# bash programmable completion for bitcoin-cli(1)

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

# bash programmable completion for bitcoind(1) and bitcoin-qt(1)

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

Source: https://github.com/bitcoin/bitcoin

Files: *

License: Expat

Comment: The Bitcoin Core Developers encompasses the current developers listed on bitcoin.org,

as well as the numerous contributors to the project.

security-check.py and test-security-check.py

============================================

symbol-check.py

===============

#!/usr/bin/env python3

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

'''

Exit status will be 0 if successful, and the program will be silent.

Otherwise the exit status will be 1 and it will log which executables failed which checks.

'''

import subprocess

import sys

READELF_CMD = os.getenv('READELF', '/usr/bin/readelf')

OBJDUMP_CMD = os.getenv('OBJDUMP', '/usr/bin/objdump')

NONFATAL = {} # checks which are non-fatal for now but only generate a warning

def check_ELF_PIE(executable):

(arch,bits) = get_PE_dll_characteristics(executable)

return (bits & IMAGE_DLL_CHARACTERISTICS_NX_COMPAT) == IMAGE_DLL_CHARACTERISTICS_NX_COMPAT

CHECKS = {

'ELF': [

('PIE', check_ELF_PIE),

('DYNAMIC_BASE', check_PE_DYNAMIC_BASE),

('HIGH_ENTROPY_VA', check_PE_HIGH_ENTROPY_VA),

('NX', check_PE_NX)

]

}

return 'PE'

elif magic.startswith(b'\x7fELF'):

return 'ELF'

return None

if __name__ == '__main__':

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

'''

A script to check that the (Linux) executables produced by gitian only contain

Example usage:

import sys

import os

#

#

#

#

# Taking the minimum of these as our target.

#

#

MAX_VERSIONS = {

'LIBATOMIC': (1,0)

}

# See here for a description of _IO_stdin_used:

# Ignore symbols that are exported as part of every executable

IGNORE_EXPORTS = {

}

READELF_CMD = os.getenv('READELF', '/usr/bin/readelf')

CPPFILT_CMD = os.getenv('CPPFILT', '/usr/bin/c++filt')

'libgcc_s.so.1', # GCC base support

'libc.so.6', # C library

'libpthread.so.0', # threading

'libm.so.6', # math library

'librt.so.1', # real-time (clock)

'libatomic.so.1',

#!/usr/bin/env python3

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

'''

os.chdir('gitian-builder')

os.makedirs('inputs', exist_ok=True)

subprocess.check_call(["echo '5a60e0a4b3e0b4d655317b2f12a810211c50242138322b16e7e01c6fbb89d92f inputs/osslsigncode-2.0.tar.gz' | sha256sum -c"], shell=True)

subprocess.check_call(['make', '-C', '../bitcoin/depends', 'download', 'SOURCES_PATH=' + os.getcwd() + '/cache/common'])

FAKETIME_PROGS="date ar ranlib nm"

HOST_CFLAGS="-O2 -g"

HOST_CXXFLAGS="-O2 -g"

export QT_RCC_TEST=1

export QT_RCC_SOURCE_DATE_OVERRIDE=1

export TZ="UTC"

mkdir -p ${WRAP_DIR}

if test -n "$GBUILD_CACHE_ENABLED"; then

export SOURCES_PATH=${GBUILD_COMMON_CACHE}

rm -f ${WRAP_DIR}/${prog}

cat << EOF > ${WRAP_DIR}/${prog}

#!/usr/bin/env bash

for var in "\$@"

do

if [ "\$var" = "-m32" ]; then

done

cd bitcoin

# Build dependencies for each host

for i in $HOSTS; do

EXTRA_INCLUDES="$EXTRA_INCLUDES_BASE/$i"

# Create the release tarball using (arbitrarily) the first host

./autogen.sh

make dist

# Correct tar file order

mkdir -p temp

pushd temp

# Extract the release tarball into a dir for each host and build

for i in ${HOSTS}; do

export PATH=${BASEPREFIX}/${i}/native/bin:${ORIGPATH}

mkdir -p distsrc-${i}

cd distsrc-${i}

mkdir -p ${INSTALLPATH}

tar --strip-components=1 -xf ../$SOURCEDIST

WRAP_DIR=$HOME/wrapped

mkdir -p ${WRAP_DIR}

FAKETIME_PROGS="dmg genisoimage"

# Create global faketime wrappers

set -e -o pipefail

WRAP_DIR=$HOME/wrapped

CONFIGFLAGS="--enable-reduce-exports --disable-bench --disable-gui-tests GENISOIMAGE=$WRAP_DIR/genisoimage"

FAKETIME_HOST_PROGS=""

FAKETIME_PROGS="ar ranlib date dmg genisoimage"

export QT_RCC_TEST=1

export QT_RCC_SOURCE_DATE_OVERRIDE=1

export TZ="UTC"

mkdir -p ${WRAP_DIR}

if test -n "$GBUILD_CACHE_ENABLED"; then

export SOURCES_PATH=${GBUILD_COMMON_CACHE}

export PATH=${WRAP_DIR}:${PATH}

cd bitcoin

mkdir -p ${BASEPREFIX}/SDKs

tar -C ${BASEPREFIX}/SDKs -xf ${BUILD_DIR}/MacOSX10.11.sdk.tar.gz

# Create the release tarball using (arbitrarily) the first host

./autogen.sh

make dist

# Correct tar file order

mkdir -p temp

export PATH=${BASEPREFIX}/${i}/native/bin:${ORIGPATH}

mkdir -p distsrc-${i}

cd distsrc-${i}

mkdir -p ${INSTALLPATH}

tar --strip-components=1 -xf ../$SOURCEDIST

CONFIG_SITE=${BASEPREFIX}/${i}/share/config.site ./configure --prefix=/ --disable-ccache --disable-maintainer-mode --disable-dependency-tracking ${CONFIGFLAGS}

make ${MAKEOPTS}

make install-strip DESTDIR=${INSTALLPATH}

make osx_volname

script: |

set -e -o pipefail

SIGDIR=${BUILD_DIR}/signature/win

UNSIGNED_DIR=${BUILD_DIR}/unsigned

./configure --without-gsf --without-curl --disable-dependency-tracking

make

find ${UNSIGNED_DIR} -name "*-unsigned.exe" | while read i; do

./osslsigncode attach-signature -in "${i}" -out "${OUTDIR}/${OUTFILE}" -sigin "${SIGDIR}/${INFILE}.pem"

done

export QT_RCC_TEST=1

export QT_RCC_SOURCE_DATE_OVERRIDE=1

export TZ="UTC"

mkdir -p ${WRAP_DIR}

if test -n "$GBUILD_CACHE_ENABLED"; then

export SOURCES_PATH=${GBUILD_COMMON_CACHE}

export PATH=${WRAP_DIR}:${PATH}

cd bitcoin

# Build dependencies for each host

for i in $HOSTS; do

make ${MAKEOPTS} -C ${BASEPREFIX} HOST="${i}"

# Create the release tarball using (arbitrarily) the first host

./autogen.sh

make dist

# Correct tar file order

mkdir -p temp

pushd temp

export PATH=${BASEPREFIX}/${i}/native/bin:${ORIGPATH}

mkdir -p distsrc-${i}

cd distsrc-${i}

mkdir -p ${INSTALLPATH}

tar --strip-components=1 -xf ../$SOURCEDIST

#genesis=000000000933ea01ad0ee984209779baaec3ced90fa3f408719526f8d77f4943

#input=/home/example/.bitcoin/testnet3/blocks

# "output" option causes blockchain files to be written to the given location,

# with "output_file" ignored. If not used, "output_file" is used instead.

# output=/home/example/blockchain_directory

#

# linearize-data.py: Construct a linear, no-fork version of the chain.

#

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#

#

# linearize-hashes.py: List blocks in a linear, no-fork version of the chain.

#

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#

#!/bin/sh

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/bin/sh

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/usr/bin/env bash

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/usr/bin/env bash

#

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/usr/bin/env python3

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#

Memcheck:Cond

obj:*/libdb_cxx-*.so

fun:__log_put

}

{

Suppress libdb warning

pwrite64(buf)

fun:pwrite

fun:__os_io

obj:*/libdb_cxx-*.so

}

{

Suppress leveldb warning (leveldb::InitModule()) - https://github.com/google/leveldb/issues/113

Memcheck:Leak

match-leak-kinds: reachable

fun:_ZN7leveldbL14InitDefaultEnvEv

}

{

Suppress wcsnrtombs glibc SSE4 warning (could be related: https://stroika.atlassian.net/browse/STK-626)

Memcheck:Addr16

fun:__wcsnlen_sse4_1

fun:wcsnrtombs

}

{

Suppress boost::filesystem warning (fixed in boost 1.70: https://github.com/boostorg/filesystem/commit/bbe9d1771e5d679b3f10c42a58fc81f7e8c024a9)

Memcheck:Cond

fun:_ZN5boost10filesystem6detail28directory_iterator_incrementERNS0_18directory_iteratorEPNS_6system10error_codeE

obj:*/libboost_filesystem.so.*

}

{

Memcheck:Leak

match-leak-kinds: reachable

fun:_Znwm

fun:_ZN5boost10filesystem8absoluteERKNS0_4pathES3_

}

{

In order to check the commit signatures, you must add the trusted PGP keys to your machine. [GnuPG](https://gnupg.org/) may be used to import the trusted keys by running the following command:

```sh

```

Key expiry/revocation

#!/bin/sh

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/usr/bin/env bash

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/usr/bin/env python3

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

"""Verify commits against a trusted keys list."""

#!/usr/bin/env bash

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.

#!/bin/sh

# Distributed under the MIT software license, see the accompanying

# file COPYING or http://www.opensource.org/licenses/mit-license.php.