Bitcoin Core Fuzz Coverage Report

Coverage Report

Created: 2026-06-01 16:00

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/home/zip/work/bitcoin/src/dbwrapper.cpp
Line
Count
Source
1
// Copyright (c) 2012-present The Bitcoin Core developers
2
// Distributed under the MIT software license, see the accompanying
3
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5
#include <dbwrapper.h>
6
7
#include <leveldb/cache.h>
8
#include <leveldb/db.h>
9
#include <leveldb/env.h>
10
#include <leveldb/filter_policy.h>
11
#include <leveldb/helpers/memenv/memenv.h>
12
#include <leveldb/iterator.h>
13
#include <leveldb/options.h>
14
#include <leveldb/slice.h>
15
#include <leveldb/status.h>
16
#include <leveldb/write_batch.h>
17
#include <random.h>
18
#include <serialize.h>
19
#include <span.h>
20
#include <streams.h>
21
#include <util/byte_units.h>
22
#include <util/fs.h>
23
#include <util/fs_helpers.h>
24
#include <util/log.h>
25
#include <util/obfuscation.h>
26
#include <util/strencodings.h>
27
28
#include <algorithm>
29
#include <cassert>
30
#include <cstdarg>
31
#include <cstdint>
32
#include <cstdio>
33
#include <memory>
34
#include <optional>
35
#include <utility>
36
37
0
static auto CharCast(const std::byte* data) { return reinterpret_cast<const char*>(data); }
38
39
bool DestroyDB(const std::string& path_str)
40
0
{
41
0
    return leveldb::DestroyDB(path_str, {}).ok();
42
0
}
43
44
/** Handle database error by throwing dbwrapper_error exception.
45
 */
46
static void HandleError(const leveldb::Status& status)
47
0
{
48
0
    if (status.ok())
49
0
        return;
50
0
    const std::string errmsg = "Fatal LevelDB error: " + status.ToString();
51
0
    LogError("%s", errmsg);
Line
Count
Source
127
0
#define LogError(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Error, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
52
0
    LogInfo("You can use -debug=leveldb to get more complete diagnostic messages");
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
53
0
    throw dbwrapper_error(errmsg);
54
0
}
55
56
class CBitcoinLevelDBLogger : public leveldb::Logger {
57
public:
58
    // This code is adapted from posix_logger.h, which is why it is using vsprintf.
59
    // Please do not do this in normal code
60
0
    void Logv(const char * format, va_list ap) override {
61
0
            if (!util::log::ShouldDebugLog(BCLog::LEVELDB)) {
62
0
                return;
63
0
            }
64
0
            char buffer[500];
65
0
            for (int iter = 0; iter < 2; iter++) {
66
0
                char* base;
67
0
                int bufsize;
68
0
                if (iter == 0) {
69
0
                    bufsize = sizeof(buffer);
70
0
                    base = buffer;
71
0
                }
72
0
                else {
73
0
                    bufsize = 30000;
74
0
                    base = new char[bufsize];
75
0
                }
76
0
                char* p = base;
77
0
                char* limit = base + bufsize;
78
79
                // Print the message
80
0
                if (p < limit) {
81
0
                    va_list backup_ap;
82
0
                    va_copy(backup_ap, ap);
83
                    // Do not use vsnprintf elsewhere in bitcoin source code, see above.
84
0
                    p += vsnprintf(p, limit - p, format, backup_ap);
85
0
                    va_end(backup_ap);
86
0
                }
87
88
                // Truncate to available space if necessary
89
0
                if (p >= limit) {
90
0
                    if (iter == 0) {
91
0
                        continue;       // Try again with larger buffer
92
0
                    }
93
0
                    else {
94
0
                        p = limit - 1;
95
0
                    }
96
0
                }
97
98
                // Add newline if necessary
99
0
                if (p == base || p[-1] != '\n') {
100
0
                    *p++ = '\n';
101
0
                }
102
103
0
                assert(p <= limit);
104
0
                base[std::min(bufsize - 1, (int)(p - base))] = '\0';
105
0
                LogDebug(BCLog::LEVELDB, "%s\n", util::RemoveSuffixView(base, "\n"));
Line
Count
Source
143
0
#define LogDebug(category, ...) detail_LogIfCategoryAndLevelEnabled(category, util::log::ShouldDebugLog, util::log::Level::Debug, __VA_ARGS__)
Line
Count
Source
136
0
    do {                                                                                      \
137
0
        if (shouldlog(category)) {                                                            \
138
0
            detail_LogWithSrcLoc((category), (level), util::log::NO_RATE_LIMIT, __VA_ARGS__); \
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
139
0
        }                                                                                     \
140
0
    } while (0)
106
0
                if (base != buffer) {
107
0
                    delete[] base;
108
0
                }
109
0
                break;
110
0
            }
111
0
    }
112
};
113
114
0
static void SetMaxOpenFiles(leveldb::Options *options) {
115
    // On most platforms the default setting of max_open_files (which is 1000)
116
    // is optimal. On Windows using a large file count is OK because the handles
117
    // do not interfere with select() loops. On 64-bit Unix hosts this value is
118
    // also OK, because up to that amount LevelDB will use an mmap
119
    // implementation that does not use extra file descriptors (the fds are
120
    // closed after being mmap'ed).
121
    //
122
    // Increasing the value beyond the default is dangerous because LevelDB will
123
    // fall back to a non-mmap implementation when the file count is too large.
124
    // On 32-bit Unix host we should decrease the value because the handles use
125
    // up real fds, and we want to avoid fd exhaustion issues.
126
    //
127
    // See PR #12495 for further discussion.
128
129
0
    int default_open_files = options->max_open_files;
130
0
#ifndef WIN32
131
0
    if (sizeof(void*) < 8) {
132
0
        options->max_open_files = 64;
133
0
    }
134
0
#endif
135
0
    LogDebug(BCLog::LEVELDB, "LevelDB using max_open_files=%d (default=%d)\n",
Line
Count
Source
143
0
#define LogDebug(category, ...) detail_LogIfCategoryAndLevelEnabled(category, util::log::ShouldDebugLog, util::log::Level::Debug, __VA_ARGS__)
Line
Count
Source
136
0
    do {                                                                                      \
137
0
        if (shouldlog(category)) {                                                            \
138
0
            detail_LogWithSrcLoc((category), (level), util::log::NO_RATE_LIMIT, __VA_ARGS__); \
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
139
0
        }                                                                                     \
140
0
    } while (0)
136
0
             options->max_open_files, default_open_files);
137
0
}
138
139
static leveldb::Options GetOptions(size_t nCacheSize)
140
0
{
141
0
    leveldb::Options options;
142
0
    options.block_cache = leveldb::NewLRUCache(nCacheSize / 2);
143
0
    options.write_buffer_size = nCacheSize / 4; // up to two write buffers may be held in memory simultaneously
144
0
    options.filter_policy = leveldb::NewBloomFilterPolicy(10);
145
0
    options.compression = leveldb::kNoCompression;
146
0
    options.info_log = new CBitcoinLevelDBLogger();
147
0
    if (leveldb::kMajorVersion > 1 || (leveldb::kMajorVersion == 1 && leveldb::kMinorVersion >= 16)) {
148
        // LevelDB versions before 1.16 consider short writes to be corruption. Only trigger error
149
        // on corruption in later versions.
150
0
        options.paranoid_checks = true;
151
0
    }
152
0
    SetMaxOpenFiles(&options);
153
0
    return options;
154
0
}
155
156
struct CDBBatch::WriteBatchImpl {
157
    leveldb::WriteBatch batch;
158
};
159
160
CDBBatch::CDBBatch(const CDBWrapper& _parent)
161
0
    : parent{_parent},
162
0
      m_impl_batch{std::make_unique<CDBBatch::WriteBatchImpl>()}
163
0
{
164
0
    m_key_scratch.reserve(DBWRAPPER_PREALLOC_KEY_SIZE);
165
0
    m_value_scratch.reserve(DBWRAPPER_PREALLOC_VALUE_SIZE);
166
0
    Clear();
167
0
};
168
169
0
CDBBatch::~CDBBatch() = default;
170
171
void CDBBatch::Clear()
172
0
{
173
0
    m_impl_batch->batch.Clear();
174
0
    assert(m_key_scratch.empty());
175
0
    assert(m_value_scratch.empty());
176
0
}
177
178
void CDBBatch::WriteImpl(std::span<const std::byte> key, DataStream& value)
179
0
{
180
0
    leveldb::Slice slKey(CharCast(key.data()), key.size());
181
0
    dbwrapper_private::GetObfuscation(parent)(value);
182
0
    leveldb::Slice slValue(CharCast(value.data()), value.size());
183
0
    m_impl_batch->batch.Put(slKey, slValue);
184
0
}
185
186
void CDBBatch::EraseImpl(std::span<const std::byte> key)
187
0
{
188
0
    leveldb::Slice slKey(CharCast(key.data()), key.size());
189
0
    m_impl_batch->batch.Delete(slKey);
190
0
}
191
192
size_t CDBBatch::ApproximateSize() const
193
0
{
194
0
    return m_impl_batch->batch.ApproximateSize();
195
0
}
196
197
struct LevelDBContext {
198
    //! custom environment this database is using (may be nullptr in case of default environment)
199
    leveldb::Env* penv;
200
201
    //! database options used
202
    leveldb::Options options;
203
204
    //! options used when reading from the database
205
    leveldb::ReadOptions readoptions;
206
207
    //! options used when iterating over values of the database
208
    leveldb::ReadOptions iteroptions;
209
210
    //! options used when writing to the database
211
    leveldb::WriteOptions writeoptions;
212
213
    //! options used when sync writing to the database
214
    leveldb::WriteOptions syncoptions;
215
216
    //! the database itself
217
    leveldb::DB* pdb;
218
};
219
220
CDBWrapper::CDBWrapper(const DBParams& params)
221
0
    : m_db_context{std::make_unique<LevelDBContext>()}, m_name{fs::PathToString(params.path.stem())}
222
0
{
223
0
    DBContext().penv = nullptr;
224
0
    DBContext().readoptions.verify_checksums = true;
225
0
    DBContext().iteroptions.verify_checksums = true;
226
0
    DBContext().iteroptions.fill_cache = false;
227
0
    DBContext().syncoptions.sync = true;
228
0
    DBContext().options = GetOptions(params.cache_bytes);
229
0
    DBContext().options.create_if_missing = true;
230
0
    DBContext().options.max_file_size = params.max_file_size;
231
0
    assert(!(params.testing_env && params.memory_only));
232
0
    if (params.testing_env) {
233
0
        DBContext().options.env = params.testing_env;
234
0
    } else if (params.memory_only) {
235
0
        DBContext().penv = leveldb::NewMemEnv(leveldb::Env::Default());
236
0
        DBContext().options.env = DBContext().penv;
237
0
    }
238
0
    if (!params.memory_only) {
239
0
        if (params.wipe_data) {
240
0
            LogInfo("Wiping LevelDB in %s", fs::PathToString(params.path));
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
241
0
            leveldb::Status result = leveldb::DestroyDB(fs::PathToString(params.path), DBContext().options);
242
0
            HandleError(result);
243
0
        }
244
0
        if (!params.testing_env) {
245
0
            TryCreateDirectories(params.path);
246
0
        }
247
0
        LogInfo("Opening LevelDB in %s", fs::PathToString(params.path));
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
248
0
    }
249
    // PathToString() return value is safe to pass to leveldb open function,
250
    // because on POSIX leveldb passes the byte string directly to ::open(), and
251
    // on Windows it converts from UTF-8 to UTF-16 before calling ::CreateFileW
252
    // (see env_posix.cc and env_windows.cc).
253
0
    leveldb::Status status = leveldb::DB::Open(DBContext().options, fs::PathToString(params.path), &DBContext().pdb);
254
0
    HandleError(status);
255
0
    LogInfo("Opened LevelDB successfully");
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
256
257
0
    if (params.options.force_compact) {
258
0
        LogInfo("Starting database compaction of %s", fs::PathToString(params.path));
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
259
0
        DBContext().pdb->CompactRange(nullptr, nullptr);
260
0
        LogInfo("Finished database compaction of %s", fs::PathToString(params.path));
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
261
0
    }
262
263
0
    if (!Read(OBFUSCATION_KEY, m_obfuscation) && params.obfuscate && IsEmpty()) {
264
        // Generate and write the new obfuscation key.
265
0
        const Obfuscation obfuscation{FastRandomContext{}.randbytes<Obfuscation::KEY_SIZE>()};
266
0
        assert(!m_obfuscation); // Make sure the key is written without obfuscation.
267
0
        Write(OBFUSCATION_KEY, obfuscation);
268
0
        m_obfuscation = obfuscation;
269
0
        LogInfo("Wrote new obfuscation key for %s: %s", fs::PathToString(params.path), m_obfuscation.HexKey());
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
270
0
    }
271
0
    LogInfo("Using obfuscation key for %s: %s", fs::PathToString(params.path), m_obfuscation.HexKey());
Line
Count
Source
125
0
#define LogInfo(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Info, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
272
0
}
273
274
CDBWrapper::~CDBWrapper()
275
0
{
276
0
    delete DBContext().pdb;
277
0
    DBContext().pdb = nullptr;
278
0
    delete DBContext().options.filter_policy;
279
0
    DBContext().options.filter_policy = nullptr;
280
0
    delete DBContext().options.info_log;
281
0
    DBContext().options.info_log = nullptr;
282
0
    delete DBContext().options.block_cache;
283
0
    DBContext().options.block_cache = nullptr;
284
0
    delete DBContext().penv;
285
0
    DBContext().options.env = nullptr;
286
0
}
287
288
void CDBWrapper::WriteBatch(CDBBatch& batch, bool fSync)
289
0
{
290
0
    const bool log_memory = util::log::ShouldDebugLog(BCLog::LEVELDB);
291
0
    double mem_before = 0;
292
0
    if (log_memory) {
293
0
        mem_before = DynamicMemoryUsage() / double(1_MiB);
294
0
    }
295
0
    leveldb::Status status = DBContext().pdb->Write(fSync ? DBContext().syncoptions : DBContext().writeoptions, &batch.m_impl_batch->batch);
296
0
    HandleError(status);
297
0
    if (log_memory) {
298
0
        double mem_after{DynamicMemoryUsage() / double(1_MiB)};
299
0
        LogDebug(BCLog::LEVELDB, "WriteBatch memory usage: db=%s, before=%.1fMiB, after=%.1fMiB\n",
Line
Count
Source
143
0
#define LogDebug(category, ...) detail_LogIfCategoryAndLevelEnabled(category, util::log::ShouldDebugLog, util::log::Level::Debug, __VA_ARGS__)
Line
Count
Source
136
0
    do {                                                                                      \
137
0
        if (shouldlog(category)) {                                                            \
138
0
            detail_LogWithSrcLoc((category), (level), util::log::NO_RATE_LIMIT, __VA_ARGS__); \
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
139
0
        }                                                                                     \
140
0
    } while (0)
300
0
                 m_name, mem_before, mem_after);
301
0
    }
302
0
}
303
304
size_t CDBWrapper::DynamicMemoryUsage() const
305
0
{
306
0
    std::string memory;
307
0
    std::optional<size_t> parsed;
308
0
    if (!DBContext().pdb->GetProperty("leveldb.approximate-memory-usage", &memory) || !(parsed = ToIntegral<size_t>(memory))) {
309
0
        LogDebug(BCLog::LEVELDB, "Failed to get approximate-memory-usage property\n");
Line
Count
Source
143
0
#define LogDebug(category, ...) detail_LogIfCategoryAndLevelEnabled(category, util::log::ShouldDebugLog, util::log::Level::Debug, __VA_ARGS__)
Line
Count
Source
136
0
    do {                                                                                      \
137
0
        if (shouldlog(category)) {                                                            \
138
0
            detail_LogWithSrcLoc((category), (level), util::log::NO_RATE_LIMIT, __VA_ARGS__); \
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
139
0
        }                                                                                     \
140
0
    } while (0)
310
0
        return 0;
311
0
    }
312
0
    return parsed.value();
313
0
}
314
315
std::optional<std::string> CDBWrapper::ReadImpl(std::span<const std::byte> key) const
316
0
{
317
0
    leveldb::Slice slKey(CharCast(key.data()), key.size());
318
0
    std::string strValue;
319
0
    leveldb::Status status = DBContext().pdb->Get(DBContext().readoptions, slKey, &strValue);
320
0
    if (!status.ok()) {
321
0
        if (status.IsNotFound())
322
0
            return std::nullopt;
323
0
        LogError("LevelDB read failure: %s", status.ToString());
Line
Count
Source
127
0
#define LogError(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Error, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
324
0
        HandleError(status);
325
0
    }
326
0
    return strValue;
327
0
}
328
329
bool CDBWrapper::ExistsImpl(std::span<const std::byte> key) const
330
0
{
331
0
    leveldb::Slice slKey(CharCast(key.data()), key.size());
332
333
0
    std::string strValue;
334
0
    leveldb::Status status = DBContext().pdb->Get(DBContext().readoptions, slKey, &strValue);
335
0
    if (!status.ok()) {
336
0
        if (status.IsNotFound())
337
0
            return false;
338
0
        LogError("LevelDB read failure: %s", status.ToString());
Line
Count
Source
127
0
#define LogError(...) detail_LogWithSrcLoc(BCLog::LogFlags::ALL, util::log::Level::Error, __VA_ARGS__)
Line
Count
Source
119
0
#define detail_LogWithSrcLoc(category, level, ...) util::log::LogPrintFormatInternal(SourceLocation{__func__}, category, level, __VA_ARGS__)
339
0
        HandleError(status);
340
0
    }
341
0
    return true;
342
0
}
343
344
size_t CDBWrapper::EstimateSizeImpl(std::span<const std::byte> key1, std::span<const std::byte> key2) const
345
0
{
346
0
    leveldb::Slice slKey1(CharCast(key1.data()), key1.size());
347
0
    leveldb::Slice slKey2(CharCast(key2.data()), key2.size());
348
0
    uint64_t size = 0;
349
0
    leveldb::Range range(slKey1, slKey2);
350
0
    DBContext().pdb->GetApproximateSizes(&range, 1, &size);
351
0
    return size;
352
0
}
353
354
bool CDBWrapper::IsEmpty()
355
0
{
356
0
    std::unique_ptr<CDBIterator> it(NewIterator());
357
0
    it->SeekToFirst();
358
0
    return !(it->Valid());
359
0
}
360
361
struct CDBIterator::IteratorImpl {
362
    const std::unique_ptr<leveldb::Iterator> iter;
363
364
0
    explicit IteratorImpl(leveldb::Iterator* _iter) : iter{_iter} {}
365
};
366
367
0
CDBIterator::CDBIterator(const CDBWrapper& _parent, std::unique_ptr<IteratorImpl> _piter) : parent(_parent),
368
0
                                                                                            m_impl_iter(std::move(_piter))
369
0
{
370
0
    m_scratch.reserve(DBWRAPPER_PREALLOC_KEY_SIZE);
371
0
}
372
373
CDBIterator* CDBWrapper::NewIterator()
374
0
{
375
0
    return new CDBIterator{*this, std::make_unique<CDBIterator::IteratorImpl>(DBContext().pdb->NewIterator(DBContext().iteroptions))};
376
0
}
377
378
void CDBIterator::SeekImpl(std::span<const std::byte> key)
379
0
{
380
0
    leveldb::Slice slKey(CharCast(key.data()), key.size());
381
0
    m_impl_iter->iter->Seek(slKey);
382
0
}
383
384
std::span<const std::byte> CDBIterator::GetKeyImpl() const
385
0
{
386
    // The returned span borrows from the current iterator entry and is only
387
    // valid until the iterator is advanced.
388
0
    return MakeByteSpan(m_impl_iter->iter->key());
389
0
}
390
391
std::span<const std::byte> CDBIterator::GetValueImpl() const
392
0
{
393
0
    return MakeByteSpan(m_impl_iter->iter->value());
394
0
}
395
396
0
CDBIterator::~CDBIterator() = default;
397
0
bool CDBIterator::Valid() const { return m_impl_iter->iter->Valid(); }
398
0
void CDBIterator::SeekToFirst() { m_impl_iter->iter->SeekToFirst(); }
399
0
void CDBIterator::Next() { m_impl_iter->iter->Next(); }
400
401
namespace dbwrapper_private {
402
403
const Obfuscation& GetObfuscation(const CDBWrapper& w)
404
0
{
405
0
    return w.m_obfuscation;
406
0
}
407
408
} // namespace dbwrapper_private