Batch.cpp

#include <xrpld/app/tx/apply.h>
#include <xrpld/app/tx/detail/Batch.h>
 
#include <xrpl/basics/Log.h>
#include <xrpl/ledger/Sandbox.h>
#include <xrpl/ledger/View.h>
#include <xrpl/protocol/Feature.h>
#include <xrpl/protocol/Indexes.h>
#include <xrpl/protocol/TER.h>
#include <xrpl/protocol/TxFlags.h>
 
namespace ripple {
 
XRPAmount
Batch::calculateBaseFee(ReadView const& view, STTx const& tx)
{
    XRPAmount const maxAmount{
        std::numeric_limits<XRPAmount::value_type>::max()};
 
    // batchBase: view.fees().base for batch processing + default base fee
    XRPAmount const baseFee = Transactor::calculateBaseFee(view, tx);
 
    // LCOV_EXCL_START
    if (baseFee > maxAmount - view.fees().base)
    {
        JLOG(debugLog().error()) << "BatchTrace: Base fee overflow detected.";
        return XRPAmount{INITIAL_XRP};
    }
    // LCOV_EXCL_STOP
 
    XRPAmount const batchBase = view.fees().base + baseFee;
 
    // Calculate the Inner Txn Fees
    XRPAmount txnFees{0};
    if (tx.isFieldPresent(sfRawTransactions))
    {
        auto const& txns = tx.getFieldArray(sfRawTransactions);
 
        // LCOV_EXCL_START
        if (txns.size() > maxBatchTxCount)
        {
            JLOG(debugLog().error())
                << "BatchTrace: Raw Transactions array exceeds max entries.";
            return XRPAmount{INITIAL_XRP};
        }
        // LCOV_EXCL_STOP
 
        for (STObject txn : txns)
        {
            STTx const stx = STTx{std::move(txn)};
 
            // LCOV_EXCL_START
            if (stx.getTxnType() == ttBATCH)
            {
                JLOG(debugLog().error())
                    << "BatchTrace: Inner Batch transaction found.";
                return XRPAmount{INITIAL_XRP};
            }
            // LCOV_EXCL_STOP
 
            auto const fee = ripple::calculateBaseFee(view, stx);
            // LCOV_EXCL_START
            if (txnFees > maxAmount - fee)
            {
                JLOG(debugLog().error())
                    << "BatchTrace: XRPAmount overflow in txnFees calculation.";
                return XRPAmount{INITIAL_XRP};
            }
            // LCOV_EXCL_STOP
            txnFees += fee;
        }
    }
 
    // Calculate the Signers/BatchSigners Fees
    std::int32_t signerCount = 0;
    if (tx.isFieldPresent(sfBatchSigners))
    {
        auto const& signers = tx.getFieldArray(sfBatchSigners);
 
        // LCOV_EXCL_START
        if (signers.size() > maxBatchTxCount)
        {
            JLOG(debugLog().error())
                << "BatchTrace: Batch Signers array exceeds max entries.";
            return XRPAmount{INITIAL_XRP};
        }
        // LCOV_EXCL_STOP
 
        for (STObject const& signer : signers)
        {
            if (signer.isFieldPresent(sfTxnSignature))
                signerCount += 1;
            else if (signer.isFieldPresent(sfSigners))
                signerCount += signer.getFieldArray(sfSigners).size();
        }
    }
 
    // LCOV_EXCL_START
    if (signerCount > 0 && view.fees().base > maxAmount / signerCount)
    {
        JLOG(debugLog().error())
            << "BatchTrace: XRPAmount overflow in signerCount calculation.";
        return XRPAmount{INITIAL_XRP};
    }
    // LCOV_EXCL_STOP
 
    XRPAmount signerFees = signerCount * view.fees().base;
 
    // LCOV_EXCL_START
    if (signerFees > maxAmount - txnFees)
    {
        JLOG(debugLog().error())
            << "BatchTrace: XRPAmount overflow in signerFees calculation.";
        return XRPAmount{INITIAL_XRP};
    }
    if (txnFees + signerFees > maxAmount - batchBase)
    {
        JLOG(debugLog().error())
            << "BatchTrace: XRPAmount overflow in total fee calculation.";
        return XRPAmount{INITIAL_XRP};
    }
    // LCOV_EXCL_STOP
 
    // 10 drops per batch signature + sum of inner tx fees + batchBase
    return signerFees + txnFees + batchBase;
}
 
std::uint32_t
Batch::getFlagsMask(PreflightContext const& ctx)
{
    return tfBatchMask;
}
 
NotTEC
Batch::preflight(PreflightContext const& ctx)
{
    auto const parentBatchId = ctx.tx.getTransactionID();
    auto const flags = ctx.tx.getFlags();
 
    if (std::popcount(
            flags &
            (tfAllOrNothing | tfOnlyOne | tfUntilFailure | tfIndependent)) != 1)
    {
        JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]:"
                            << "too many flags.";
        return temINVALID_FLAG;
    }
 
    auto const& rawTxns = ctx.tx.getFieldArray(sfRawTransactions);
    if (rawTxns.size() <= 1)
    {
        JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]:"
                            << "txns array must have at least 2 entries.";
        return temARRAY_EMPTY;
    }
 
    if (rawTxns.size() > maxBatchTxCount)
    {
        JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]:"
                            << "txns array exceeds 8 entries.";
        return temARRAY_TOO_LARGE;
    }
 
    // Validation Inner Batch Txns
    std::unordered_set<uint256> uniqueHashes;
    std::unordered_map<AccountID, std::unordered_set<std::uint32_t>>
        accountSeqTicket;
    auto checkSignatureFields = [&parentBatchId, &j = ctx.j](
                                    STObject const& sig,
                                    uint256 const& hash,
                                    char const* label = "") -> NotTEC {
        if (sig.isFieldPresent(sfTxnSignature))
        {
            JLOG(j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "inner txn " << label << "cannot include TxnSignature. "
                << "txID: " << hash;
            return temBAD_SIGNATURE;
        }
 
        if (sig.isFieldPresent(sfSigners))
        {
            JLOG(j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "inner txn " << label << " cannot include Signers. "
                << "txID: " << hash;
            return temBAD_SIGNER;
        }
 
        if (!sig.getFieldVL(sfSigningPubKey).empty())
        {
            JLOG(j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "inner txn " << label << " SigningPubKey must be empty. "
                << "txID: " << hash;
            return temBAD_REGKEY;
        }
 
        return tesSUCCESS;
    };
    for (STObject rb : rawTxns)
    {
        STTx const stx = STTx{std::move(rb)};
        auto const hash = stx.getTransactionID();
        if (!uniqueHashes.emplace(hash).second)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "duplicate Txn found. "
                                << "txID: " << hash;
            return temREDUNDANT;
        }
 
        if (stx.getFieldU16(sfTransactionType) == ttBATCH)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "batch cannot have an inner batch txn. "
                                << "txID: " << hash;
            return temINVALID;
        }
 
        if (!(stx.getFlags() & tfInnerBatchTxn))
        {
            JLOG(ctx.j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "inner txn must have the tfInnerBatchTxn flag. "
                << "txID: " << hash;
            return temINVALID_FLAG;
        }
 
        if (auto const ret = checkSignatureFields(stx, hash))
            return ret;
 
        /* Placeholder for field that will be added by Lending Protocol
        // Note that the CounterpartySignature is optional, and should not be
        // included, but if it is, ensure it doesn't contain a signature.
        if (stx.isFieldPresent(sfCounterpartySignature))
        {
            auto const counterpartySignature =
                stx.getFieldObject(sfCounterpartySignature);
            if (auto const ret = checkSignatureFields(
                    counterpartySignature, hash, "counterparty signature "))
            {
                return ret;
            }
        }
        */
 
        auto const innerAccount = stx.getAccountID(sfAccount);
        if (auto const preflightResult = ripple::preflight(
                ctx.app, ctx.rules, parentBatchId, stx, tapBATCH, ctx.j);
            preflightResult.ter != tesSUCCESS)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "inner txn preflight failed: "
                                << transHuman(preflightResult.ter) << " "
                                << "txID: " << hash;
            return temINVALID_INNER_BATCH;
        }
 
        // Check that the fee is zero
        if (auto const fee = stx.getFieldAmount(sfFee);
            !fee.native() || fee.xrp() != beast::zero)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "inner txn must have a fee of 0. "
                                << "txID: " << hash;
            return temBAD_FEE;
        }
 
        // Check that Sequence and TicketSequence are not both present
        if (stx.isFieldPresent(sfTicketSequence) &&
            stx.getFieldU32(sfSequence) != 0)
        {
            JLOG(ctx.j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "inner txn must have exactly one of Sequence and "
                   "TicketSequence. "
                << "txID: " << hash;
            return temSEQ_AND_TICKET;
        }
 
        // Verify that either Sequence or TicketSequence is present
        if (!stx.isFieldPresent(sfTicketSequence) &&
            stx.getFieldU32(sfSequence) == 0)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "inner txn must have either Sequence or "
                                   "TicketSequence. "
                                << "txID: " << hash;
            return temSEQ_AND_TICKET;
        }
 
        // Duplicate sequence and ticket checks
        if (flags & (tfAllOrNothing | tfUntilFailure))
        {
            if (auto const seq = stx.getFieldU32(sfSequence); seq != 0)
            {
                if (!accountSeqTicket[innerAccount].insert(seq).second)
                {
                    JLOG(ctx.j.debug())
                        << "BatchTrace[" << parentBatchId << "]: "
                        << "duplicate sequence found: "
                        << "txID: " << hash;
                    return temREDUNDANT;
                }
            }
 
            if (stx.isFieldPresent(sfTicketSequence))
            {
                if (auto const ticket = stx.getFieldU32(sfTicketSequence);
                    !accountSeqTicket[innerAccount].insert(ticket).second)
                {
                    JLOG(ctx.j.debug())
                        << "BatchTrace[" << parentBatchId << "]: "
                        << "duplicate ticket found: "
                        << "txID: " << hash;
                    return temREDUNDANT;
                }
            }
        }
    }
 
    return tesSUCCESS;
}
 
NotTEC
Batch::preflightSigValidated(PreflightContext const& ctx)
{
    auto const parentBatchId = ctx.tx.getTransactionID();
    auto const outerAccount = ctx.tx.getAccountID(sfAccount);
    auto const& rawTxns = ctx.tx.getFieldArray(sfRawTransactions);
 
    // Build the signers list
    std::unordered_set<AccountID> requiredSigners;
    for (STObject const& rb : rawTxns)
    {
        auto const innerAccount = rb.getAccountID(sfAccount);
 
        // If the inner account is the same as the outer account, do not add the
        // inner account to the required signers set.
        if (innerAccount != outerAccount)
            requiredSigners.insert(innerAccount);
        /* Placeholder for field that will be added by Lending Protocol
        // Some transactions have a Counterparty, who must also sign the
        // transaction if they are not the outer account
        if (auto const counterparty = rb.at(~sfCounterparty);
            counterparty && counterparty != outerAccount)
            requiredSigners.insert(*counterparty);
        */
    }
 
    // Validation Batch Signers
    std::unordered_set<AccountID> batchSigners;
    if (ctx.tx.isFieldPresent(sfBatchSigners))
    {
        STArray const& signers = ctx.tx.getFieldArray(sfBatchSigners);
 
        // Check that the batch signers array is not too large.
        if (signers.size() > maxBatchTxCount)
        {
            JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                << "signers array exceeds 8 entries.";
            return temARRAY_TOO_LARGE;
        }
 
        // Add batch signers to the set to ensure all signer accounts are
        // unique. Meanwhile, remove signer accounts from the set of inner
        // transaction accounts (`requiredSigners`). By the end of the loop,
        // `requiredSigners` should be empty, indicating that all inner
        // accounts are matched with signers.
        for (auto const& signer : signers)
        {
            AccountID const signerAccount = signer.getAccountID(sfAccount);
            if (signerAccount == outerAccount)
            {
                JLOG(ctx.j.debug())
                    << "BatchTrace[" << parentBatchId << "]: "
                    << "signer cannot be the outer account: " << signerAccount;
                return temBAD_SIGNER;
            }
 
            if (!batchSigners.insert(signerAccount).second)
            {
                JLOG(ctx.j.debug())
                    << "BatchTrace[" << parentBatchId << "]: "
                    << "duplicate signer found: " << signerAccount;
                return temREDUNDANT;
            }
 
            // Check that the batch signer is in the required signers set.
            // Remove it if it does, as it can be crossed off the list.
            if (requiredSigners.erase(signerAccount) == 0)
            {
                JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                                    << "no account signature for inner txn.";
                return temBAD_SIGNER;
            }
        }
 
        // Check the batch signers signatures.
        auto const sigResult = ctx.tx.checkBatchSign(
            STTx::RequireFullyCanonicalSig::yes, ctx.rules);
 
        if (!sigResult)
        {
            JLOG(ctx.j.debug())
                << "BatchTrace[" << parentBatchId << "]: "
                << "invalid batch txn signature: " << sigResult.error();
            return temBAD_SIGNATURE;
        }
    }
 
    if (!requiredSigners.empty())
    {
        JLOG(ctx.j.debug()) << "BatchTrace[" << parentBatchId << "]: "
                            << "invalid batch signers.";
        return temBAD_SIGNER;
    }
    return tesSUCCESS;
}
 
NotTEC
Batch::checkSign(PreclaimContext const& ctx)
{
    if (auto ret = Transactor::checkSign(ctx); !isTesSuccess(ret))
        return ret;
 
    if (auto ret = Transactor::checkBatchSign(ctx); !isTesSuccess(ret))
        return ret;
 
    return tesSUCCESS;
}
 
TER
Batch::doApply()
{
    return tesSUCCESS;
}
 
}  // namespace ripple