|
|
|
|
took = append(took, blocks...)
|
2015-05-15 11:58:37 +03:00
|
|
|
}
|
|
|
|
done <- struct{}{}
|
|
|
|
}()
|
|
|
|
// Start the downloading, sync the taker and return
|
2015-06-11 17:14:45 +03:00
|
|
|
err := dl.downloader.synchronise(peerId, head)
|
2015-05-15 11:58:37 +03:00
|
|
|
|
|
|
|
done <- struct{}{}
|
|
|
|
<-done
|
|
|
|
|
|
|
|
return took, err
|
2015-05-03 17:09:10 +03:00
|
|
|
}
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
// hasBlock checks if a block is present in the testers canonical chain.
|
2015-04-12 13:38:25 +03:00
|
|
|
func (dl *downloadTester) hasBlock(hash common.Hash) bool {
|
2015-06-11 17:14:45 +03:00
|
|
|
return dl.getBlock(hash) != nil
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
// getBlock retrieves a block from the testers canonical chain.
|
2015-05-01 01:23:51 +03:00
|
|
|
func (dl *downloadTester) getBlock(hash common.Hash) *types.Block {
|
2015-06-11 17:14:45 +03:00
|
|
|
return dl.ownBlocks[hash]
|
|
|
|
}
|
|
|
|
|
|
|
|
// newPeer registers a new block download source into the downloader.
|
|
|
|
func (dl *downloadTester) newPeer(id string, hashes []common.Hash, blocks map[common.Hash]*types.Block) error {
|
|
|
|
err := dl.downloader.RegisterPeer(id, hashes[0], dl.peerGetHashesFn(id), dl.peerGetBlocksFn(id))
|
|
|
|
if err == nil {
|
|
|
|
// Assign the owned hashes and blocks to the peer
|
|
|
|
dl.peerHashes[id] = hashes
|
|
|
|
dl.peerBlocks[id] = blocks
|
|
|
|
}
|
|
|
|
return err
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
|
2015-06-11 18:13:13 +03:00
|
|
|
// dropPeer simulates a hard peer removal from the connection pool.
|
|
|
|
func (dl *downloadTester) dropPeer(id string) {
|
|
|
|
delete(dl.peerHashes, id)
|
|
|
|
delete(dl.peerBlocks, id)
|
|
|
|
|
|
|
|
dl.downloader.UnregisterPeer(id)
|
|
|
|
}
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
// peerGetBlocksFn constructs a getHashes function associated with a particular
|
|
|
|
// peer in the download tester. The returned function can be used to retrieve
|
|
|
|
// batches of hashes from the particularly requested peer.
|
|
|
|
func (dl *downloadTester) peerGetHashesFn(id string) func(head common.Hash) error {
|
|
|
|
return func(head common.Hash) error {
|
|
|
|
limit := MaxHashFetch
|
|
|
|
if dl.maxHashFetch > 0 {
|
|
|
|
limit = dl.maxHashFetch
|
|
|
|
}
|
|
|
|
// Gather the next batch of hashes
|
|
|
|
hashes := dl.peerHashes[id]
|
|
|
|
result := make([]common.Hash, 0, limit)
|
|
|
|
for i, hash := range hashes {
|
|
|
|
if hash == head {
|
2015-05-15 13:14:46 +03:00
|
|
|
i++
|
2015-06-11 17:14:45 +03:00
|
|
|
for len(result) < cap(result) && i < len(hashes) {
|
|
|
|
result = append(result, hashes[i])
|
|
|
|
i++
|
|
|
|
}
|
|
|
|
break
|
2015-05-15 13:14:46 +03:00
|
|
|
}
|
|
|
|
}
|
2015-06-11 17:14:45 +03:00
|
|
|
// Delay delivery a bit to allow attacks to unfold
|
|
|
|
go func() {
|
|
|
|
time.Sleep(time.Millisecond)
|
|
|
|
dl.downloader.DeliverHashes(id, result)
|
|
|
|
}()
|
|
|
|
return nil
|
2015-05-15 13:14:46 +03:00
|
|
|
}
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
// peerGetBlocksFn constructs a getBlocks function associated with a particular
|
|
|
|
// peer in the download tester. The returned function can be used to retrieve
|
|
|
|
// batches of blocks from the particularly requested peer.
|
|
|
|
func (dl *downloadTester) peerGetBlocksFn(id string) func([]common.Hash) error {
|
2015-04-12 13:38:25 +03:00
|
|
|
return func(hashes []common.Hash) error {
|
2015-06-11 17:14:45 +03:00
|
|
|
blocks := dl.peerBlocks[id]
|
|
|
|
result := make([]*types.Block, 0, len(hashes))
|
2015-05-15 01:56:52 +03:00
|
|
|
for _, hash := range hashes {
|
2015-06-11 17:14:45 +03:00
|
|
|
if block, ok := blocks[hash]; ok {
|
|
|
|
result = append(result, block)
|
2015-05-15 01:56:52 +03:00
|
|
|
}
|
2015-04-12 13:38:25 +03:00
|
|
|
}
|
2015-06-11 17:14:45 +03:00
|
|
|
go dl.downloader.DeliverBlocks(id, result)
|
2015-04-12 13:38:25 +03:00
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Tests that simple synchronization, without throttling from a good peer works.
|
|
|
|
func TestSynchronisation(t *testing.T) {
|
|
|
|
// Create a small enough block chain to download and the tester
|
|
|
|
targetBlocks := blockCacheLimit - 15
|
2015-04-24 16:04:58 +03:00
|
|
|
hashes := createHashes(0, targetBlocks)
|
2015-04-12 13:38:25 +03:00
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("peer", hashes, blocks)
|
2015-04-13 17:38:32 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Synchronise with the peer and make sure all blocks were retrieved
|
2015-06-11 17:14:45 +03:00
|
|
|
if err := tester.downloader.synchronise("peer", hashes[0]); err != nil {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
2015-04-13 17:38:32 +03:00
|
|
|
}
|
2015-06-03 19:00:54 +03:00
|
|
|
if queued := len(tester.downloader.queue.blockPool); queued != targetBlocks {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Fatalf("synchronised block mismatch: have %v, want %v", queued, targetBlocks)
|
2015-05-01 01:23:51 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Tests that the synchronized blocks can be correctly retrieved.
|
|
|
|
func TestBlockTaking(t *testing.T) {
|
|
|
|
// Create a small enough block chain to download and the tester
|
|
|
|
targetBlocks := blockCacheLimit - 15
|
2015-05-01 01:23:51 +03:00
|
|
|
hashes := createHashes(0, targetBlocks)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("peer", hashes, blocks)
|
2015-05-01 01:23:51 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Synchronise with the peer and test block retrieval
|
2015-06-11 17:14:45 +03:00
|
|
|
if err := tester.downloader.synchronise("peer", hashes[0]); err != nil {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
2015-05-01 01:23:51 +03:00
|
|
|
}
|
2015-05-29 19:47:00 +03:00
|
|
|
if took := tester.downloader.TakeBlocks(); len(took) != targetBlocks {
|
|
|
|
t.Fatalf("took block mismatch: have %v, want %v", len(took), targetBlocks)
|
2015-04-24 16:04:58 +03:00
|
|
|
}
|
2015-04-13 17:38:32 +03:00
|
|
|
}
|
2015-05-07 14:40:50 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Tests that an inactive downloader will not accept incoming hashes and blocks.
|
2015-05-10 01:34:07 +03:00
|
|
|
func TestInactiveDownloader(t *testing.T) {
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
2015-05-10 01:34:07 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Check that neither hashes nor blocks are accepted
|
2015-06-11 16:11:56 +03:00
|
|
|
if err := tester.downloader.DeliverHashes("bad peer", []common.Hash{}); err != errNoSyncActive {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Errorf("error mismatch: have %v, want %v", err, errNoSyncActive)
|
|
|
|
}
|
2015-06-11 16:11:56 +03:00
|
|
|
if err := tester.downloader.DeliverBlocks("bad peer", []*types.Block{}); err != errNoSyncActive {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Errorf("error mismatch: have %v, want %v", err, errNoSyncActive)
|
2015-05-10 01:34:07 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Tests that a canceled download wipes all previously accumulated state.
|
2015-05-10 01:34:07 +03:00
|
|
|
func TestCancel(t *testing.T) {
|
2015-05-29 19:47:00 +03:00
|
|
|
// Create a small enough block chain to download and the tester
|
|
|
|
targetBlocks := blockCacheLimit - 15
|
2015-05-10 01:34:07 +03:00
|
|
|
hashes := createHashes(0, targetBlocks)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("peer", hashes, blocks)
|
2015-05-10 01:34:07 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Synchronise with the peer, but cancel afterwards
|
2015-06-11 17:14:45 +03:00
|
|
|
if err := tester.downloader.synchronise("peer", hashes[0]); err != nil {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
2015-05-10 01:34:07 +03:00
|
|
|
}
|
|
|
|
if !tester.downloader.Cancel() {
|
2015-05-29 19:47:00 +03:00
|
|
|
t.Fatalf("cancel operation failed")
|
2015-05-10 01:34:07 +03:00
|
|
|
}
|
2015-05-29 19:47:00 +03:00
|
|
|
// Make sure the queue reports empty and no blocks can be taken
|
|
|
|
hashCount, blockCount := tester.downloader.queue.Size()
|
|
|
|
if hashCount > 0 || blockCount > 0 {
|
|
|
|
t.Errorf("block or hash count mismatch: %d hashes, %d blocks, want 0", hashCount, blockCount)
|
|
|
|
}
|
|
|
|
if took := tester.downloader.TakeBlocks(); len(took) != 0 {
|
|
|
|
t.Errorf("taken blocks mismatch: have %d, want %d", len(took), 0)
|
2015-05-10 01:34:07 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Tests that if a large batch of blocks are being downloaded, it is throttled
|
|
|
|
// until the cached blocks are retrieved.
|
2015-05-07 14:40:50 +03:00
|
|
|
func TestThrottling(t *testing.T) {
|
2015-05-29 19:47:00 +03:00
|
|
|
// Create a long block chain to download and the tester
|
|
|
|
targetBlocks := 8 * blockCacheLimit
|
2015-05-07 14:40:50 +03:00
|
|
|
hashes := createHashes(0, targetBlocks)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("peer", hashes, blocks)
|
2015-05-07 14:40:50 +03:00
|
|
|
|
2015-05-29 19:47:00 +03:00
|
|
|
// Start a synchronisation concurrently
|
|
|
|
errc := make(chan error)
|
|
|
|
go func() {
|
2015-06-11 17:14:45 +03:00
|
|
|
errc <- tester.downloader.synchronise("peer", hashes[0])
|
2015-05-29 19:47:00 +03:00
|
|
|
}()
|
|
|
|
// Iteratively take some blocks, always checking the retrieval count
|
|
|
|
for total := 0; total < targetBlocks; {
|
2015-06-07 18:46:32 +03:00
|
|
|
// Wait a bit for sync to complete
|
|
|
|
for start := time.Now(); time.Since(start) < 3*time.Second; {
|
|
|
|
time.Sleep(25 * time.Millisecond)
|
|
|
|
if len(tester.downloader.queue.blockPool) == blockCacheLimit {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
}
|
2015-05-29 19:47:00 +03:00
|
|
|
// Fetch the next batch of blocks
|
|
|
|
took := tester.downloader.TakeBlocks()
|
|
|
|
if len(took) != blockCacheLimit {
|
|
|
|
t.Fatalf("block count mismatch: have %v, want %v", len(took), blockCacheLimit)
|
|
|
|
}
|
|
|
|
total += len(took)
|
|
|
|
if total > targetBlocks {
|
|
|
|
t.Fatalf("target block count mismatch: have %v, want %v", total, targetBlocks)
|
|
|
|
}
|
2015-05-07 14:40:50 +03:00
|
|
|
}
|
2015-05-29 19:47:00 +03:00
|
|
|
if err := <-errc; err != nil {
|
|
|
|
t.Fatalf("block synchronization failed: %v", err)
|
2015-05-07 14:40:50 +03:00
|
|
|
}
|
|
|
|
}
|
2015-05-14 15:24:18 +03:00
|
|
|
|
|
|
|
// Tests that if a peer returns an invalid chain with a block pointing to a non-
|
|
|
|
// existing parent, it is correctly detected and handled.
|
|
|
|
func TestNonExistingParentAttack(t *testing.T) {
|
|
|
|
// Forge a single-link chain with a forged header
|
|
|
|
hashes := createHashes(0, 1)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
|
|
|
forged := blocks[hashes[0]]
|
|
|
|
forged.ParentHeaderHash = unknownHash
|
|
|
|
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", hashes, blocks)
|
|
|
|
if err := tester.downloader.synchronise("attack", hashes[0]); err != nil {
|
2015-05-14 15:24:18 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
2015-05-14 15:38:49 +03:00
|
|
|
bs := tester.downloader.TakeBlocks()
|
|
|
|
if len(bs) != 1 {
|
|
|
|
t.Fatalf("retrieved block mismatch: have %v, want %v", len(bs), 1)
|
2015-05-14 15:24:18 +03:00
|
|
|
}
|
2015-05-26 14:00:21 +03:00
|
|
|
if tester.hasBlock(bs[0].RawBlock.ParentHash()) {
|
2015-05-14 15:38:49 +03:00
|
|
|
t.Fatalf("tester knows about the unknown hash")
|
2015-05-14 15:24:18 +03:00
|
|
|
}
|
|
|
|
tester.downloader.Cancel()
|
|
|
|
|
|
|
|
// Reconstruct a valid chain, and try to synchronize with it
|
|
|
|
forged.ParentHeaderHash = knownHash
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
|
|
|
if err := tester.downloader.synchronise("valid", hashes[0]); err != nil {
|
2015-05-14 15:24:18 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
2015-05-14 15:38:49 +03:00
|
|
|
bs = tester.downloader.TakeBlocks()
|
2015-05-14 15:24:18 +03:00
|
|
|
if len(bs) != 1 {
|
2015-05-14 15:38:49 +03:00
|
|
|
t.Fatalf("retrieved block mismatch: have %v, want %v", len(bs), 1)
|
2015-05-14 15:24:18 +03:00
|
|
|
}
|
2015-05-26 14:00:21 +03:00
|
|
|
if !tester.hasBlock(bs[0].RawBlock.ParentHash()) {
|
2015-05-14 15:44:54 +03:00
|
|
|
t.Fatalf("tester doesn't know about the origin hash")
|
|
|
|
}
|
2015-05-14 15:24:18 +03:00
|
|
|
}
|
2015-05-15 01:40:16 +03:00
|
|
|
|
|
|
|
// Tests that if a malicious peers keeps sending us repeating hashes, we don't
|
|
|
|
// loop indefinitely.
|
|
|
|
func TestRepeatingHashAttack(t *testing.T) {
|
|
|
|
// Create a valid chain, but drop the last link
|
2015-05-15 02:14:21 +03:00
|
|
|
hashes := createHashes(0, blockCacheLimit)
|
2015-05-15 01:40:16 +03:00
|
|
|
blocks := createBlocksFromHashes(hashes)
|
2015-05-15 02:14:21 +03:00
|
|
|
forged := hashes[:len(hashes)-1]
|
2015-05-15 01:40:16 +03:00
|
|
|
|
|
|
|
// Try and sync with the malicious node
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", forged, blocks)
|
2015-05-15 01:40:16 +03:00
|
|
|
|
|
|
|
errc := make(chan error)
|
|
|
|
go func() {
|
2015-06-11 17:14:45 +03:00
|
|
|
errc <- tester.downloader.synchronise("attack", hashes[0])
|
2015-05-15 01:40:16 +03:00
|
|
|
}()
|
|
|
|
|
|
|
|
// Make sure that syncing returns and does so with a failure
|
|
|
|
select {
|
2015-05-20 10:15:42 +03:00
|
|
|
case <-time.After(time.Second):
|
2015-05-15 01:40:16 +03:00
|
|
|
t.Fatalf("synchronisation blocked")
|
|
|
|
case err := <-errc:
|
|
|
|
if err == nil {
|
|
|
|
t.Fatalf("synchronisation succeeded")
|
|
|
|
}
|
|
|
|
}
|
2015-05-15 02:14:21 +03:00
|
|
|
// Ensure that a valid chain can still pass sync
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
|
|
|
if err := tester.downloader.synchronise("valid", hashes[0]); err != nil {
|
2015-05-15 02:14:21 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
2015-05-15 01:40:16 +03:00
|
|
|
}
|
2015-05-15 01:56:52 +03:00
|
|
|
|
|
|
|
// Tests that if a malicious peers returns a non-existent block hash, it should
|
|
|
|
// eventually time out and the sync reattempted.
|
|
|
|
func TestNonExistingBlockAttack(t *testing.T) {
|
|
|
|
// Create a valid chain, but forge the last link
|
2015-05-15 02:14:21 +03:00
|
|
|
hashes := createHashes(0, blockCacheLimit)
|
2015-05-15 01:56:52 +03:00
|
|
|
blocks := createBlocksFromHashes(hashes)
|
2015-05-15 02:14:21 +03:00
|
|
|
origin := hashes[len(hashes)/2]
|
2015-05-15 01:56:52 +03:00
|
|
|
|
|
|
|
hashes[len(hashes)/2] = unknownHash
|
|
|
|
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", hashes, blocks)
|
|
|
|
if err := tester.downloader.synchronise("attack", hashes[0]); err != errPeersUnavailable {
|
2015-05-15 01:56:52 +03:00
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errPeersUnavailable)
|
|
|
|
}
|
2015-05-15 02:14:21 +03:00
|
|
|
// Ensure that a valid chain can still pass sync
|
|
|
|
hashes[len(hashes)/2] = origin
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
|
|
|
if err := tester.downloader.synchronise("valid", hashes[0]); err != nil {
|
2015-05-15 02:14:21 +03:00
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
2015-05-15 01:56:52 +03:00
|
|
|
}
|
2015-05-15 11:58:37 +03:00
|
|
|
|
|
|
|
// Tests that if a malicious peer is returning hashes in a weird order, that the
|
|
|
|
// sync throttler doesn't choke on them waiting for the valid blocks.
|
|
|
|
func TestInvalidHashOrderAttack(t *testing.T) {
|
|
|
|
// Create a valid long chain, but reverse some hashes within
|
|
|
|
hashes := createHashes(0, 4*blockCacheLimit)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
2015-05-15 14:48:57 +03:00
|
|
|
chunk1 := make([]common.Hash, blockCacheLimit)
|
|
|
|
chunk2 := make([]common.Hash, blockCacheLimit)
|
|
|
|
copy(chunk1, hashes[blockCacheLimit:2*blockCacheLimit])
|
|
|
|
copy(chunk2, hashes[2*blockCacheLimit:3*blockCacheLimit])
|
|
|
|
|
2015-05-15 11:58:37 +03:00
|
|
|
reverse := make([]common.Hash, len(hashes))
|
|
|
|
copy(reverse, hashes)
|
2015-05-15 14:48:57 +03:00
|
|
|
copy(reverse[2*blockCacheLimit:], chunk1)
|
|
|
|
copy(reverse[blockCacheLimit:], chunk2)
|
2015-05-15 11:58:37 +03:00
|
|
|
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", reverse, blocks)
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", reverse[0]); err != errInvalidChain {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errInvalidChain)
|
2015-05-15 11:58:37 +03:00
|
|
|
}
|
|
|
|
// Ensure that a valid chain can still pass sync
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
2015-05-15 11:58:37 +03:00
|
|
|
if _, err := tester.syncTake("valid", hashes[0]); err != nil {
|
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
|
|
|
}
|
2015-05-15 13:14:46 +03:00
|
|
|
|
|
|
|
// Tests that if a malicious peer makes up a random hash chain and tries to push
|
|
|
|
// indefinitely, it actually gets caught with it.
|
|
|
|
func TestMadeupHashChainAttack(t *testing.T) {
|
2015-06-03 14:39:21 +03:00
|
|
|
blockSoftTTL = 100 * time.Millisecond
|
2015-05-15 13:14:46 +03:00
|
|
|
crossCheckCycle = 25 * time.Millisecond
|
|
|
|
|
|
|
|
// Create a long chain of hashes without backing blocks
|
|
|
|
hashes := createHashes(0, 1024*blockCacheLimit)
|
|
|
|
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", hashes, nil)
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", hashes[0]); err != errCrossCheckFailed {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errCrossCheckFailed)
|
2015-05-15 13:14:46 +03:00
|
|
|
}
|
|
|
|
}
|
2015-05-15 14:48:57 +03:00
|
|
|
|
2015-05-21 08:07:58 +03:00
|
|
|
// Tests that if a malicious peer makes up a random hash chain, and tries to push
|
|
|
|
// indefinitely, one hash at a time, it actually gets caught with it. The reason
|
|
|
|
// this is separate from the classical made up chain attack is that sending hashes
|
|
|
|
// one by one prevents reliable block/parent verification.
|
|
|
|
func TestMadeupHashChainDrippingAttack(t *testing.T) {
|
|
|
|
// Create a random chain of hashes to drip
|
|
|
|
hashes := createHashes(0, 16*blockCacheLimit)
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
2015-05-21 08:07:58 +03:00
|
|
|
|
|
|
|
// Try and sync with the attacker, one hash at a time
|
|
|
|
tester.maxHashFetch = 1
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("attack", hashes, nil)
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", hashes[0]); err != errStallingPeer {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errStallingPeer)
|
2015-05-21 08:07:58 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-05-15 14:48:57 +03:00
|
|
|
// Tests that if a malicious peer makes up a random block chain, and tried to
|
|
|
|
// push indefinitely, it actually gets caught with it.
|
|
|
|
func TestMadeupBlockChainAttack(t *testing.T) {
|
2015-06-03 14:39:21 +03:00
|
|
|
defaultBlockTTL := blockSoftTTL
|
2015-05-15 21:16:42 +03:00
|
|
|
defaultCrossCheckCycle := crossCheckCycle
|
|
|
|
|
2015-06-03 14:39:21 +03:00
|
|
|
blockSoftTTL = 100 * time.Millisecond
|
2015-05-15 14:48:57 +03:00
|
|
|
crossCheckCycle = 25 * time.Millisecond
|
|
|
|
|
|
|
|
// Create a long chain of blocks and simulate an invalid chain by dropping every second
|
2015-05-21 08:37:27 +03:00
|
|
|
hashes := createHashes(0, 16*blockCacheLimit)
|
2015-05-15 14:48:57 +03:00
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
|
|
|
gapped := make([]common.Hash, len(hashes)/2)
|
|
|
|
for i := 0; i < len(gapped); i++ {
|
|
|
|
gapped[i] = hashes[2*i]
|
|
|
|
}
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", gapped, blocks)
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", gapped[0]); err != errCrossCheckFailed {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errCrossCheckFailed)
|
2015-05-15 14:48:57 +03:00
|
|
|
}
|
|
|
|
// Ensure that a valid chain can still pass sync
|
2015-06-03 14:39:21 +03:00
|
|
|
blockSoftTTL = defaultBlockTTL
|
2015-05-15 21:16:42 +03:00
|
|
|
crossCheckCycle = defaultCrossCheckCycle
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
2015-05-15 14:48:57 +03:00
|
|
|
if _, err := tester.syncTake("valid", hashes[0]); err != nil {
|
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
|
|
|
}
|
2015-05-21 08:37:27 +03:00
|
|
|
|
|
|
|
// Advanced form of the above forged blockchain attack, where not only does the
|
|
|
|
// attacker make up a valid hashes for random blocks, but also forges the block
|
|
|
|
// parents to point to existing hashes.
|
|
|
|
func TestMadeupParentBlockChainAttack(t *testing.T) {
|
2015-06-03 14:39:21 +03:00
|
|
|
defaultBlockTTL := blockSoftTTL
|
2015-05-21 08:37:27 +03:00
|
|
|
defaultCrossCheckCycle := crossCheckCycle
|
|
|
|
|
2015-06-03 14:39:21 +03:00
|
|
|
blockSoftTTL = 100 * time.Millisecond
|
2015-05-21 08:37:27 +03:00
|
|
|
crossCheckCycle = 25 * time.Millisecond
|
|
|
|
|
|
|
|
// Create a long chain of blocks and simulate an invalid chain by dropping every second
|
|
|
|
hashes := createHashes(0, 16*blockCacheLimit)
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
forges := createBlocksFromHashes(hashes)
|
|
|
|
for hash, block := range forges {
|
|
|
|
block.ParentHeaderHash = hash // Simulate pointing to already known hash
|
|
|
|
}
|
|
|
|
// Try and sync with the malicious node and check that it fails
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
|
|
|
tester.newPeer("attack", hashes, forges)
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", hashes[0]); err != errCrossCheckFailed {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errCrossCheckFailed)
|
2015-05-21 08:37:27 +03:00
|
|
|
}
|
|
|
|
// Ensure that a valid chain can still pass sync
|
2015-06-03 14:39:21 +03:00
|
|
|
blockSoftTTL = defaultBlockTTL
|
2015-05-21 08:37:27 +03:00
|
|
|
crossCheckCycle = defaultCrossCheckCycle
|
|
|
|
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("valid", hashes, blocks)
|
2015-05-21 08:37:27 +03:00
|
|
|
if _, err := tester.syncTake("valid", hashes[0]); err != nil {
|
|
|
|
t.Fatalf("failed to synchronise blocks: %v", err)
|
|
|
|
}
|
|
|
|
}
|
2015-05-29 21:04:20 +03:00
|
|
|
|
|
|
|
// Tests that if one/multiple malicious peers try to feed a banned blockchain to
|
|
|
|
// the downloader, it will not keep refetching the same chain indefinitely, but
|
|
|
|
// gradually block pieces of it, until it's head is also blocked.
|
|
|
|
func TestBannedChainStarvationAttack(t *testing.T) {
|
|
|
|
// Construct a valid chain, but ban one of the hashes in it
|
|
|
|
hashes := createHashes(0, 8*blockCacheLimit)
|
|
|
|
hashes[len(hashes)/2+23] = bannedHash // weird index to have non multiple of ban chunk size
|
|
|
|
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
|
|
|
// Create the tester and ban the selected hash
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
2015-05-29 21:04:20 +03:00
|
|
|
tester.downloader.banned.Add(bannedHash)
|
|
|
|
|
|
|
|
// Iteratively try to sync, and verify that the banned hash list grows until
|
|
|
|
// the head of the invalid chain is blocked too.
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("attack", hashes, blocks)
|
2015-05-29 21:04:20 +03:00
|
|
|
for banned := tester.downloader.banned.Size(); ; {
|
|
|
|
// Try to sync with the attacker, check hash chain failure
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", hashes[0]); err != errInvalidChain {
|
2015-06-11 18:13:13 +03:00
|
|
|
if tester.downloader.banned.Has(hashes[0]) && err == errBannedHead {
|
|
|
|
break
|
|
|
|
}
|
2015-06-11 15:56:08 +03:00
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errInvalidChain)
|
2015-05-29 21:04:20 +03:00
|
|
|
}
|
|
|
|
// Check that the ban list grew with at least 1 new item, or all banned
|
|
|
|
bans := tester.downloader.banned.Size()
|
|
|
|
if bans < banned+1 {
|
|
|
|
t.Fatalf("ban count mismatch: have %v, want %v+", bans, banned+1)
|
|
|
|
}
|
|
|
|
banned = bans
|
|
|
|
}
|
2015-06-08 15:02:52 +03:00
|
|
|
// Check that after banning an entire chain, bad peers get dropped
|
2015-06-11 17:14:45 +03:00
|
|
|
if err := tester.newPeer("new attacker", hashes, blocks); err != errBannedHead {
|
2015-06-08 15:02:52 +03:00
|
|
|
t.Fatalf("peer registration mismatch: have %v, want %v", err, errBannedHead)
|
|
|
|
}
|
|
|
|
if peer := tester.downloader.peers.Peer("net attacker"); peer != nil {
|
|
|
|
t.Fatalf("banned attacker registered: %v", peer)
|
|
|
|
}
|
2015-05-29 21:04:20 +03:00
|
|
|
}
|
2015-06-08 14:06:36 +03:00
|
|
|
|
|
|
|
// Tests that if a peer sends excessively many/large invalid chains that are
|
|
|
|
// gradually banned, it will have an upper limit on the consumed memory and also
|
|
|
|
// the origin bad hashes will not be evacuated.
|
|
|
|
func TestBannedChainMemoryExhaustionAttack(t *testing.T) {
|
|
|
|
// Reduce the test size a bit
|
|
|
|
MaxBlockFetch = 4
|
|
|
|
maxBannedHashes = 256
|
|
|
|
|
|
|
|
// Construct a banned chain with more chunks than the ban limit
|
|
|
|
hashes := createHashes(0, maxBannedHashes*MaxBlockFetch)
|
|
|
|
hashes[len(hashes)-1] = bannedHash // weird index to have non multiple of ban chunk size
|
|
|
|
|
|
|
|
blocks := createBlocksFromHashes(hashes)
|
|
|
|
|
|
|
|
// Create the tester and ban the selected hash
|
2015-06-11 17:14:45 +03:00
|
|
|
tester := newTester()
|
2015-06-08 14:06:36 +03:00
|
|
|
tester.downloader.banned.Add(bannedHash)
|
|
|
|
|
|
|
|
// Iteratively try to sync, and verify that the banned hash list grows until
|
|
|
|
// the head of the invalid chain is blocked too.
|
2015-06-11 17:14:45 +03:00
|
|
|
tester.newPeer("attack", hashes, blocks)
|
2015-06-08 14:06:36 +03:00
|
|
|
for {
|
|
|
|
// Try to sync with the attacker, check hash chain failure
|
2015-06-11 15:56:08 +03:00
|
|
|
if _, err := tester.syncTake("attack", hashes[0]); err != errInvalidChain {
|
|
|
|
t.Fatalf("synchronisation error mismatch: have %v, want %v", err, errInvalidChain)
|
2015-06-08 14:06:36 +03:00
|
|
|
}
|
|
|
|
// Short circuit if the entire chain was banned
|
|
|
|
if tester.downloader.banned.Has(hashes[0]) {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
// Otherwise ensure we never exceed the memory allowance and the hard coded bans are untouched
|
|
|
|
if bans := tester.downloader.banned.Size(); bans > maxBannedHashes {
|
|
|
|
t.Fatalf("ban cap exceeded: have %v, want max %v", bans, maxBannedHashes)
|
|
|
|
}
|
|
|
|
for hash, _ := range core.BadHashes {
|
|
|
|
if !tester.downloader.banned.Has(hash) {
|
|
|
|
t.Fatalf("hard coded ban evacuated: %x", hash)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2015-06-11 18:13:13 +03:00
|
|
|
|
|
|
|
// Tests that misbehaving peers are disconnected, whilst behaving ones are not.
|
|
|
|
func TestAttackerDropping(t *testing.T) {
|
|
|
|
// Define the disconnection requirement for individual errors
|
|
|
|
tests := []struct {
|
|
|
|
result error
|
|
|
|
drop bool
|
|
|
|
}{
|
|
|
|
{nil, false}, // Sync succeeded, all is well
|
|
|
|
{errBusy, false}, // Sync is already in progress, no problem
|
|
|
|
{errUnknownPeer, false}, // Peer is unknown, was already dropped, don't double drop
|
|
|
|
{errBadPeer, true}, // Peer was deemed bad for some reason, drop it
|
|
|
|
{errStallingPeer, true}, // Peer was detected to be stalling, drop it
|
|
|
|
{errBannedHead, true}, // Peer's head hash is a known bad hash, drop it
|
|
|
|
{errNoPeers, false}, // No peers to download from, soft race, no issue
|
|
|
|
{errPendingQueue, false}, // There are blocks still cached, wait to exhaust, no issue
|
|
|
|
{errTimeout, true}, // No hashes received in due time, drop the peer
|
|
|
|
{errEmptyHashSet, true}, // No hashes were returned as a response, drop as it's a dead end
|
|
|
|
{errPeersUnavailable, true}, // Nobody had the advertised blocks, drop the advertiser
|
|
|
|
{errInvalidChain, true}, // Hash chain was detected as invalid, definitely drop
|
|
|
|
{errCrossCheckFailed, true}, // Hash-origin failed to pass a block cross check, drop
|
|
|
|
{errCancelHashFetch, false}, // Synchronisation was canceled, origin may be innocent, don't drop
|
|
|
|
{errCancelBlockFetch, false}, // Synchronisation was canceled, origin may be innocent, don't drop
|
|
|
|
}
|
|
|
|
// Run the tests and check disconnection status
|
|
|
|
tester := newTester()
|
|
|
|
for i, tt := range tests {
|
|
|
|
// Register a new peer and ensure it's presence
|
|
|
|
id := fmt.Sprintf("test %d", i)
|
|
|
|
if err := tester.newPeer(id, []common.Hash{knownHash}, nil); err != nil {
|
|
|
|
t.Fatalf("test %d: failed to register new peer: %v", i, err)
|
|
|
|
}
|
|
|
|
if _, ok := tester.peerHashes[id]; !ok {
|
|
|
|
t.Fatalf("test %d: registered peer not found", i)
|
|
|
|
}
|
|
|
|
// Simulate a synchronisation and check the required result
|
|
|
|
tester.downloader.synchroniseMock = func(string, common.Hash) error { return tt.result }
|
|
|
|
|
|
|
|
tester.downloader.Synchronise(id, knownHash)
|
|
|
|
if _, ok := tester.peerHashes[id]; !ok != tt.drop {
|
|
|
|
t.Errorf("test %d: peer drop mismatch for %v: have %v, want %v", i, tt.result, !ok, tt.drop)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|