/****************************************************************************** * Copyright © 2014-2019 The SuperNET Developers. * * * * See the AUTHORS, DEVELOPER-AGREEMENT and LICENSE files at * * the top-level directory of this distribution for the individual copyright * * holder information and the developer policies on copyright and licensing. * * * * Unless otherwise agreed in a custom licensing agreement, no part of the * * SuperNET software, including this file may be copied, modified, propagated * * or distributed except according to the terms contained in the LICENSE file * * * * Removal or modification of this copyright notice is prohibited. * * * ******************************************************************************/ #include "cc/eval.h" #include "crosschain.h" #include "importcoin.h" #include "main.h" #include "notarisationdb.h" #include "merkleblock.h" #include "cc/CCinclude.h" /* * The crosschain workflow. * * 3 chains, A, B, and KMD. We would like to prove TX on B. * There is a notarisation, nA0, which will include TX via an MoM. * The notarisation nA0 must fall between 2 notarisations of B, * ie, nB0 and nB1. An MoMoM including this range is propagated to * B in notarisation receipt (backnotarisation) bnB2. * * A: TX bnA0 * \ / * KMD: nB0 nA0 nB1 nB2 * \ \ \ * B: bnB0 bnB1 bnB2 */ // XXX: There are potential crashes wherever we access chainActive without a lock, // because it might be disconnecting blocks at the same time. int NOTARISATION_SCAN_LIMIT_BLOCKS = 1440; CBlockIndex *komodo_getblockindex(uint256 hash); /* On KMD */ uint256 CalculateProofRoot(const char* symbol, uint32_t targetCCid, int kmdHeight, std::vector &moms, uint256 &destNotarisationTxid) { /* * Notaries don't wait for confirmation on KMD before performing a backnotarisation, * but we need a determinable range that will encompass all merkle roots. Include MoMs * including the block height of the last notarisation until the height before the * previous notarisation. * * kmdHeight notarisations-0 notarisations-1 * *********************| * > scan backwards > */ if (targetCCid < 2) return uint256(); if (kmdHeight < 0 || kmdHeight > chainActive.Height()) return uint256(); int seenOwnNotarisations = 0, i = 0; int authority = GetSymbolAuthority(symbol); std::set tmp_moms; for (i=0; i kmdHeight) break; NotarisationsInBlock notarisations; uint256 blockHash = *chainActive[kmdHeight-i]->phashBlock; if (!GetBlockNotarisations(blockHash, notarisations)) continue; // See if we have an own notarisation in this block BOOST_FOREACH(Notarisation& nota, notarisations) { if (strcmp(nota.second.symbol, symbol) == 0) { seenOwnNotarisations++; if (seenOwnNotarisations == 1) destNotarisationTxid = nota.first; else if (seenOwnNotarisations == 7) goto end; //break; } } if (seenOwnNotarisations >= 1) { BOOST_FOREACH(Notarisation& nota, notarisations) { if (GetSymbolAuthority(nota.second.symbol) == authority) if (nota.second.ccId == targetCCid) { tmp_moms.insert(nota.second.MoM); //fprintf(stderr, "added mom: %s\n",nota.second.MoM.GetHex().data()); } } } } // Not enough own notarisations found to return determinate MoMoM destNotarisationTxid = uint256(); moms.clear(); return uint256(); end: // add set to vector. Set makes sure there are no dupes included. moms.clear(); std::copy(tmp_moms.begin(), tmp_moms.end(), std::back_inserter(moms)); //fprintf(stderr, "SeenOwnNotarisations.%i moms.size.%li blocks scanned.%i\n",seenOwnNotarisations, moms.size(), i); return GetMerkleRoot(moms); } /* * Get a notarisation from a given height * * Will scan notarisations leveldb up to a limit */ template int ScanNotarisationsFromHeight(int nHeight, const IsTarget f, Notarisation &found) { int limit = std::min(nHeight + NOTARISATION_SCAN_LIMIT_BLOCKS, chainActive.Height()); int start = std::max(nHeight, 1); for (int h=start; hphashBlock, notarisations)) continue; BOOST_FOREACH(found, notarisations) { if (f(found)) { return h; } } } return 0; } /* On KMD */ TxProof GetCrossChainProof(const uint256 txid, const char* targetSymbol, uint32_t targetCCid, const TxProof assetChainProof, int32_t offset) { /* * Here we are given a proof generated by an assetchain A which goes from given txid to * an assetchain MoM. We need to go from the notarisationTxid for A to the MoMoM range of the * backnotarisation for B (given by kmdheight of notarisation), find the MoM within the MoMs for * that range, and finally extend the proof to lead to the MoMoM (proof root). */ EvalRef eval; uint256 MoM = assetChainProof.second.Exec(txid); // Get a kmd height for given notarisation Txid int kmdHeight; { CTransaction sourceNotarisation; uint256 hashBlock; CBlockIndex blockIdx; if (!eval->GetTxConfirmed(assetChainProof.first, sourceNotarisation, blockIdx)) throw std::runtime_error("Notarisation not found"); kmdHeight = blockIdx.GetHeight(); } // We now have a kmdHeight of the notarisation from chain A. So we know that a MoM exists // at that height. // If we call CalculateProofRoot with that height, it'll scan backwards, until it finds // a notarisation from B, and it might not include our notarisation from A // at all. So, the thing we need to do is scan forwards to find the notarisation for B, // that is inclusive of A. Notarisation nota; auto isTarget = [&](Notarisation ¬a) { return strcmp(nota.second.symbol, targetSymbol) == 0; }; kmdHeight = ScanNotarisationsFromHeight(kmdHeight, isTarget, nota); if (!kmdHeight) throw std::runtime_error("Cannot find notarisation for target inclusive of source"); if ( offset != 0 ) kmdHeight += offset; // Get MoMs for kmd height and symbol std::vector moms; uint256 targetChainNotarisationTxid; uint256 MoMoM = CalculateProofRoot(targetSymbol, targetCCid, kmdHeight, moms, targetChainNotarisationTxid); if (MoMoM.IsNull()) throw std::runtime_error("No MoMs found"); // Find index of source MoM in MoMoM int nIndex; for (nIndex=0; nIndex vBranch; { CBlock fakeBlock; for (int i=0; i payouts; std::vector rawproof; if (!UnmarshalImportTx(importTx, proof, burnTx, payouts)) throw std::runtime_error("Couldn't unmarshal importTx"); std::string targetSymbol; uint32_t targetCCid; uint256 payoutsHash; if (!UnmarshalBurnTx(burnTx, targetSymbol, &targetCCid, payoutsHash, rawproof)) throw std::runtime_error("Couldn't unmarshal burnTx"); TxProof merkleBranch; if( !proof.IsMerkleBranch(merkleBranch) ) throw std::runtime_error("Incorrect import tx proof"); TxProof newMerkleBranch = GetCrossChainProof(burnTx.GetHash(), targetSymbol.data(), targetCCid, merkleBranch, offset); ImportProof newProof(newMerkleBranch); importTx = MakeImportCoinTransaction(newProof, burnTx, payouts); } bool IsSameAssetChain(const Notarisation ¬a) { return strcmp(nota.second.symbol, ASSETCHAINS_SYMBOL) == 0; }; /* On assetchain */ bool GetNextBacknotarisation(uint256 kmdNotarisationTxid, Notarisation &out) { /* * Here we are given a txid, and a proof. * We go from the KMD notarisation txid to the backnotarisation, * then jump to the next backnotarisation, which contains the corresponding MoMoM. */ Notarisation bn; if (!GetBackNotarisation(kmdNotarisationTxid, bn)) return false; // Need to get block height of that backnotarisation EvalRef eval; CBlockIndex block; CTransaction tx; if (!eval->GetTxConfirmed(bn.first, tx, block)){ fprintf(stderr, "Can't get height of backnotarisation, this should not happen\n"); return false; } return (bool) ScanNotarisationsFromHeight(block.GetHeight()+1, &IsSameAssetChain, out); } bool CheckMoMoM(uint256 kmdNotarisationHash, uint256 momom) { /* * Given a notarisation hash and an MoMoM. Backnotarisations may arrive out of order * or multiple in the same block. So dereference the notarisation hash to the corresponding * backnotarisation and scan around the kmdheight to see if the MoMoM is a match. * This is a sledgehammer approach... */ Notarisation bn; if (!GetBackNotarisation(kmdNotarisationHash, bn)) return false; // Need to get block height of that backnotarisation EvalRef eval; CBlockIndex block; CTransaction tx; if (!eval->GetTxConfirmed(bn.first, tx, block)){ fprintf(stderr, "Can't get height of backnotarisation, this should not happen\n"); return false; } Notarisation nota; auto checkMoMoM = [&](Notarisation ¬a) { return nota.second.MoMoM == momom; }; return (bool) ScanNotarisationsFromHeight(block.GetHeight()-100, checkMoMoM, nota); } /* * Check notaries approvals for the txoutproofs of burn tx * (alternate check if MoMoM check has failed) * Params: * burntxid - txid of burn tx on the source chain * rawproof - array of txids of notaries' proofs */ bool CheckNotariesApproval(uint256 burntxid, const std::vector & notaryTxids) { int count = 0; // get notaries: uint8_t notaries_pubkeys[64][33]; std::vector< std::vector > alreadySigned; //unmarshal notaries approval txids for(auto notarytxid : notaryTxids ) { EvalRef eval; CBlockIndex block; CTransaction notarytx; // tx with notary approval of txproof existence // get notary approval tx if (eval->GetTxConfirmed(notarytxid, notarytx, block)) { std::vector vopret; if (!notarytx.vout.empty() && GetOpReturnData(notarytx.vout.back().scriptPubKey, vopret)) { std::vector txoutproof; if (E_UNMARSHAL(vopret, ss >> txoutproof)) { CMerkleBlock merkleBlock; std::vector prooftxids; // extract block's merkle tree if (E_UNMARSHAL(txoutproof, ss >> merkleBlock)) { // extract proven txids: merkleBlock.txn.ExtractMatches(prooftxids); if (merkleBlock.txn.ExtractMatches(prooftxids) != merkleBlock.header.hashMerkleRoot || // check block merkle root is correct std::find(prooftxids.begin(), prooftxids.end(), burntxid) != prooftxids.end()) { // check burn txid is in proven txids list if (komodo_notaries(notaries_pubkeys, block.GetHeight(), block.GetBlockTime()) >= 0) { // check it is a notary who signed approved tx: int i; for (i = 0; i < sizeof(notaries_pubkeys) / sizeof(notaries_pubkeys[0]); i++) { std::vector vnotarypubkey(notaries_pubkeys[i], notaries_pubkeys[i] + 33); #ifdef TESTMODE char test_notary_pubkey_hex[] = "029fa302968bbae81f41983d2ec20445557b889d31227caec5d910d19b7510ef86"; uint8_t test_notary_pubkey33[33]; decode_hex(test_notary_pubkey33, 33, test_notary_pubkey_hex); #endif if (CheckVinPubKey(notarytx, 0, notaries_pubkeys[i]) // is signed by a notary? && std::find(alreadySigned.begin(), alreadySigned.end(), vnotarypubkey) == alreadySigned.end() // check if notary not re-used #ifdef TESTMODE || CheckVinPubKey(notarytx, 0, test_notary_pubkey33) // test #endif ) { alreadySigned.push_back(vnotarypubkey); count++; LOGSTREAM("importcoin", CCLOG_DEBUG1, stream << "CheckNotariesApproval() notary approval checked, count=" << count << std::endl); break; } } if (i == sizeof(notaries_pubkeys) / sizeof(notaries_pubkeys[0])) LOGSTREAM("importcoin", CCLOG_DEBUG1, stream << "CheckNotariesApproval() txproof not signed by a notary or reused" << std::endl); } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() cannot get current notaries pubkeys" << std::endl); } } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() burntxid not found in txoutproof or incorrect txoutproof" << std::endl); } } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() could not unmarshal merkleBlock" << std::endl); } } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() could not unmarshal txoutproof" << std::endl); } } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() no opret in the notary tx" << std::endl); } } else { LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() could not load notary tx" << std::endl); } } bool retcode; #ifdef TESTMODE if (count < 1) { // 1 for test #else if (count < 5) { #endif LOGSTREAM("importcoin", CCLOG_INFO, stream << "CheckNotariesApproval() not enough signed notary transactions=" << count << std::endl); retcode = false; } else retcode = true; return retcode; } /* * On assetchain * in: txid * out: pair */ TxProof GetAssetchainProof(uint256 hash,CTransaction burnTx) { int nIndex; CBlockIndex* blockIndex; Notarisation nota; std::vector branch; { uint256 blockHash; CTransaction tx; if (!GetTransaction(hash, tx, blockHash, true)) throw std::runtime_error("cannot find transaction"); if (blockHash.IsNull()) throw std::runtime_error("tx still in mempool"); blockIndex = komodo_getblockindex(blockHash); int h = blockIndex->GetHeight(); // The assumption here is that the first notarisation for a height GTE than // the transaction block height will contain the corresponding MoM. If there // are sequence issues with the notarisations this may fail. auto isTarget = [&](Notarisation ¬a) { if (!IsSameAssetChain(nota)) return false; return nota.second.height >= blockIndex->GetHeight(); }; if (!ScanNotarisationsFromHeight(blockIndex->GetHeight(), isTarget, nota)) throw std::runtime_error("backnotarisation not yet confirmed"); // index of block in MoM leaves nIndex = nota.second.height - blockIndex->GetHeight(); } // build merkle chain from blocks to MoM { std::vector leaves, tree; for (int i=0; ihashMerkleRoot; leaves.push_back(mRoot); } bool fMutated; BuildMerkleTree(&fMutated, leaves, tree); branch = GetMerkleBranch(nIndex, leaves.size(), tree); // Check branch uint256 ourResult = SafeCheckMerkleBranch(blockIndex->hashMerkleRoot, branch, nIndex); if (nota.second.MoM != ourResult) throw std::runtime_error("Failed merkle block->MoM"); } // Now get the tx merkle branch { CBlock block; if (fHavePruned && !(blockIndex->nStatus & BLOCK_HAVE_DATA) && blockIndex->nTx > 0) throw std::runtime_error("Block not available (pruned data)"); if(!ReadBlockFromDisk(block, blockIndex,1)) throw std::runtime_error("Can't read block from disk"); // Locate the transaction in the block int nTxIndex; for (nTxIndex = 0; nTxIndex < (int)block.vtx.size(); nTxIndex++) if (block.vtx[nTxIndex].GetHash() == hash) break; if (nTxIndex == (int)block.vtx.size()) throw std::runtime_error("Error locating tx in block"); std::vector txBranch = block.GetMerkleBranch(nTxIndex); // Check branch if (block.hashMerkleRoot != CBlock::CheckMerkleBranch(hash, txBranch, nTxIndex)) throw std::runtime_error("Failed merkle tx->block"); // concatenate branches nIndex = (nIndex << txBranch.size()) + nTxIndex; branch.insert(branch.begin(), txBranch.begin(), txBranch.end()); } // Check the proof if (nota.second.MoM != CBlock::CheckMerkleBranch(hash, branch, nIndex)) throw std::runtime_error("Failed validating MoM"); // All done! CDataStream ssProof(SER_NETWORK, PROTOCOL_VERSION); return std::make_pair(nota.second.txHash, MerkleBranch(nIndex, branch)); }