diff options
author | pierrenn <git@pnn.sh> | 2020-04-08 15:10:28 +0900 |
---|---|---|
committer | pierrenn <git@pnn.sh> | 2020-04-09 08:32:00 +0900 |
commit | 2748e8793267126c5b40621d75d1930e358f057e (patch) | |
tree | 2c60aea1c57f44cab3b835ed33b3ccae2e40b950 | |
parent | 1b151e3ffce7c1a2ee46bf280cc1d96775d1f91e (diff) | |
download | bitcoin-2748e8793267126c5b40621d75d1930e358f057e.tar.xz |
script: prevent UB when computing abs value for num opcode serialize
-rw-r--r-- | src/script/script.h | 2 | ||||
-rw-r--r-- | src/test/fuzz/integer.cpp | 6 | ||||
-rw-r--r-- | src/test/fuzz/scriptnum_ops.cpp | 6 |
3 files changed, 3 insertions, 11 deletions
diff --git a/src/script/script.h b/src/script/script.h index 7aaa10b60b..866517ba2d 100644 --- a/src/script/script.h +++ b/src/script/script.h @@ -329,7 +329,7 @@ public: std::vector<unsigned char> result; const bool neg = value < 0; - uint64_t absvalue = neg ? -value : value; + uint64_t absvalue = neg ? ~static_cast<uint64_t>(value) + 1 : static_cast<uint64_t>(value); while(absvalue) { diff --git a/src/test/fuzz/integer.cpp b/src/test/fuzz/integer.cpp index fff2fabd17..78ecc47663 100644 --- a/src/test/fuzz/integer.cpp +++ b/src/test/fuzz/integer.cpp @@ -135,11 +135,7 @@ void test_one_input(const std::vector<uint8_t>& buffer) const CScriptNum script_num{i64}; (void)script_num.getint(); - // Avoid negation failure: - // script/script.h:332:35: runtime error: negation of -9223372036854775808 cannot be represented in type 'int64_t' (aka 'long'); cast to an unsigned type to negate this value to itself - if (script_num != CScriptNum{std::numeric_limits<int64_t>::min()}) { - (void)script_num.getvch(); - } + (void)script_num.getvch(); const arith_uint256 au256 = UintToArith256(u256); assert(ArithToUint256(au256) == u256); diff --git a/src/test/fuzz/scriptnum_ops.cpp b/src/test/fuzz/scriptnum_ops.cpp index 42b1432f13..f4e079fb89 100644 --- a/src/test/fuzz/scriptnum_ops.cpp +++ b/src/test/fuzz/scriptnum_ops.cpp @@ -129,10 +129,6 @@ void test_one_input(const std::vector<uint8_t>& buffer) break; } (void)script_num.getint(); - // Avoid negation failure: - // script/script.h:332:35: runtime error: negation of -9223372036854775808 cannot be represented in type 'int64_t' (aka 'long'); cast to an unsigned type to negate this value to itself - if (script_num != CScriptNum{std::numeric_limits<int64_t>::min()}) { - (void)script_num.getvch(); - } + (void)script_num.getvch(); } } |