diff --git a/account/account_test.go b/account/account_test.go index ca3e41fdba161931d24a8610ded01aee33301110..68a5b1eef23b67083ce9295953ca06700763ce50 100644 --- a/account/account_test.go +++ b/account/account_test.go @@ -22,8 +22,7 @@ import ( "fmt" "github.com/hyperledger/burrow/crypto" - "github.com/hyperledger/burrow/permission" - "github.com/hyperledger/burrow/permission/types" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" "github.com/tendermint/go-wire" @@ -79,10 +78,10 @@ func TestAccountSerialise(t *testing.T) { func TestDecodeConcrete(t *testing.T) { concreteAcc := NewConcreteAccountFromSecret("Super Semi Secret") - concreteAcc.Permissions = types.AccountPermissions{ - Base: types.BasePermissions{ - Perms: permission.SetGlobal, - SetBit: permission.SetGlobal, + concreteAcc.Permissions = ptypes.AccountPermissions{ + Base: ptypes.BasePermissions{ + Perms: ptypes.SetGlobal, + SetBit: ptypes.SetGlobal, }, Roles: []string{"bums"}, } diff --git a/account/state/state_cache_test.go b/account/state/state_cache_test.go index 92171155cf68cf2d796a83159c6d1fcb0ee14bb9..6df18eb923680239f1feb1268f39a5d135eac463 100644 --- a/account/state/state_cache_test.go +++ b/account/state/state_cache_test.go @@ -1,15 +1,14 @@ package state import ( - "testing" - "fmt" + "testing" acm "github.com/hyperledger/burrow/account" "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/execution/evm/asm" - "github.com/hyperledger/burrow/permission" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) @@ -290,11 +289,11 @@ func TestStateCache_get(t *testing.T) { func testAccounts() *MemoryState { acc1 := acm.NewConcreteAccountFromSecret("acc1") - acc1.Permissions.Base.Perms = permission.AddRole | permission.Send + acc1.Permissions.Base.Perms = ptypes.AddRole | ptypes.Send acc1.Permissions.Base.SetBit = acc1.Permissions.Base.Perms acc2 := acm.NewConcreteAccountFromSecret("acc2") - acc2.Permissions.Base.Perms = permission.AddRole | permission.Send + acc2.Permissions.Base.Perms = ptypes.AddRole | ptypes.Send acc2.Permissions.Base.SetBit = acc1.Permissions.Base.Perms acc2.Code, _ = acm.NewBytecode(asm.PUSH1, 0x20) diff --git a/client/rpc/client.go b/client/rpc/client.go index e940ee3e15e1a26d442309d04088618ca110c90b..9e5364246cc38ae2975b50f2252391db73ae46be 100644 --- a/client/rpc/client.go +++ b/client/rpc/client.go @@ -19,14 +19,13 @@ import ( "fmt" "strconv" - "github.com/hyperledger/burrow/crypto" - ptypes "github.com/hyperledger/burrow/permission" - "github.com/hyperledger/burrow/txs/payload" - "github.com/hyperledger/burrow/client" + "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/keys" "github.com/hyperledger/burrow/permission/snatives" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/hyperledger/burrow/txs" + "github.com/hyperledger/burrow/txs/payload" ) //------------------------------------------------------------------------------------ diff --git a/client/websocket_client.go b/client/websocket_client.go index 81be41982a8cc735f934bcbec2b702dfbbc7a4cb..b06b2fecabacb4f46010c37f4ce7b440ec18a8cf 100644 --- a/client/websocket_client.go +++ b/client/websocket_client.go @@ -22,6 +22,7 @@ import ( "encoding/json" "github.com/hyperledger/burrow/crypto" + "github.com/hyperledger/burrow/execution/errors" exeEvents "github.com/hyperledger/burrow/execution/events" "github.com/hyperledger/burrow/logging" "github.com/hyperledger/burrow/logging/structure" @@ -170,12 +171,12 @@ func (burrowNodeWebsocketClient *burrowNodeWebsocketClient) WaitForConfirmation( continue } - if eventDataTx.Exception != "" { + if eventDataTx.Exception != nil { confirmationChannel <- Confirmation{ BlockHash: latestBlockHash, EventDataTx: eventDataTx, - Exception: fmt.Errorf("transaction confirmed but execution gave exception: %v", - eventDataTx.Exception), + Exception: errors.Wrap(eventDataTx.Exception, + "transaction confirmed but execution gave exception: %v"), Error: nil, } return diff --git a/core/kernel_test.go b/core/kernel_test.go index 68cb5f9dd34264b09d0d65de7c577cf26d55eaa8..d242de8e9946a882c68cd54e894a156168248754 100644 --- a/core/kernel_test.go +++ b/core/kernel_test.go @@ -2,13 +2,11 @@ package core import ( "context" + "fmt" "os" "testing" - "time" - "fmt" - "github.com/hyperledger/burrow/consensus/tendermint" "github.com/hyperledger/burrow/consensus/tendermint/validator" "github.com/hyperledger/burrow/genesis" @@ -16,8 +14,8 @@ import ( "github.com/hyperledger/burrow/logging" "github.com/hyperledger/burrow/rpc" "github.com/stretchr/testify/assert" - tm_config "github.com/tendermint/tendermint/config" - tm_types "github.com/tendermint/tendermint/types" + tmConfig "github.com/tendermint/tendermint/config" + tmTypes "github.com/tendermint/tendermint/types" ) const testDir = "./test_scratch/kernel_test" @@ -26,7 +24,7 @@ func TestBootThenShutdown(t *testing.T) { os.RemoveAll(testDir) os.MkdirAll(testDir, 0777) os.Chdir(testDir) - tmConf := tm_config.DefaultConfig() + tmConf := tmConfig.DefaultConfig() //logger, _, _ := lifecycle.NewStdErrLogger() logger := logging.NewNoopLogger() genesisDoc, _, privateValidators := genesis.NewDeterministicGenesis(123).GenesisDoc(1, true, 1000, 1, true, 1000) @@ -38,7 +36,7 @@ func TestBootShutdownResume(t *testing.T) { os.RemoveAll(testDir) os.MkdirAll(testDir, 0777) os.Chdir(testDir) - tmConf := tm_config.DefaultConfig() + tmConf := tmConfig.DefaultConfig() //logger, _, _ := lifecycle.NewStdErrLogger() logger := logging.NewNoopLogger() genesisDoc, _, privateValidators := genesis.NewDeterministicGenesis(123).GenesisDoc(1, true, 1000, 1, true, 1000) @@ -46,7 +44,7 @@ func TestBootShutdownResume(t *testing.T) { i := int64(1) // asserts we get a consecutive run of blocks - blockChecker := func(block *tm_types.EventDataNewBlock) bool { + blockChecker := func(block *tmTypes.EventDataNewBlock) bool { assert.Equal(t, i, block.Block.Height) i++ // stop every third block @@ -61,9 +59,9 @@ func TestBootShutdownResume(t *testing.T) { assert.Error(t, bootWaitBlocksShutdown(privValidator, genesisDoc, tmConf, logger, blockChecker)) } -func bootWaitBlocksShutdown(privValidator tm_types.PrivValidator, genesisDoc *genesis.GenesisDoc, - tmConf *tm_config.Config, logger *logging.Logger, - blockChecker func(block *tm_types.EventDataNewBlock) (cont bool)) error { +func bootWaitBlocksShutdown(privValidator tmTypes.PrivValidator, genesisDoc *genesis.GenesisDoc, + tmConf *tmConfig.Config, logger *logging.Logger, + blockChecker func(block *tmTypes.EventDataNewBlock) (cont bool)) error { keyStore := keys.NewKeyStore(keys.DefaultKeysDir, false, logger) keyClient := keys.NewLocalKeyClient(keyStore, logging.NewNoopLogger()) @@ -78,7 +76,7 @@ func bootWaitBlocksShutdown(privValidator tm_types.PrivValidator, genesisDoc *ge return err } - ch := make(chan *tm_types.EventDataNewBlock) + ch := make(chan *tmTypes.EventDataNewBlock) tendermint.SubscribeNewBlock(context.Background(), kern.Emitter, "TestBootShutdownResume", ch) cont := true for cont { diff --git a/execution/errors/errors.go b/execution/errors/errors.go new file mode 100644 index 0000000000000000000000000000000000000000..4f2e2ab8b5d69ab7a7f23dbc08b4df1a38a31c79 --- /dev/null +++ b/execution/errors/errors.go @@ -0,0 +1,134 @@ +package errors + +import ( + "fmt" +) + +type CodedError interface { + error + ErrorCode() ErrorCode +} + +type ErrorCode int8 + +const ( + ErrorCodeGeneric ErrorCode = iota + ErrorCodeUnknownAddress + ErrorCodeInsufficientBalance + ErrorCodeInvalidJumpDest + ErrorCodeInsufficientGas + ErrorCodeMemoryOutOfBounds + ErrorCodeCodeOutOfBounds + ErrorCodeInputOutOfBounds + ErrorCodeReturnDataOutOfBounds + ErrorCodeCallStackOverflow + ErrorCodeCallStackUnderflow + ErrorCodeDataStackOverflow + ErrorCodeDataStackUnderflow + ErrorCodeInvalidContract + ErrorCodeNativeContractCodeCopy + ErrorCodeExecutionAborted + ErrorCodeExecutionReverted + ErrorCodePermissionDenied + ErrorCodeNativeFunction +) + +func (ec ErrorCode) ErrorCode() ErrorCode { + return ec +} + +func (ec ErrorCode) Error() string { + switch ec { + case ErrorCodeUnknownAddress: + return "Unknown address" + case ErrorCodeInsufficientBalance: + return "Insufficient balance" + case ErrorCodeInvalidJumpDest: + return "Invalid jump dest" + case ErrorCodeInsufficientGas: + return "Insufficient gas" + case ErrorCodeMemoryOutOfBounds: + return "Memory out of bounds" + case ErrorCodeCodeOutOfBounds: + return "Code out of bounds" + case ErrorCodeInputOutOfBounds: + return "Input out of bounds" + case ErrorCodeReturnDataOutOfBounds: + return "Return data out of bounds" + case ErrorCodeCallStackOverflow: + return "Call stack overflow" + case ErrorCodeCallStackUnderflow: + return "Call stack underflow" + case ErrorCodeDataStackOverflow: + return "Data stack overflow" + case ErrorCodeDataStackUnderflow: + return "Data stack underflow" + case ErrorCodeInvalidContract: + return "Invalid contract" + case ErrorCodeNativeContractCodeCopy: + return "Tried to copy native contract code" + case ErrorCodeExecutionAborted: + return "Execution aborted" + case ErrorCodeExecutionReverted: + return "Execution reverted" + case ErrorCodeNativeFunction: + return "Native function error" + default: + return "Generic error" + } +} + +// Exception provides a serialisable coded error for the VM +type Exception struct { + Code ErrorCode + Exception string +} + +func NewCodedError(errorCode ErrorCode, exception string) *Exception { + if exception == "" { + return nil + } + return &Exception{ + Code: errorCode, + Exception: exception, + } +} + +// Wraps any error as a Exception +func AsCodedError(err error) *Exception { + if err == nil { + return nil + } + switch e := err.(type) { + case *Exception: + return e + case CodedError: + return NewCodedError(e.ErrorCode(), e.Error()) + default: + return NewCodedError(ErrorCodeGeneric, err.Error()) + } +} + +func Wrap(err CodedError, message string) *Exception { + return NewCodedError(err.ErrorCode(), message+": "+err.Error()) +} + +func Errorf(format string, a ...interface{}) CodedError { + return ErrorCodef(ErrorCodeGeneric, format, a...) +} + +func ErrorCodef(errorCode ErrorCode, format string, a ...interface{}) CodedError { + return NewCodedError(errorCode, fmt.Sprintf(format, a...)) +} + +func (e *Exception) ErrorCode() ErrorCode { + return e.Code +} + +func (e *Exception) String() string { + return e.Error() +} + +func (e *Exception) Error() string { + return fmt.Sprintf("VM Error %v: %s", e.Code, e.Exception) +} diff --git a/execution/errors/native.go b/execution/errors/native.go new file mode 100644 index 0000000000000000000000000000000000000000..df35e9a4f1379b37c6368764156e214ed0a70087 --- /dev/null +++ b/execution/errors/native.go @@ -0,0 +1,20 @@ +package errors + +import ( + "fmt" + + "github.com/hyperledger/burrow/crypto" +) + +type LacksSNativePermission struct { + Address crypto.Address + SNative string +} + +func (e LacksSNativePermission) Error() string { + return fmt.Sprintf("account %s does not have SNative function call permission: %s", e.Address, e.SNative) +} + +func (e LacksSNativePermission) ErrorCode() ErrorCode { + return ErrorCodeNativeFunction +} diff --git a/execution/errors/vm.go b/execution/errors/vm.go new file mode 100644 index 0000000000000000000000000000000000000000..d8b164c230fd94e490dd4bd91154fad93a68f9fb --- /dev/null +++ b/execution/errors/vm.go @@ -0,0 +1,60 @@ +package errors + +import ( + "bytes" + "fmt" + + "github.com/hyperledger/burrow/crypto" + "github.com/hyperledger/burrow/permission/types" +) + +type PermissionDenied struct { + Perm types.PermFlag +} + +func (err PermissionDenied) ErrorCode() ErrorCode { + return ErrorCodePermissionDenied +} + +func (err PermissionDenied) Error() string { + return fmt.Sprintf("Contract does not have permission to %v", err.Perm) +} + +type NestedCall struct { + NestedError CodedError + Caller crypto.Address + Callee crypto.Address + StackDepth int +} + +func (err NestedCall) ErrorCode() ErrorCode { + return err.NestedError.ErrorCode() +} + +func (err NestedCall) Error() string { + return fmt.Sprintf("error in nested call at depth %v: %s (callee) -> %s (caller): %v", + err.StackDepth, err.Callee, err.Caller, err.NestedError) +} + +type Call struct { + CallError CodedError + NestedErrors []NestedCall +} + +func (err Call) ErrorCode() ErrorCode { + return err.CallError.ErrorCode() +} + +func (err Call) Error() string { + buf := new(bytes.Buffer) + buf.WriteString("call error: ") + buf.WriteString(err.CallError.Error()) + if len(err.NestedErrors) > 0 { + buf.WriteString(", nested call errors:\n") + for _, nestedErr := range err.NestedErrors { + buf.WriteString(nestedErr.Error()) + buf.WriteByte('\n') + } + } + return buf.String() +} diff --git a/execution/events/events.go b/execution/events/events.go index fd28bfe896d42f7e8910f5cf208028c7c0f658a3..6a7e64faa7e725a2838eb08865c5f2ab266a6440 100644 --- a/execution/events/events.go +++ b/execution/events/events.go @@ -7,6 +7,8 @@ import ( "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/hyperledger/burrow/txs" "github.com/hyperledger/burrow/txs/payload" "github.com/tmthrgd/go-hex" @@ -15,7 +17,7 @@ import ( func EventStringAccountInput(addr crypto.Address) string { return fmt.Sprintf("Acc/%s/Input", addr) } func EventStringAccountOutput(addr crypto.Address) string { return fmt.Sprintf("Acc/%s/Output", addr) } func EventStringNameReg(name string) string { return fmt.Sprintf("NameReg/%s", name) } -func EventStringPermissions(name string) string { return fmt.Sprintf("Permissions/%s", name) } +func EventStringPermissions(perm ptypes.PermFlag) string { return fmt.Sprintf("Permissions/%v", perm) } func EventStringBond() string { return "Bond" } func EventStringUnbond() string { return "Unbond" } func EventStringRebond() string { return "Rebond" } @@ -24,7 +26,7 @@ func EventStringRebond() string { return "Rebond" } type EventDataTx struct { Tx *txs.Tx Return []byte - Exception string + Exception *errors.Exception } // For re-use @@ -54,7 +56,7 @@ func SubscribeAccountOutputSendTx(ctx context.Context, subscribable event.Subscr } func PublishAccountOutput(publisher event.Publisher, address crypto.Address, tx *txs.Tx, ret []byte, - exception string) error { + exception *errors.Exception) error { return event.PublishWithEventID(publisher, EventStringAccountOutput(address), &EventDataTx{ @@ -70,7 +72,7 @@ func PublishAccountOutput(publisher event.Publisher, address crypto.Address, tx } func PublishAccountInput(publisher event.Publisher, address crypto.Address, tx *txs.Tx, ret []byte, - exception string) error { + exception *errors.Exception) error { return event.PublishWithEventID(publisher, EventStringAccountInput(address), &EventDataTx{ @@ -98,14 +100,14 @@ func PublishNameReg(publisher event.Publisher, tx *txs.Tx) error { }) } -func PublishPermissions(publisher event.Publisher, name string, tx *txs.Tx) error { +func PublishPermissions(publisher event.Publisher, perm ptypes.PermFlag, tx *txs.Tx) error { _, ok := tx.Payload.(*payload.PermissionsTx) if !ok { return fmt.Errorf("Tx payload must be PermissionsTx to PublishPermissions") } - return event.PublishWithEventID(publisher, EventStringPermissions(name), &EventDataTx{Tx: tx}, + return event.PublishWithEventID(publisher, EventStringPermissions(perm), &EventDataTx{Tx: tx}, map[string]interface{}{ - "name": name, + "name": perm.String(), event.TxTypeKey: tx.Type().String(), event.TxHashKey: hex.EncodeUpperToString(tx.Hash()), }) diff --git a/execution/evm/events/events.go b/execution/evm/events/events.go index 9ae628a7a829ac0c858811cd5643910abbffc7da..9095d7687fa84b88a99585bdecf5e7a2d420fa04 100644 --- a/execution/evm/events/events.go +++ b/execution/evm/events/events.go @@ -21,6 +21,7 @@ import ( . "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" "github.com/tmthrgd/go-hex" ) @@ -38,7 +39,7 @@ type EventDataCall struct { TxHash []byte StackDepth int Return []byte - Exception string + Exception *errors.Exception } type CallData struct { diff --git a/execution/evm/native.go b/execution/evm/native.go index 70f00ed6d2a25c31a42de210f29161f0905cb68b..4a7c7e615141faf3dd92b50fe4ec095d6a8cbdb4 100644 --- a/execution/evm/native.go +++ b/execution/evm/native.go @@ -20,13 +20,15 @@ import ( acm "github.com/hyperledger/burrow/account" "github.com/hyperledger/burrow/account/state" . "github.com/hyperledger/burrow/binary" + "github.com/hyperledger/burrow/crypto" + "github.com/hyperledger/burrow/execution/errors" "github.com/hyperledger/burrow/logging" "golang.org/x/crypto/ripemd160" ) var registeredNativeContracts = make(map[Word256]NativeContract) -func RegisteredNativeContract(address Word256) bool { +func IsRegisteredNativeContract(address Word256) bool { _, ok := registeredNativeContracts[address] return ok } @@ -54,6 +56,21 @@ func registerNativeContracts() { //----------------------------------------------------------------------------- +func ExecuteNativeContract(address Word256, state state.Writer, caller acm.Account, input []byte, gas *uint64, + logger *logging.Logger) ([]byte, errors.CodedError) { + + contract, ok := registeredNativeContracts[address] + if !ok { + return nil, errors.ErrorCodef(errors.ErrorCodeNativeFunction, + "no native contract registered at address: %v", crypto.AddressFromWord256(address)) + } + output, err := contract(state, caller, input, gas, logger) + if err != nil { + return nil, errors.NewCodedError(errors.ErrorCodeNativeFunction, err.Error()) + } + return output, nil +} + type NativeContract func(state state.Writer, caller acm.Account, input []byte, gas *uint64, logger *logging.Logger) (output []byte, err error) @@ -86,7 +103,7 @@ func sha256Func(state state.Writer, caller acm.Account, input []byte, gas *uint6 // Deduct gas gasRequired := uint64((len(input)+31)/32)*GasSha256Word + GasSha256Base if *gas < gasRequired { - return nil, ErrInsufficientGas + return nil, errors.ErrorCodeInsufficientGas } else { *gas -= gasRequired } @@ -102,7 +119,7 @@ func ripemd160Func(state state.Writer, caller acm.Account, input []byte, gas *ui // Deduct gas gasRequired := uint64((len(input)+31)/32)*GasRipemd160Word + GasRipemd160Base if *gas < gasRequired { - return nil, ErrInsufficientGas + return nil, errors.ErrorCodeInsufficientGas } else { *gas -= gasRequired } @@ -118,7 +135,7 @@ func identityFunc(state state.Writer, caller acm.Account, input []byte, gas *uin // Deduct gas gasRequired := uint64((len(input)+31)/32)*GasIdentityWord + GasIdentityBase if *gas < gasRequired { - return nil, ErrInsufficientGas + return nil, errors.ErrorCodeInsufficientGas } else { *gas -= gasRequired } diff --git a/execution/evm/snative.go b/execution/evm/snative.go index 8afbd171c84ed8a05e72c948dcc231958bfd4ee8..7f9c25e57ff60891305b15c58edd02fcb827aed1 100644 --- a/execution/evm/snative.go +++ b/execution/evm/snative.go @@ -23,11 +23,11 @@ import ( "github.com/hyperledger/burrow/account/state" . "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" + "github.com/hyperledger/burrow/execution/errors" "github.com/hyperledger/burrow/execution/evm/abi" "github.com/hyperledger/burrow/execution/evm/sha3" "github.com/hyperledger/burrow/logging" "github.com/hyperledger/burrow/logging/structure" - "github.com/hyperledger/burrow/permission" ptypes "github.com/hyperledger/burrow/permission/types" ) @@ -98,7 +98,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_role", roleTypeName), }, abiReturn("result", abi.BoolTypeName), - permission.AddRole, + ptypes.AddRole, addRole}, &SNativeFunctionDescription{` @@ -113,7 +113,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_role", roleTypeName), }, abiReturn("result", abi.BoolTypeName), - permission.RemoveRole, + ptypes.RemoveRole, removeRole}, &SNativeFunctionDescription{` @@ -128,7 +128,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_role", roleTypeName), }, abiReturn("result", abi.BoolTypeName), - permission.HasRole, + ptypes.HasRole, hasRole}, &SNativeFunctionDescription{` @@ -145,7 +145,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_set", abi.BoolTypeName), }, abiReturn("result", permFlagTypeName), - permission.SetBase, + ptypes.SetBase, setBase}, &SNativeFunctionDescription{` @@ -159,7 +159,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_account", abi.AddressTypeName), abiArg("_permission", permFlagTypeName)}, abiReturn("result", permFlagTypeName), - permission.UnsetBase, + ptypes.UnsetBase, unsetBase}, &SNativeFunctionDescription{` @@ -173,7 +173,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_account", abi.AddressTypeName), abiArg("_permission", permFlagTypeName)}, abiReturn("result", abi.BoolTypeName), - permission.HasBase, + ptypes.HasBase, hasBase}, &SNativeFunctionDescription{` @@ -187,7 +187,7 @@ func SNativeContracts() map[string]*SNativeContractDescription { abiArg("_permission", permFlagTypeName), abiArg("_set", abi.BoolTypeName)}, abiReturn("result", permFlagTypeName), - permission.SetGlobal, + ptypes.SetGlobal, setGlobal}, ), } @@ -227,15 +227,6 @@ func NewSNativeContract(comment, name string, } } -type ErrLacksSNativePermission struct { - Address crypto.Address - SNative string -} - -func (e ErrLacksSNativePermission) Error() string { - return fmt.Sprintf("account %s does not have SNative function call permission: %s", e.Address, e.SNative) -} - // This function is designed to be called from the EVM once a SNative contract // has been selected. It is also placed in a registry by registerSNativeContracts // So it can be looked up by SNative address @@ -245,8 +236,9 @@ func (contract *SNativeContractDescription) Dispatch(state state.Writer, caller logger = logger.With(structure.ScopeKey, "Dispatch", "contract_name", contract.Name) if len(args) < abi.FunctionSelectorLength { - return nil, fmt.Errorf("SNatives dispatch requires a 4-byte function "+ - "identifier but arguments are only %v bytes long", len(args)) + return nil, errors.ErrorCodef(errors.ErrorCodeNativeFunction, + "SNatives dispatch requires a 4-byte function identifier but arguments are only %v bytes long", + len(args)) } function, err := contract.FunctionByID(abi.FirstFourBytes(args)) @@ -262,12 +254,12 @@ func (contract *SNativeContractDescription) Dispatch(state state.Writer, caller // check if we have permission to call this function if !HasPermission(state, caller, function.PermFlag) { - return nil, ErrLacksSNativePermission{caller.Address(), function.Name} + return nil, errors.LacksSNativePermission{caller.Address(), function.Name} } // ensure there are enough arguments if len(remainingArgs) != function.NArgs()*Word256Length { - return nil, fmt.Errorf("%s() takes %d arguments but got %d (with %d bytes unconsumed - should be 0)", + return nil, errors.ErrorCodef(errors.ErrorCodeNativeFunction, "%s() takes %d arguments but got %d (with %d bytes unconsumed - should be 0)", function.Name, function.NArgs(), len(remainingArgs)/Word256Length, len(remainingArgs)%Word256Length) } @@ -284,11 +276,11 @@ func (contract *SNativeContractDescription) Address() (address crypto.Address) { } // Get function by calling identifier FunctionSelector -func (contract *SNativeContractDescription) FunctionByID(id abi.FunctionSelector) (*SNativeFunctionDescription, error) { +func (contract *SNativeContractDescription) FunctionByID(id abi.FunctionSelector) (*SNativeFunctionDescription, errors.CodedError) { f, ok := contract.functionsByID[id] if !ok { return nil, - fmt.Errorf("unknown SNative function with ID %x", id) + errors.ErrorCodef(errors.ErrorCodeNativeFunction, "unknown SNative function with ID %x", id) } return f, nil } @@ -527,7 +519,7 @@ func removeRole(stateWriter state.Writer, caller acm.Account, args []byte, gas * // Checks if a permission flag is valid (a known base chain or snative permission) func ValidPermN(n ptypes.PermFlag) bool { - return n <= permission.AllPermFlags + return n <= ptypes.AllPermFlags } // Get the global BasePermissions diff --git a/execution/evm/snative_test.go b/execution/evm/snative_test.go index 3f5e5eae9cc0dba28c35f849dd587312b35f65b3..e9b4150db7256f160dede1eaab8e73962fae5cb1 100644 --- a/execution/evm/snative_test.go +++ b/execution/evm/snative_test.go @@ -23,10 +23,11 @@ import ( acm "github.com/hyperledger/burrow/account" . "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" + "github.com/hyperledger/burrow/execution/errors" "github.com/hyperledger/burrow/execution/evm/abi" "github.com/hyperledger/burrow/execution/evm/asm/bc" "github.com/hyperledger/burrow/execution/evm/sha3" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" ptypes "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" ) @@ -87,7 +88,7 @@ func TestSNativeContractDescription_Dispatch(t *testing.T) { if !assert.Error(t, err, "Should fail due to lack of permissions") { return } - assert.IsType(t, err, ErrLacksSNativePermission{}) + assert.IsType(t, err, errors.LacksSNativePermission{}) // Grant all permissions and dispatch should success caller.SetPermissions(allAccountPermissions()) diff --git a/execution/evm/stack.go b/execution/evm/stack.go index 3e9dfd5b8987707f68334e6b56f7044bc8fd409c..9a244265c1cf895955982a4f80dc4307a2d88559 100644 --- a/execution/evm/stack.go +++ b/execution/evm/stack.go @@ -20,6 +20,7 @@ import ( "math/big" . "github.com/hyperledger/burrow/binary" + "github.com/hyperledger/burrow/execution/errors" ) // Not goroutine safe @@ -28,10 +29,10 @@ type Stack struct { ptr int gas *uint64 - err *error + err *errors.CodedError } -func NewStack(capacity int, gas *uint64, err *error) *Stack { +func NewStack(capacity int, gas *uint64, err *errors.CodedError) *Stack { return &Stack{ data: make([]Word256, capacity), ptr: 0, @@ -44,11 +45,11 @@ func (st *Stack) useGas(gasToUse uint64) { if *st.gas > gasToUse { *st.gas -= gasToUse } else { - st.setErr(ErrInsufficientGas) + st.setErr(errors.ErrorCodeInsufficientGas) } } -func (st *Stack) setErr(err error) { +func (st *Stack) setErr(err errors.CodedError) { if *st.err == nil { *st.err = err } @@ -57,7 +58,7 @@ func (st *Stack) setErr(err error) { func (st *Stack) Push(d Word256) { st.useGas(GasStackOp) if st.ptr == cap(st.data) { - st.setErr(ErrDataStackOverflow) + st.setErr(errors.ErrorCodeDataStackOverflow) return } st.data[st.ptr] = d @@ -92,7 +93,7 @@ func (st *Stack) PushBigInt(bigInt *big.Int) Word256 { func (st *Stack) Pop() Word256 { st.useGas(GasStackOp) if st.ptr == 0 { - st.setErr(ErrDataStackUnderflow) + st.setErr(errors.ErrorCodeDataStackUnderflow) return Zero256 } st.ptr-- @@ -103,18 +104,18 @@ func (st *Stack) PopBytes() []byte { return st.Pop().Bytes() } -func (st *Stack) Pop64() (int64, error) { +func (st *Stack) Pop64() (int64, errors.CodedError) { d := st.Pop() if Is64BitOverflow(d) { - return 0, fmt.Errorf("int64 overflow from word: %v", d) + return 0, errors.ErrorCodef(errors.ErrorCodeCallStackOverflow, "int64 overflow from word: %v", d) } return Int64FromWord256(d), nil } -func (st *Stack) PopU64() (uint64, error) { +func (st *Stack) PopU64() (uint64, errors.CodedError) { d := st.Pop() if Is64BitOverflow(d) { - return 0, fmt.Errorf("uint64 overflow from word: %v", d) + return 0, errors.ErrorCodef(errors.ErrorCodeCallStackOverflow, "int64 overflow from word: %v", d) } return Uint64FromWord256(d), nil } @@ -135,7 +136,7 @@ func (st *Stack) Len() int { func (st *Stack) Swap(n int) { st.useGas(GasStackOp) if st.ptr < n { - st.setErr(ErrDataStackUnderflow) + st.setErr(errors.ErrorCodeDataStackUnderflow) return } st.data[st.ptr-n], st.data[st.ptr-1] = st.data[st.ptr-1], st.data[st.ptr-n] @@ -144,7 +145,7 @@ func (st *Stack) Swap(n int) { func (st *Stack) Dup(n int) { st.useGas(GasStackOp) if st.ptr < n { - st.setErr(ErrDataStackUnderflow) + st.setErr(errors.ErrorCodeDataStackUnderflow) return } st.Push(st.data[st.ptr-n]) @@ -153,7 +154,7 @@ func (st *Stack) Dup(n int) { // Not an opcode, costs no gas. func (st *Stack) Peek() Word256 { if st.ptr == 0 { - st.setErr(ErrDataStackUnderflow) + st.setErr(errors.ErrorCodeDataStackUnderflow) return Zero256 } return st.data[st.ptr-1] diff --git a/execution/evm/vm.go b/execution/evm/vm.go index 37e9ec0658cc31da92b6979453833772acb7d606..ec4eb07e1e02f96ec6116da7ff978b8474a02efc 100644 --- a/execution/evm/vm.go +++ b/execution/evm/vm.go @@ -16,7 +16,6 @@ package evm import ( "bytes" - "errors" "fmt" "io/ioutil" "math/big" @@ -27,77 +26,19 @@ import ( . "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" . "github.com/hyperledger/burrow/execution/evm/asm" "github.com/hyperledger/burrow/execution/evm/events" "github.com/hyperledger/burrow/execution/evm/sha3" "github.com/hyperledger/burrow/logging" - "github.com/hyperledger/burrow/permission" ptypes "github.com/hyperledger/burrow/permission/types" ) -var ( - ErrUnknownAddress = errors.New("Unknown address") - ErrInsufficientBalance = errors.New("Insufficient balance") - ErrInvalidJumpDest = errors.New("Invalid jump dest") - ErrInsufficientGas = errors.New("Insufficient gas") - ErrMemoryOutOfBounds = errors.New("Memory out of bounds") - ErrCodeOutOfBounds = errors.New("Code out of bounds") - ErrInputOutOfBounds = errors.New("Input out of bounds") - ErrReturnDataOutOfBounds = errors.New("Return data out of bounds") - ErrCallStackOverflow = errors.New("Call stack overflow") - ErrCallStackUnderflow = errors.New("Call stack underflow") - ErrDataStackOverflow = errors.New("Data stack overflow") - ErrDataStackUnderflow = errors.New("Data stack underflow") - ErrInvalidContract = errors.New("Invalid contract") - ErrNativeContractCodeCopy = errors.New("Tried to copy native contract code") - ErrExecutionAborted = errors.New("Execution aborted") - ErrExecutionReverted = errors.New("Execution reverted") -) - const ( dataStackCapacity = 1024 callStackCapacity = 100 // TODO ensure usage. ) -type ErrPermission struct { - typ string -} - -func (err ErrPermission) Error() string { - return fmt.Sprintf("Contract does not have permission to %s", err.typ) -} - -type ErrNestedCall struct { - NestedError error - Caller crypto.Address - Callee crypto.Address - StackDepth int -} - -func (err ErrNestedCall) Error() string { - return fmt.Sprintf("error in nested call at depth %v: %s (callee) -> %s (caller): %v", - err.StackDepth, err.Callee, err.Caller, err.NestedError) -} - -type ErrCall struct { - CallError error - NestedErrors []ErrNestedCall -} - -func (err ErrCall) Error() string { - buf := new(bytes.Buffer) - buf.WriteString("call error: ") - buf.WriteString(err.CallError.Error()) - if len(err.NestedErrors) > 0 { - buf.WriteString(", nested call errors:\n") - for _, nestedErr := range err.NestedErrors { - buf.WriteString(nestedErr.Error()) - buf.WriteByte('\n') - } - } - return buf.String() -} - type Params struct { BlockHeight uint64 BlockHash Word256 @@ -111,7 +52,7 @@ type VM struct { origin crypto.Address txHash []byte stackDepth int - nestedCallErrors []ErrNestedCall + nestedCallErrors []errors.NestedCall publisher event.Publisher logger *logging.Logger returnData []byte @@ -157,40 +98,41 @@ func HasPermission(stateWriter state.Writer, acc acm.Account, perm ptypes.PermFl return value } -func (vm *VM) fireCallEvent(exception *string, output *[]byte, callerAddress, calleeAddress crypto.Address, input []byte, value uint64, gas *uint64) { +func (vm *VM) fireCallEvent(exception *errors.CodedError, output *[]byte, callerAddress, calleeAddress crypto.Address, input []byte, value uint64, gas *uint64) { // fire the post call event (including exception if applicable) if vm.publisher != nil { - events.PublishAccountCall(vm.publisher, calleeAddress, &events.EventDataCall{ - CallData: &events.CallData{ - Caller: callerAddress, - Callee: calleeAddress, - Data: input, - Value: value, - Gas: *gas, - }, - Origin: vm.origin, - TxHash: vm.txHash, - StackDepth: vm.stackDepth, - Return: *output, - Exception: *exception, - }) + events.PublishAccountCall(vm.publisher, calleeAddress, + &events.EventDataCall{ + CallData: &events.CallData{ + Caller: callerAddress, + Callee: calleeAddress, + Data: input, + Value: value, + Gas: *gas, + }, + Origin: vm.origin, + TxHash: vm.txHash, + StackDepth: vm.stackDepth, + Return: *output, + Exception: errors.AsCodedError(*exception), + }) } } // CONTRACT state is aware of caller and callee, so we can just mutate them. // CONTRACT code and input are not mutated. // CONTRACT returned 'ret' is a new compact slice. -// value: To be transferred from caller to callee. Refunded upon error. +// value: To be transferred from caller to callee. Refunded upon errors.CodedError. // gas: Available gas. No refunds for gas. // code: May be nil, since the CALL opcode may be used to send value from contracts to accounts -func (vm *VM) Call(callState state.Cache, caller, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err error) { +func (vm *VM) Call(callState state.Cache, caller, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err errors.CodedError) { - exception := new(string) + exception := new(errors.CodedError) // fire the post call event (including exception if applicable) defer vm.fireCallEvent(exception, &output, caller.Address(), callee.Address(), input, value, gas) if err = transfer(caller, callee, value); err != nil { - *exception = err.Error() + *exception = err return } //childCallState @@ -201,15 +143,14 @@ func (vm *VM) Call(callState state.Cache, caller, callee acm.MutableAccount, cod output, err = vm.call(childCallState, caller, callee, code, input, value, gas) vm.stackDepth -= 1 if err != nil { - err = ErrCall{ + *exception = errors.Call{ CallError: err, NestedErrors: vm.nestedCallErrors, } - *exception = err.Error() transferErr := transfer(callee, caller, value) if transferErr != nil { - return nil, fmt.Errorf("error transferring value %v %s (callee) -> %s (caller)", - value, callee, caller) + return nil, errors.Wrap(transferErr, + fmt.Sprintf("error transferring value %v %s (callee) -> %s (caller)", value, callee, caller)) } } else { // Copy any state updates from child call frame into current call frame @@ -228,7 +169,7 @@ func (vm *VM) Call(callState state.Cache, caller, callee acm.MutableAccount, cod // The intent of delegate call is to run the code of the callee in the storage context of the caller; // while preserving the original caller to the previous callee. // Different to the normal CALL or CALLCODE, the value does not need to be transferred to the callee. -func (vm *VM) DelegateCall(callState state.Cache, caller acm.Account, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err error) { +func (vm *VM) DelegateCall(callState state.Cache, caller acm.Account, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err errors.CodedError) { exception := new(string) // fire the post call event (including exception if applicable) @@ -257,18 +198,18 @@ func (vm *VM) DelegateCall(callState state.Cache, caller acm.Account, callee acm // Try to deduct gasToUse from gasLeft. If ok return false, otherwise // set err and return true. -func useGasNegative(gasLeft *uint64, gasToUse uint64, err *error) bool { +func useGasNegative(gasLeft *uint64, gasToUse uint64, err *errors.CodedError) bool { if *gasLeft >= gasToUse { *gasLeft -= gasToUse return false } else if *err == nil { - *err = ErrInsufficientGas + *err = errors.ErrorCodeInsufficientGas } return true } // Just like Call() but does not transfer 'value' or modify the callDepth. -func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err error) { +func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.MutableAccount, code, input []byte, value uint64, gas *uint64) (output []byte, err errors.CodedError) { vm.Debugf("(%d) (%X) %X (code=%d) gas: %v (d) %X\n", vm.stackDepth, caller.Address().Bytes()[:4], callee.Address(), len(callee.Code()), *gas, input) @@ -555,7 +496,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable data, memErr := memory.Read(offset, size) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } data = sha3.Sha3(data) stack.PushBytes(data) @@ -575,7 +516,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable return nil, firstErr(err, errAcc) } if acc == nil { - return nil, firstErr(err, ErrUnknownAddress) + return nil, firstErr(err, errors.ErrorCodeUnknownAddress) } balance := acc.Balance() stack.PushU64(balance) @@ -600,7 +541,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable } data, ok := subslice(input, offset, 32) if !ok { - return nil, firstErr(err, ErrInputOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeInputOutOfBounds) } res := LeftPadWord256(data) stack.Push(res) @@ -622,12 +563,12 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable } data, ok := subslice(input, inputOff, length) if !ok { - return nil, firstErr(err, ErrInputOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeInputOutOfBounds) } memErr := memory.Write(memOff, data) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v, %v] %X\n", memOff, inputOff, length, data) @@ -648,12 +589,12 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable } data, ok := subslice(code, codeOff, length) if !ok { - return nil, firstErr(err, ErrCodeOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeCodeOutOfBounds) } memErr := memory.Write(memOff, data) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v, %v] %X\n", memOff, codeOff, length, data) @@ -672,7 +613,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable } if acc == nil { if _, ok := registeredNativeContracts[addr]; !ok { - return nil, firstErr(err, ErrUnknownAddress) + return nil, firstErr(err, errors.ErrorCodeUnknownAddress) } vm.Debugf(" => returning code size of 1 to indicated existence of native contract at %X\n", addr) stack.Push(One256) @@ -694,9 +635,9 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable if acc == nil { if _, ok := registeredNativeContracts[addr]; ok { vm.Debugf(" => attempted to copy native contract at %X but this is not supported\n", addr) - return nil, firstErr(err, ErrNativeContractCodeCopy) + return nil, firstErr(err, errors.ErrorCodeNativeContractCodeCopy) } - return nil, firstErr(err, ErrUnknownAddress) + return nil, firstErr(err, errors.ErrorCodeUnknownAddress) } code := acc.Code() memOff := stack.PopBigInt() @@ -710,12 +651,12 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable } data, ok := subslice(code, codeOff, length) if !ok { - return nil, firstErr(err, ErrCodeOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeCodeOutOfBounds) } memErr := memory.Write(memOff, data) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v, %v] %X\n", memOff, codeOff, length, data) @@ -729,7 +670,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable end := new(big.Int).Add(outputOff, length) if end.BitLen() > 64 || uint64(len(vm.returnData)) < end.Uint64() { - return nil, ErrReturnDataOutOfBounds + return nil, errors.ErrorCodeReturnDataOutOfBounds } data := vm.returnData @@ -737,7 +678,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable memErr := memory.Write(memOff, data) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v, %v] %X\n", memOff, outputOff, length, data) @@ -772,7 +713,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable data, memErr := memory.Read(offset, BigWord256Length) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } stack.Push(LeftPadWord256(data)) vm.Debugf(" => 0x%X @ 0x%X\n", data, offset) @@ -782,7 +723,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable memErr := memory.Write(offset, data.Bytes()) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => 0x%X @ 0x%X\n", data, offset) @@ -796,7 +737,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable memErr := memory.Write(offset, []byte{val}) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v] 0x%X\n", offset, val) @@ -867,7 +808,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable a := int64(op - PUSH1 + 1) codeSegment, ok := subslice(code, pc+1, a) if !ok { - return nil, firstErr(err, ErrCodeOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeCodeOutOfBounds) } res := LeftPadWord256(codeSegment) stack.Push(res) @@ -896,7 +837,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable data, memErr := memory.Read(offset, size) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } if vm.publisher != nil { events.PublishLogEvent(vm.publisher, callee.Address(), &events.EventDataLog{ @@ -911,8 +852,8 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable case CREATE: // 0xF0 vm.returnData = nil - if !HasPermission(callState, callee, permission.CreateContract) { - return nil, ErrPermission{"create_contract"} + if !HasPermission(callState, callee, ptypes.CreateContract) { + return nil, errors.PermissionDenied{Perm: ptypes.CreateContract} } contractValue, popErr := stack.PopU64() if popErr != nil { @@ -922,16 +863,16 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable input, memErr := memory.Read(offset, size) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } // Check balance if callee.Balance() < uint64(contractValue) { - return nil, firstErr(err, ErrInsufficientBalance) + return nil, firstErr(err, errors.ErrorCodeInsufficientBalance) } // TODO charge for gas to create account _ the code length * GasCreateByte - var gasErr error + var gasErr errors.CodedError if useGasNegative(gas, GasCreateAccount, &gasErr) { return nil, firstErr(err, gasErr) } @@ -942,24 +883,24 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable // Run the input to get the contract code. // NOTE: no need to copy 'input' as per Call contract. - ret, err_ := vm.Call(callState, callee, newAccount, input, input, contractValue, gas) - if err_ != nil { + ret, callErr := vm.Call(callState, callee, newAccount, input, input, contractValue, gas) + if callErr != nil { stack.Push(Zero256) + // Note we both set the return buffer and return the result normally vm.returnData = ret + if callErr.ErrorCode() == errors.ErrorCodeExecutionReverted { + return ret, callErr + } } else { newAccount.SetCode(ret) // Set the code (ret need not be copied as per Call contract) stack.Push(newAccount.Address().Word256()) } - if err_ == ErrExecutionReverted { - return nil, ErrExecutionReverted - } - case CALL, CALLCODE, DELEGATECALL: // 0xF1, 0xF2, 0xF4 vm.returnData = nil - if !HasPermission(callState, callee, permission.Call) { - return nil, ErrPermission{"call"} + if !HasPermission(callState, callee, ptypes.Call) { + return nil, errors.PermissionDenied{Perm: ptypes.Call} } gasLimit, popErr := stack.PopU64() if popErr != nil { @@ -991,12 +932,12 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable args, memErr := memory.Read(inOffset, inSize) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } // Ensure that gasLimit is reasonable if *gas < gasLimit { - // EIP150 - the 63/64 rule - rather than error we pass this specified fraction of the total available gas + // EIP150 - the 63/64 rule - rather than errors.CodedError we pass this specified fraction of the total available gas gasLimit = *gas - *gas/64 } // NOTE: we will return any used gas later. @@ -1004,19 +945,14 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable // Begin execution var ret []byte - var callErr error + var callErr errors.CodedError - if nativeContract := registeredNativeContracts[addr]; nativeContract != nil { + if IsRegisteredNativeContract(addr) { // Native contract - ret, callErr = nativeContract(callState, callee, args, &gasLimit, logger) - + ret, callErr = ExecuteNativeContract(addr, callState, callee, args, &gasLimit, logger) // for now we fire the Call event. maybe later we'll fire more particulars - var exception string - if callErr != nil { - exception = callErr.Error() - } // NOTE: these fire call go_events and not particular go_events for eg name reg or permissions - vm.fireCallEvent(&exception, &ret, callee.Address(), crypto.AddressFromWord256(addr), args, value, &gasLimit) + vm.fireCallEvent(&callErr, &ret, callee.Address(), crypto.AddressFromWord256(addr), args, value, &gasLimit) } else { // EVM contract if useGasNegative(gas, GasGetAccount, &callErr) { @@ -1027,24 +963,24 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable return nil, firstErr(callErr, errAcc) } // since CALL is used also for sending funds, - // acc may not exist yet. This is an error for + // acc may not exist yet. This is an errors.CodedError for // CALLCODE, but not for CALL, though I don't think // ethereum actually cares if op == CALLCODE { if acc == nil { - return nil, firstErr(callErr, ErrUnknownAddress) + return nil, firstErr(callErr, errors.ErrorCodeUnknownAddress) } ret, callErr = vm.Call(callState, callee, callee, acc.Code(), args, value, &gasLimit) } else if op == DELEGATECALL { if acc == nil { - return nil, firstErr(callErr, ErrUnknownAddress) + return nil, firstErr(callErr, errors.ErrorCodeUnknownAddress) } ret, callErr = vm.DelegateCall(callState, caller, callee, acc.Code(), args, value, &gasLimit) } else { // nil account means we're sending funds to a new account if acc == nil { - if !HasPermission(callState, caller, permission.CreateAccount) { - return nil, ErrPermission{"create_account"} + if !HasPermission(callState, caller, ptypes.CreateAccount) { + return nil, errors.PermissionDenied{Perm: ptypes.CreateAccount} } acc = acm.ConcreteAccount{Address: crypto.AddressFromWord256(addr)}.MutableAccount() } @@ -1070,8 +1006,8 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable // Push result if callErr != nil { vm.Debugf("error from nested sub-call (depth: %v): %s\n", vm.stackDepth, callErr.Error()) - // So we can return nested error if the top level return is an error - vm.nestedCallErrors = append(vm.nestedCallErrors, ErrNestedCall{ + // So we can return nested errors.CodedError if the top level return is an errors.CodedError + vm.nestedCallErrors = append(vm.nestedCallErrors, errors.NestedCall{ NestedError: callErr, StackDepth: vm.stackDepth, Caller: caller.Address(), @@ -1079,7 +1015,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable }) stack.Push(Zero256) - if callErr == ErrExecutionReverted { + if callErr.ErrorCode() == errors.ErrorCodeExecutionReverted { memory.Write(retOffset, RightPadBytes(ret, int(retSize))) } } else { @@ -1091,7 +1027,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable memErr := memory.Write(retOffset, RightPadBytes(ret, int(retSize))) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(callErr, ErrMemoryOutOfBounds) + return nil, firstErr(callErr, errors.ErrorCodeMemoryOutOfBounds) } } @@ -1105,7 +1041,7 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable output, memErr := memory.Read(offset, size) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v] (%d) 0x%X\n", offset, size, len(output), output) return output, nil @@ -1115,14 +1051,14 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable output, memErr := memory.Read(offset, size) if memErr != nil { vm.Debugf(" => Memory err: %s", memErr) - return nil, firstErr(err, ErrMemoryOutOfBounds) + return nil, firstErr(err, errors.ErrorCodeMemoryOutOfBounds) } vm.Debugf(" => [%v, %v] (%d) 0x%X\n", offset, size, len(output), output) - return output, ErrExecutionReverted + return output, errors.ErrorCodeExecutionReverted case INVALID: //0xFE - return nil, ErrExecutionAborted + return nil, errors.ErrorCodeExecutionAborted case SELFDESTRUCT: // 0xFF addr := stack.Pop() @@ -1134,14 +1070,14 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable return nil, firstErr(err, errAcc) } if receiver == nil { - var gasErr error + var gasErr errors.CodedError if useGasNegative(gas, GasCreateAccount, &gasErr) { return nil, firstErr(err, gasErr) } - if !HasPermission(callState, callee, permission.CreateContract) { - return nil, firstErr(err, ErrPermission{"create_contract"}) + if !HasPermission(callState, callee, ptypes.CreateContract) { + return nil, firstErr(err, errors.PermissionDenied{Perm: ptypes.CreateContract}) } - var createErr error + var createErr errors.CodedError receiver, createErr = vm.createAccount(callState, callee, logger) if createErr != nil { return nil, firstErr(err, createErr) @@ -1162,25 +1098,25 @@ func (vm *VM) call(callState state.Cache, caller acm.Account, callee acm.Mutable return nil, nil case STATICCALL, CREATE2: - return nil, fmt.Errorf("%s not yet implemented", op.Name()) + return nil, errors.Errorf("%s not yet implemented", op.Name()) default: vm.Debugf("(pc) %-3v Unknown opcode %X\n", pc, op) - return nil, fmt.Errorf("unknown opcode %X", op) + return nil, errors.Errorf("unknown opcode %X", op) } pc++ } } -func (vm *VM) createAccount(callState state.Cache, callee acm.MutableAccount, logger *logging.Logger) (acm.MutableAccount, error) { +func (vm *VM) createAccount(callState state.Cache, callee acm.MutableAccount, logger *logging.Logger) (acm.MutableAccount, errors.CodedError) { newAccount := DeriveNewAccount(callee, state.GlobalAccountPermissions(callState), logger) err := callState.UpdateAccount(newAccount) if err != nil { - return nil, err + return nil, errors.AsCodedError(err) } err = callState.UpdateAccount(callee) if err != nil { - return nil, err + return nil, errors.AsCodedError(err) } return newAccount, nil } @@ -1216,33 +1152,33 @@ func codeGetOp(code []byte, n int64) OpCode { } } -func (vm *VM) jump(code []byte, to int64, pc *int64) (err error) { +func (vm *VM) jump(code []byte, to int64, pc *int64) (err errors.CodedError) { dest := codeGetOp(code, to) if dest != JUMPDEST { vm.Debugf(" ~> %v invalid jump dest %v\n", to, dest) - return ErrInvalidJumpDest + return errors.ErrorCodeInvalidJumpDest } vm.Debugf(" ~> %v\n", to) *pc = to return nil } -func firstErr(errA, errB error) error { +func firstErr(errA, errB error) errors.CodedError { if errA != nil { - return errA + return errors.AsCodedError(errA) } else { - return errB + return errors.AsCodedError(errB) } } -func transfer(from, to acm.MutableAccount, amount uint64) error { +func transfer(from, to acm.MutableAccount, amount uint64) errors.CodedError { if from.Balance() < amount { - return ErrInsufficientBalance + return errors.ErrorCodeInsufficientBalance } else { from.SubtractFromBalance(amount) _, err := to.AddToBalance(amount) if err != nil { - return err + return errors.AsCodedError(err) } } return nil diff --git a/execution/evm/vm_test.go b/execution/evm/vm_test.go index fcd008459d25238492445e8acf065ef7dce91b8a..b7752b66c324ece4cc1d0f97d4f497934084e3cb 100644 --- a/execution/evm/vm_test.go +++ b/execution/evm/vm_test.go @@ -17,7 +17,6 @@ package evm import ( "context" "encoding/hex" - "errors" "fmt" "strconv" "testing" @@ -28,6 +27,7 @@ import ( . "github.com/hyperledger/burrow/binary" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" . "github.com/hyperledger/burrow/execution/evm/asm" . "github.com/hyperledger/burrow/execution/evm/asm/bc" evm_events "github.com/hyperledger/burrow/execution/evm/events" @@ -663,8 +663,8 @@ func TestRevert(t *testing.T) { 0x67, 0x65, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, PUSH1, 0x00, MSTORE, PUSH1, 0x0E, PUSH1, 0x00, REVERT)*/ - output, err := ourVm.Call(cache, account1, account2, bytecode, []byte{}, 0, &gas) - assert.Error(t, err, "Expected execution reverted error") + output, cErr := ourVm.Call(cache, account1, account2, bytecode, []byte{}, 0, &gas) + assert.Error(t, cErr, "Expected execution reverted error") storageVal, err := cache.GetStorage(account1.Address(), LeftPadWord256(key)) assert.Equal(t, LeftPadWord256(value), storageVal) @@ -884,7 +884,7 @@ func TestInvalid(t *testing.T) { 0x00, 0x00, 0x00, PUSH1, 0x00, MSTORE, PUSH1, 0x0E, PUSH1, 0x00, INVALID) output, err := ourVm.Call(cache, account1, account2, bytecode, []byte{}, 0, &gas) - expected := "call error: " + ErrExecutionAborted.Error() + expected := errors.ErrorCodeExecutionAborted.Error() assert.EqualError(t, err, expected) t.Logf("Output: %v Error: %v\n", output, err) @@ -1021,8 +1021,8 @@ func runVMWaitError(vmCache state.Cache, ourVm *VM, caller, callee acm.MutableAc } select { case eventDataCall := <-eventCh: - if eventDataCall.Exception != "" { - return output, errors.New(eventDataCall.Exception) + if eventDataCall.Exception != nil { + return output, eventDataCall.Exception } return output, nil } diff --git a/execution/execution.go b/execution/execution.go index 74eab81fe51fae147219e0fbcd3bc4935a478cc7..c97fd2fbf431f1b39ad54bacb1cf8e9b57aea533 100644 --- a/execution/execution.go +++ b/execution/execution.go @@ -25,6 +25,7 @@ import ( bcm "github.com/hyperledger/burrow/blockchain" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" "github.com/hyperledger/burrow/execution/events" "github.com/hyperledger/burrow/execution/evm" "github.com/hyperledger/burrow/execution/names" @@ -235,11 +236,11 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { if exe.eventCache != nil { for _, i := range tx.Inputs { - events.PublishAccountInput(exe.eventCache, i.Address, txEnv.Tx, nil, "") + events.PublishAccountInput(exe.eventCache, i.Address, txEnv.Tx, nil, nil) } for _, o := range tx.Outputs { - events.PublishAccountOutput(exe.eventCache, o.Address, txEnv.Tx, nil, "") + events.PublishAccountOutput(exe.eventCache, o.Address, txEnv.Tx, nil, nil) } } return nil @@ -285,7 +286,7 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { if !createContract { // check if its a native contract - if evm.RegisteredNativeContract(tx.Address.Word256()) { + if evm.IsRegisteredNativeContract(tx.Address.Word256()) { return fmt.Errorf("attempt to call a native contract at %s, "+ "but native contracts cannot be called using CallTx. Use a "+ "contract that calls the native contract or the appropriate tx "+ @@ -418,13 +419,9 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { // Fire Events for sender and receiver // a separate event will be fired from vm for each additional call if exe.eventCache != nil { - exception := "" - if err != nil { - exception = err.Error() - } - events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, ret, exception) + events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, ret, errors.AsCodedError(err)) if tx.Address != nil { - events.PublishAccountOutput(exe.eventCache, *tx.Address, txEnv.Tx, ret, exception) + events.PublishAccountOutput(exe.eventCache, *tx.Address, txEnv.Tx, ret, errors.AsCodedError(err)) } } } else { @@ -599,7 +596,7 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { // TODO: maybe we want to take funds on error and allow txs in that don't do anythingi? if exe.eventCache != nil { - events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, nil, "") + events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, nil, nil) events.PublishNameReg(exe.eventCache, txEnv.Tx) } @@ -765,7 +762,7 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { // check permission if !HasPermission(exe.stateCache, inAcc, permFlag, logger) { return fmt.Errorf("account %s does not have moderator permission %s (%b)", tx.Input.Address, - permission.PermFlagToString(permFlag), permFlag) + permFlag.String(), permFlag) } err = validateInput(inAcc, tx.Input) @@ -783,27 +780,27 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { var permAcc acm.Account switch tx.PermArgs.PermFlag { - case permission.HasBase: + case ptypes.HasBase: // this one doesn't make sense from txs return fmt.Errorf("HasBase is for contracts, not humans. Just look at the blockchain") - case permission.SetBase: + case ptypes.SetBase: permAcc, err = mutatePermissions(exe.stateCache, *tx.PermArgs.Address, func(perms *ptypes.AccountPermissions) error { return perms.Base.Set(*tx.PermArgs.Permission, *tx.PermArgs.Value) }) - case permission.UnsetBase: + case ptypes.UnsetBase: permAcc, err = mutatePermissions(exe.stateCache, *tx.PermArgs.Address, func(perms *ptypes.AccountPermissions) error { return perms.Base.Unset(*tx.PermArgs.Permission) }) - case permission.SetGlobal: + case ptypes.SetGlobal: permAcc, err = mutatePermissions(exe.stateCache, acm.GlobalPermissionsAddress, func(perms *ptypes.AccountPermissions) error { return perms.Base.Set(*tx.PermArgs.Permission, *tx.PermArgs.Value) }) - case permission.HasRole: + case ptypes.HasRole: return fmt.Errorf("HasRole is for contracts, not humans. Just look at the blockchain") - case permission.AddRole: + case ptypes.AddRole: permAcc, err = mutatePermissions(exe.stateCache, *tx.PermArgs.Address, func(perms *ptypes.AccountPermissions) error { if !perms.AddRole(*tx.PermArgs.Role) { @@ -812,7 +809,7 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { } return nil }) - case permission.RemoveRole: + case ptypes.RemoveRole: permAcc, err = mutatePermissions(exe.stateCache, *tx.PermArgs.Address, func(perms *ptypes.AccountPermissions) error { if !perms.RmRole(*tx.PermArgs.Role) { @@ -822,7 +819,7 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { return nil }) default: - return fmt.Errorf("invalid permission function: %s", permission.PermFlagToString(permFlag)) + return fmt.Errorf("invalid permission function: %v", permFlag) } // TODO: maybe we want to take funds on error and allow txs in that don't do anythingi? @@ -847,8 +844,8 @@ func (exe *executor) Execute(txEnv *txs.Envelope) (err error) { } if exe.eventCache != nil { - events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, nil, "") - events.PublishPermissions(exe.eventCache, permission.PermFlagToString(permFlag), txEnv.Tx) + events.PublishAccountInput(exe.eventCache, tx.Input.Address, txEnv.Tx, nil, nil) + events.PublishPermissions(exe.eventCache, permFlag, txEnv.Tx) } return nil @@ -1158,32 +1155,30 @@ func adjustByOutputs(accs map[crypto.Address]acm.MutableAccount, outs []*payload // Get permission on an account or fall back to global value func HasPermission(accountGetter state.AccountGetter, acc acm.Account, perm ptypes.PermFlag, logger *logging.Logger) bool { - if perm > permission.AllPermFlags { + if perm > ptypes.AllPermFlags { logger.InfoMsg( fmt.Sprintf("HasPermission called on invalid permission 0b%b (invalid) > 0b%b (maximum) ", - perm, permission.AllPermFlags), + perm, ptypes.AllPermFlags), "invalid_permission", perm, - "maximum_permission", permission.AllPermFlags) + "maximum_permission", ptypes.AllPermFlags) return false } - permString := permission.String(perm) - v, err := acc.Permissions().Base.Compose(state.GlobalAccountPermissions(accountGetter).Base).Get(perm) if err != nil { logger.TraceMsg("Error obtaining permission value (will default to false/deny)", - "perm_flag", permString, + "perm_flag", perm.String(), structure.ErrorKey, err) } if v { logger.TraceMsg("Account has permission", "account_address", acc.Address, - "perm_flag", permString) + "perm_flag", perm.String()) } else { logger.TraceMsg("Account does not have permission", "account_address", acc.Address, - "perm_flag", permString) + "perm_flag", perm.String()) } return v } @@ -1192,7 +1187,7 @@ func HasPermission(accountGetter state.AccountGetter, acc acm.Account, perm ptyp func hasSendPermission(accountGetter state.AccountGetter, accs map[crypto.Address]acm.MutableAccount, logger *logging.Logger) bool { for _, acc := range accs { - if !HasPermission(accountGetter, acc, permission.Send, logger) { + if !HasPermission(accountGetter, acc, ptypes.Send, logger) { return false } } @@ -1201,23 +1196,23 @@ func hasSendPermission(accountGetter state.AccountGetter, accs map[crypto.Addres func hasNamePermission(accountGetter state.AccountGetter, acc acm.Account, logger *logging.Logger) bool { - return HasPermission(accountGetter, acc, permission.Name, logger) + return HasPermission(accountGetter, acc, ptypes.Name, logger) } func hasCallPermission(accountGetter state.AccountGetter, acc acm.Account, logger *logging.Logger) bool { - return HasPermission(accountGetter, acc, permission.Call, logger) + return HasPermission(accountGetter, acc, ptypes.Call, logger) } func hasCreateContractPermission(accountGetter state.AccountGetter, acc acm.Account, logger *logging.Logger) bool { - return HasPermission(accountGetter, acc, permission.CreateContract, logger) + return HasPermission(accountGetter, acc, ptypes.CreateContract, logger) } func hasCreateAccountPermission(accountGetter state.AccountGetter, accs map[crypto.Address]acm.MutableAccount, logger *logging.Logger) bool { for _, acc := range accs { - if !HasPermission(accountGetter, acc, permission.CreateAccount, logger) { + if !HasPermission(accountGetter, acc, ptypes.CreateAccount, logger) { return false } } @@ -1226,14 +1221,14 @@ func hasCreateAccountPermission(accountGetter state.AccountGetter, accs map[cryp func hasBondPermission(accountGetter state.AccountGetter, acc acm.Account, logger *logging.Logger) bool { - return HasPermission(accountGetter, acc, permission.Bond, logger) + return HasPermission(accountGetter, acc, ptypes.Bond, logger) } func hasBondOrSendPermission(accountGetter state.AccountGetter, accs map[crypto.Address]acm.Account, logger *logging.Logger) bool { for _, acc := range accs { - if !HasPermission(accountGetter, acc, permission.Bond, logger) { - if !HasPermission(accountGetter, acc, permission.Send, logger) { + if !HasPermission(accountGetter, acc, ptypes.Bond, logger) { + if !HasPermission(accountGetter, acc, ptypes.Send, logger) { return false } } diff --git a/execution/execution_test.go b/execution/execution_test.go index e846840971b8f741ffa2bf54a8f425161728fbd7..6a92abe455cbeeae5cb115e0c1f65afc5235995d 100644 --- a/execution/execution_test.go +++ b/execution/execution_test.go @@ -30,6 +30,7 @@ import ( bcm "github.com/hyperledger/burrow/blockchain" "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/event" + "github.com/hyperledger/burrow/execution/errors" exe_events "github.com/hyperledger/burrow/execution/events" "github.com/hyperledger/burrow/execution/evm" . "github.com/hyperledger/burrow/execution/evm/asm" @@ -187,9 +188,9 @@ func TestSendFails(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[1].Permissions.Base.Set(permission.Send, true) - genDoc.Accounts[2].Permissions.Base.Set(permission.Call, true) - genDoc.Accounts[3].Permissions.Base.Set(permission.CreateContract, true) + genDoc.Accounts[1].Permissions.Base.Set(ptypes.Send, true) + genDoc.Accounts[2].Permissions.Base.Set(ptypes.Call, true) + genDoc.Accounts[3].Permissions.Base.Set(ptypes.CreateContract, true) st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -224,7 +225,7 @@ func TestSendFails(t *testing.T) { // simple send tx to unknown account without create_account perm should fail acc := getAccount(batchCommitter.stateCache, users[3].Address()) - acc.MutablePermissions().Base.Set(permission.Send, true) + acc.MutablePermissions().Base.Set(ptypes.Send, true) batchCommitter.stateCache.UpdateAccount(acc) tx = payload.NewSendTx() if err := tx.AddInput(batchCommitter.stateCache, users[3].PublicKey(), 5); err != nil { @@ -238,8 +239,8 @@ func TestName(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Send, true) - genDoc.Accounts[1].Permissions.Base.Set(permission.Name, true) + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Send, true) + genDoc.Accounts[1].Permissions.Base.Set(ptypes.Name, true) st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -266,9 +267,9 @@ func TestCallFails(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[1].Permissions.Base.Set(permission.Send, true) - genDoc.Accounts[2].Permissions.Base.Set(permission.Call, true) - genDoc.Accounts[3].Permissions.Base.Set(permission.CreateContract, true) + genDoc.Accounts[1].Permissions.Base.Set(ptypes.Send, true) + genDoc.Accounts[2].Permissions.Base.Set(ptypes.Call, true) + genDoc.Accounts[3].Permissions.Base.Set(ptypes.CreateContract, true) st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -309,7 +310,7 @@ func TestSendPermission(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Send, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Send, true) // give the 0 account permission st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -334,7 +335,7 @@ func TestCallPermission(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Call, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Call, true) // give the 0 account permission st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -382,27 +383,23 @@ func TestCallPermission(t *testing.T) { require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception := execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception == "" { - t.Fatal("Expected exception") - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.Error(t, err) //---------------------------------------------------------- // call to contract that calls simple contract - with perm fmt.Println("\n##### CALL TO SIMPLE CONTRACT (PASS)") // A single input, having the permission, and the contract has permission - caller1Acc.MutablePermissions().Base.Set(permission.Call, true) + caller1Acc.MutablePermissions().Base.Set(ptypes.Call, true) batchCommitter.stateCache.UpdateAccount(caller1Acc) tx, _ = payload.NewCallTx(batchCommitter.stateCache, users[0].PublicKey(), &caller1ContractAddr, nil, 100, 10000, 100) txEnv = txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception != "" { - t.Fatal("Unexpected exception:", exception) - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.NoError(t, err) //---------------------------------------------------------- // call to contract that calls contract that calls simple contract - without perm @@ -420,8 +417,8 @@ func TestCallPermission(t *testing.T) { StorageRoot: Zero256.Bytes(), Permissions: permission.ZeroAccountPermissions, }.MutableAccount() - caller1Acc.MutablePermissions().Base.Set(permission.Call, false) - caller2Acc.MutablePermissions().Base.Set(permission.Call, true) + caller1Acc.MutablePermissions().Base.Set(ptypes.Call, false) + caller2Acc.MutablePermissions().Base.Set(ptypes.Call, true) batchCommitter.stateCache.UpdateAccount(caller1Acc) batchCommitter.stateCache.UpdateAccount(caller2Acc) @@ -429,10 +426,8 @@ func TestCallPermission(t *testing.T) { txEnv = txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception == "" { - t.Fatal("Expected exception") - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.Error(t, err) //---------------------------------------------------------- // call to contract that calls contract that calls simple contract - without perm @@ -440,7 +435,7 @@ func TestCallPermission(t *testing.T) { // both caller1 and caller2 have permission fmt.Println("\n##### CALL TO CONTRACT CALLING SIMPLE CONTRACT (PASS)") - caller1Acc.MutablePermissions().Base.Set(permission.Call, true) + caller1Acc.MutablePermissions().Base.Set(ptypes.Call, true) batchCommitter.stateCache.UpdateAccount(caller1Acc) tx, _ = payload.NewCallTx(batchCommitter.stateCache, users[0].PublicKey(), &caller2ContractAddr, nil, 100, 10000, 100) @@ -448,18 +443,16 @@ func TestCallPermission(t *testing.T) { require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception != "" { - t.Fatal("Unexpected exception", exception) - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.NoError(t, err) } func TestCreatePermission(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.CreateContract, true) // give the 0 account permission - genDoc.Accounts[0].Permissions.Base.Set(permission.Call, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.CreateContract, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Call, true) // give the 0 account permission st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -517,16 +510,14 @@ func TestCreatePermission(t *testing.T) { txEnv := txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception := execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(contractAddr)) // - if exception == "" { - t.Fatal("expected exception") - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(contractAddr)) // + require.Error(t, err) //------------------------------ // call the contract (should PASS) fmt.Println("\n###### CALL THE FACTORY (PASS)") - contractAcc.MutablePermissions().Base.Set(permission.CreateContract, true) + contractAcc.MutablePermissions().Base.Set(ptypes.CreateContract, true) batchCommitter.stateCache.UpdateAccount(contractAcc) // A single input, having the permission, should succeed @@ -534,10 +525,8 @@ func TestCreatePermission(t *testing.T) { txEnv = txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(contractAddr)) // - if exception != "" { - t.Fatal("unexpected exception", exception) - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(contractAddr)) // + require.NoError(t, err) //-------------------------------- fmt.Println("\n##### CALL to empty address") @@ -552,8 +541,8 @@ func TestCreatePermission(t *testing.T) { StorageRoot: Zero256.Bytes(), Permissions: permission.ZeroAccountPermissions, }.MutableAccount() - contractAcc.MutablePermissions().Base.Set(permission.Call, true) - contractAcc.MutablePermissions().Base.Set(permission.CreateContract, true) + contractAcc.MutablePermissions().Base.Set(ptypes.Call, true) + contractAcc.MutablePermissions().Base.Set(ptypes.CreateContract, true) batchCommitter.stateCache.UpdateAccount(contractAcc) // this should call the 0 address but not create ... @@ -561,10 +550,8 @@ func TestCreatePermission(t *testing.T) { txEnv = txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(crypto.Address{})) // - if exception != "" { - t.Fatal("unexpected exception", exception) - } + _, err = execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(crypto.Address{})) // + require.NoError(t, err) zeroAcc := getAccount(batchCommitter.stateCache, crypto.Address{}) if len(zeroAcc.Code()) != 0 { t.Fatal("the zero account was given code from a CALL!") @@ -575,9 +562,9 @@ func TestCreateAccountPermission(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Send, true) // give the 0 account permission - genDoc.Accounts[1].Permissions.Base.Set(permission.Send, true) // give the 0 account permission - genDoc.Accounts[0].Permissions.Base.Set(permission.CreateAccount, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Send, true) // give the 0 account permission + genDoc.Accounts[1].Permissions.Base.Set(ptypes.Send, true) // give the 0 account permission + genDoc.Accounts[0].Permissions.Base.Set(ptypes.CreateAccount, true) // give the 0 account permission st, err := MakeGenesisState(stateDB, &genDoc) require.NoError(t, err) batchCommitter := makeExecutor(st) @@ -618,7 +605,7 @@ func TestCreateAccountPermission(t *testing.T) { // Two inputs, both with send, both with create, should pass acc := getAccount(batchCommitter.stateCache, users[1].Address()) - acc.MutablePermissions().Base.Set(permission.CreateAccount, true) + acc.MutablePermissions().Base.Set(ptypes.CreateAccount, true) batchCommitter.stateCache.UpdateAccount(acc) tx = payload.NewSendTx() if err := tx.AddInput(batchCommitter.stateCache, users[0].PublicKey(), 5); err != nil { @@ -646,7 +633,7 @@ func TestCreateAccountPermission(t *testing.T) { // CALL to unknown account acc = getAccount(batchCommitter.stateCache, users[0].Address()) - acc.MutablePermissions().Base.Set(permission.Call, true) + acc.MutablePermissions().Base.Set(ptypes.Call, true) batchCommitter.stateCache.UpdateAccount(acc) // call to contract that calls unknown account - without create_account perm @@ -669,15 +656,13 @@ func TestCreateAccountPermission(t *testing.T) { txCallEnv.Sign(users[0]) // we need to subscribe to the Call event to detect the exception - _, exception := execTxWaitEvent(t, batchCommitter, txCallEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception == "" { - t.Fatal("Expected exception") - } + _, err = execTxWaitEvent(t, batchCommitter, txCallEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.Error(t, err) // NOTE: for a contract to be able to CreateAccount, it must be able to call // NOTE: for a users to be able to CreateAccount, it must be able to send! - caller1Acc.MutablePermissions().Base.Set(permission.CreateAccount, true) - caller1Acc.MutablePermissions().Base.Set(permission.Call, true) + caller1Acc.MutablePermissions().Base.Set(ptypes.CreateAccount, true) + caller1Acc.MutablePermissions().Base.Set(ptypes.Call, true) batchCommitter.stateCache.UpdateAccount(caller1Acc) // A single input, having the permission, but the contract doesn't have permission txCall, _ = payload.NewCallTx(batchCommitter.stateCache, users[0].PublicKey(), &caller1ContractAddr, nil, 100, 10000, 100) @@ -685,10 +670,8 @@ func TestCreateAccountPermission(t *testing.T) { txCallEnv.Sign(users[0]) // we need to subscribe to the Call event to detect the exception - _, exception = execTxWaitEvent(t, batchCommitter, txCallEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // - if exception != "" { - t.Fatal("Unexpected exception", exception) - } + _, err = execTxWaitEvent(t, batchCommitter, txCallEnv, evm_events.EventStringAccountCall(caller1ContractAddr)) // + require.NoError(t, err) } @@ -703,8 +686,8 @@ func TestSNativeCALL(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Call, true) // give the 0 account permission - genDoc.Accounts[3].Permissions.Base.Set(permission.Bond, true) // some arbitrary permission to play with + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Call, true) // give the 0 account permission + genDoc.Accounts[3].Permissions.Base.Set(ptypes.Bond, true) // some arbitrary permission to play with genDoc.Accounts[3].Permissions.AddRole("bumble") genDoc.Accounts[3].Permissions.AddRole("bee") st, err := MakeGenesisState(stateDB, &genDoc) @@ -724,13 +707,13 @@ func TestSNativeCALL(t *testing.T) { Permissions: permission.ZeroAccountPermissions, }.MutableAccount() - doug.MutablePermissions().Base.Set(permission.Call, true) + doug.MutablePermissions().Base.Set(ptypes.Call, true) //doug.Permissions.Base.Set(permission.HasBase, true) batchCommitter.stateCache.UpdateAccount(doug) fmt.Println("\n#### HasBase") // HasBase - snativeAddress, pF, data := snativePermTestInputCALL("hasBase", users[3], permission.Bond, false) + snativeAddress, pF, data := snativePermTestInputCALL("hasBase", users[3], ptypes.Bond, false) testSNativeCALLExpectFail(t, batchCommitter, doug, snativeAddress, data) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { // return value should be true or false as a 32 byte array... @@ -742,10 +725,10 @@ func TestSNativeCALL(t *testing.T) { fmt.Println("\n#### SetBase") // SetBase - snativeAddress, pF, data = snativePermTestInputCALL("setBase", users[3], permission.Bond, false) + snativeAddress, pF, data = snativePermTestInputCALL("setBase", users[3], ptypes.Bond, false) testSNativeCALLExpectFail(t, batchCommitter, doug, snativeAddress, data) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { return nil }) - snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], permission.Bond, false) + snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], ptypes.Bond, false) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { // return value should be true or false as a 32 byte array... if !IsZeros(ret) { @@ -753,9 +736,9 @@ func TestSNativeCALL(t *testing.T) { } return nil }) - snativeAddress, pF, data = snativePermTestInputCALL("setBase", users[3], permission.CreateContract, true) + snativeAddress, pF, data = snativePermTestInputCALL("setBase", users[3], ptypes.CreateContract, true) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { return nil }) - snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], permission.CreateContract, false) + snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], ptypes.CreateContract, false) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { // return value should be true or false as a 32 byte array... if !IsZeros(ret[:31]) || ret[31] != byte(1) { @@ -766,10 +749,10 @@ func TestSNativeCALL(t *testing.T) { fmt.Println("\n#### UnsetBase") // UnsetBase - snativeAddress, pF, data = snativePermTestInputCALL("unsetBase", users[3], permission.CreateContract, false) + snativeAddress, pF, data = snativePermTestInputCALL("unsetBase", users[3], ptypes.CreateContract, false) testSNativeCALLExpectFail(t, batchCommitter, doug, snativeAddress, data) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { return nil }) - snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], permission.CreateContract, false) + snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], ptypes.CreateContract, false) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { if !IsZeros(ret) { return fmt.Errorf("Expected 0. Got %X", ret) @@ -779,10 +762,10 @@ func TestSNativeCALL(t *testing.T) { fmt.Println("\n#### SetGlobal") // SetGlobalPerm - snativeAddress, pF, data = snativePermTestInputCALL("setGlobal", users[3], permission.CreateContract, true) + snativeAddress, pF, data = snativePermTestInputCALL("setGlobal", users[3], ptypes.CreateContract, true) testSNativeCALLExpectFail(t, batchCommitter, doug, snativeAddress, data) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { return nil }) - snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], permission.CreateContract, false) + snativeAddress, pF, data = snativePermTestInputCALL("hasBase", users[3], ptypes.CreateContract, false) testSNativeCALLExpectPass(t, batchCommitter, doug, pF, snativeAddress, data, func(ret []byte) error { // return value should be true or false as a 32 byte array... if !IsZeros(ret[:31]) || ret[31] != byte(1) { @@ -840,8 +823,8 @@ func TestSNativeTx(t *testing.T) { stateDB := dbm.NewDB("state", dbBackend, dbDir) defer stateDB.Close() genDoc := newBaseGenDoc(permission.ZeroAccountPermissions, permission.ZeroAccountPermissions) - genDoc.Accounts[0].Permissions.Base.Set(permission.Call, true) // give the 0 account permission - genDoc.Accounts[3].Permissions.Base.Set(permission.Bond, true) // some arbitrary permission to play with + genDoc.Accounts[0].Permissions.Base.Set(ptypes.Call, true) // give the 0 account permission + genDoc.Accounts[3].Permissions.Base.Set(ptypes.Bond, true) // some arbitrary permission to play with genDoc.Accounts[3].Permissions.AddRole("bumble") genDoc.Accounts[3].Permissions.AddRole("bee") st, err := MakeGenesisState(stateDB, &genDoc) @@ -853,37 +836,37 @@ func TestSNativeTx(t *testing.T) { fmt.Println("\n#### SetBase") // SetBase - snativeArgs := snativePermTestInputTx("setBase", users[3], permission.Bond, false) + snativeArgs := snativePermTestInputTx("setBase", users[3], ptypes.Bond, false) testSNativeTxExpectFail(t, batchCommitter, snativeArgs) - testSNativeTxExpectPass(t, batchCommitter, permission.SetBase, snativeArgs) + testSNativeTxExpectPass(t, batchCommitter, ptypes.SetBase, snativeArgs) acc := getAccount(batchCommitter.stateCache, users[3].Address()) - if v, _ := acc.MutablePermissions().Base.Get(permission.Bond); v { + if v, _ := acc.MutablePermissions().Base.Get(ptypes.Bond); v { t.Fatal("expected permission to be set false") } - snativeArgs = snativePermTestInputTx("setBase", users[3], permission.CreateContract, true) - testSNativeTxExpectPass(t, batchCommitter, permission.SetBase, snativeArgs) + snativeArgs = snativePermTestInputTx("setBase", users[3], ptypes.CreateContract, true) + testSNativeTxExpectPass(t, batchCommitter, ptypes.SetBase, snativeArgs) acc = getAccount(batchCommitter.stateCache, users[3].Address()) - if v, _ := acc.MutablePermissions().Base.Get(permission.CreateContract); !v { + if v, _ := acc.MutablePermissions().Base.Get(ptypes.CreateContract); !v { t.Fatal("expected permission to be set true") } fmt.Println("\n#### UnsetBase") // UnsetBase - snativeArgs = snativePermTestInputTx("unsetBase", users[3], permission.CreateContract, false) + snativeArgs = snativePermTestInputTx("unsetBase", users[3], ptypes.CreateContract, false) testSNativeTxExpectFail(t, batchCommitter, snativeArgs) - testSNativeTxExpectPass(t, batchCommitter, permission.UnsetBase, snativeArgs) + testSNativeTxExpectPass(t, batchCommitter, ptypes.UnsetBase, snativeArgs) acc = getAccount(batchCommitter.stateCache, users[3].Address()) - if v, _ := acc.MutablePermissions().Base.Get(permission.CreateContract); v { + if v, _ := acc.MutablePermissions().Base.Get(ptypes.CreateContract); v { t.Fatal("expected permission to be set false") } fmt.Println("\n#### SetGlobal") // SetGlobalPerm - snativeArgs = snativePermTestInputTx("setGlobal", users[3], permission.CreateContract, true) + snativeArgs = snativePermTestInputTx("setGlobal", users[3], ptypes.CreateContract, true) testSNativeTxExpectFail(t, batchCommitter, snativeArgs) - testSNativeTxExpectPass(t, batchCommitter, permission.SetGlobal, snativeArgs) + testSNativeTxExpectPass(t, batchCommitter, ptypes.SetGlobal, snativeArgs) acc = getAccount(batchCommitter.stateCache, acm.GlobalPermissionsAddress) - if v, _ := acc.MutablePermissions().Base.Get(permission.CreateContract); !v { + if v, _ := acc.MutablePermissions().Base.Get(ptypes.CreateContract); !v { t.Fatal("expected permission to be set true") } @@ -891,7 +874,7 @@ func TestSNativeTx(t *testing.T) { // AddRole snativeArgs = snativeRoleTestInputTx("addRole", users[3], "chuck") testSNativeTxExpectFail(t, batchCommitter, snativeArgs) - testSNativeTxExpectPass(t, batchCommitter, permission.AddRole, snativeArgs) + testSNativeTxExpectPass(t, batchCommitter, ptypes.AddRole, snativeArgs) acc = getAccount(batchCommitter.stateCache, users[3].Address()) if v := acc.Permissions().HasRole("chuck"); !v { t.Fatal("expected role to be added") @@ -901,7 +884,7 @@ func TestSNativeTx(t *testing.T) { // RemoveRole snativeArgs = snativeRoleTestInputTx("removeRole", users[3], "chuck") testSNativeTxExpectFail(t, batchCommitter, snativeArgs) - testSNativeTxExpectPass(t, batchCommitter, permission.RemoveRole, snativeArgs) + testSNativeTxExpectPass(t, batchCommitter, ptypes.RemoveRole, snativeArgs) acc = getAccount(batchCommitter.stateCache, users[3].Address()) if v := acc.Permissions().HasRole("chuck"); v { t.Fatal("expected role to be removed") @@ -1671,11 +1654,11 @@ func addressPtr(account acm.Account) *crypto.Address { //------------------------------------------------------------------------------------- // helpers -var ExceptionTimeOut = "timed out waiting for event" +var ExceptionTimeOut = errors.NewCodedError(errors.ErrorCodeGeneric, "timed out waiting for event") // run ExecTx and wait for the Call event on given addr // returns the msg data and an error/exception -func execTxWaitEvent(t *testing.T, batchCommitter *executor, txEnv *txs.Envelope, eventid string) (interface{}, string) { +func execTxWaitEvent(t *testing.T, batchCommitter *executor, txEnv *txs.Envelope, eventid string) (interface{}, error) { emitter := event.NewEmitter(logger) ch := make(chan interface{}) emitter.Subscribe(context.Background(), "test", event.QueryForEventID(eventid), ch) @@ -1683,7 +1666,7 @@ func execTxWaitEvent(t *testing.T, batchCommitter *executor, txEnv *txs.Envelope batchCommitter.eventCache = evc go func() { if err := batchCommitter.Execute(txEnv); err != nil { - ch <- err.Error() + ch <- err } evc.Flush() }() @@ -1693,13 +1676,19 @@ func execTxWaitEvent(t *testing.T, batchCommitter *executor, txEnv *txs.Envelope case msg := <-ch: switch ev := msg.(type) { case *exe_events.EventDataTx: - return ev, ev.Exception + if ev.Exception != nil { + return nil, ev.Exception + } + return ev, nil case *evm_events.EventDataCall: - return ev, ev.Exception - case string: + if ev.Exception != nil { + return nil, ev.Exception + } + return ev, nil + case error: return nil, ev default: - return ev, "" + return ev, nil } case <-ticker.C: return nil, ExceptionTimeOut @@ -1733,23 +1722,19 @@ func testSNativeCALL(t *testing.T, expectPass bool, batchCommitter *executor, do txEnv := txs.Enclose(testChainID, tx) require.NoError(t, txEnv.Sign(users[0])) t.Logf("subscribing to %v", evm_events.EventStringAccountCall(snativeAddress)) - ev, exception := execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(snativeAddress)) - if exception == ExceptionTimeOut { + ev, err := execTxWaitEvent(t, batchCommitter, txEnv, evm_events.EventStringAccountCall(snativeAddress)) + if err == ExceptionTimeOut { t.Fatal("Timed out waiting for event") } if expectPass { - if exception != "" { - t.Fatal("Unexpected exception", exception) - } + require.NoError(t, err) evv := ev.(*evm_events.EventDataCall) ret := evv.Return if err := f(ret); err != nil { t.Fatal(err) } } else { - if exception == "" { - t.Fatal("Expected exception") - } + require.Error(t, err) } } @@ -1820,7 +1805,7 @@ func snativePermTestInputCALL(name string, user acm.AddressableSigner, perm ptyp } data = append(permNameToFuncID(name), data...) var err error - if pF, err = permission.PermStringToFlag(name); err != nil { + if pF, err = ptypes.PermStringToFlag(name); err != nil { panic(fmt.Sprintf("failed to convert perm string (%s) to flag", name)) } return @@ -1850,7 +1835,7 @@ func snativeRoleTestInputCALL(name string, user acm.AddressableSigner, data = append(permNameToFuncID(name), data...) var err error - if pF, err = permission.PermStringToFlag(name); err != nil { + if pF, err = ptypes.PermStringToFlag(name); err != nil { panic(fmt.Sprintf("failed to convert perm string (%s) to flag", name)) } return diff --git a/execution/state.go b/execution/state.go index 7ccc79196f5d61145ff22a9286e351ec05a9963b..da8ce2053d3da3a004de37e70616b9b089edb3a5 100644 --- a/execution/state.go +++ b/execution/state.go @@ -28,7 +28,8 @@ import ( "github.com/hyperledger/burrow/execution/names" "github.com/hyperledger/burrow/genesis" "github.com/hyperledger/burrow/logging" - ptypes "github.com/hyperledger/burrow/permission" + "github.com/hyperledger/burrow/permission" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/tendermint/go-wire" "github.com/tendermint/iavl" dbm "github.com/tendermint/tmlibs/db" @@ -106,7 +107,7 @@ func MakeGenesisState(db dbm.DB, genesisDoc *genesis.GenesisDoc) (*State, error) // global permissions are saved as the 0 address // so they are included in the accounts tree - globalPerms := ptypes.DefaultAccountPermissions + globalPerms := permission.DefaultAccountPermissions globalPerms = genesisDoc.GlobalPermissions // XXX: make sure the set bits are all true // Without it the HasPermission() functions will fail diff --git a/execution/state_test.go b/execution/state_test.go index 6ad9c32192ec5efc1cec705138a5ef83f2cb400d..e72076b1359f6d07294c123a2a36b6637fd32278 100644 --- a/execution/state_test.go +++ b/execution/state_test.go @@ -18,7 +18,7 @@ import ( "testing" acm "github.com/hyperledger/burrow/account" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" "github.com/tendermint/tmlibs/db" diff --git a/execution/transactor.go b/execution/transactor.go index bc0c9b9c69bc05bef889d5066da099d8002128f7..2a855dc329ad2cbb552b0dedcdfc5f73146bacbc 100644 --- a/execution/transactor.go +++ b/execution/transactor.go @@ -71,7 +71,7 @@ func NewTransactor(tip *blockchain.Tip, eventEmitter event.Emitter, func (trans *Transactor) Call(reader state.Reader, fromAddress, toAddress crypto.Address, data []byte) (call *Call, err error) { - if evm.RegisteredNativeContract(toAddress.Word256()) { + if evm.IsRegisteredNativeContract(toAddress.Word256()) { return nil, fmt.Errorf("attempt to call native contract at address "+ "%X, but native contracts can not be called directly. Use a deployed "+ "contract that calls the native function instead", toAddress) @@ -235,8 +235,8 @@ func (trans *Transactor) TransactAndHold(sequentialSigningAccount *SequentialSig case <-timer.C: return nil, fmt.Errorf("transaction timed out TxHash: %X", expectedReceipt.TxHash) case eventDataCall := <-ch: - if eventDataCall.Exception != "" { - return nil, fmt.Errorf("error when transacting: " + eventDataCall.Exception) + if eventDataCall.Exception != nil { + return nil, fmt.Errorf("error when transacting: %v", eventDataCall.Exception) } else { return eventDataCall, nil } diff --git a/genesis/spec/genesis_spec_test.go b/genesis/spec/genesis_spec_test.go index ca91146fb71be6356ffd55abd31cec4590fc0b0b..6ce214dc434fda5299990847385feb9cb110a513 100644 --- a/genesis/spec/genesis_spec_test.go +++ b/genesis/spec/genesis_spec_test.go @@ -5,7 +5,7 @@ import ( "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/keys/mock" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) diff --git a/genesis/spec/presets.go b/genesis/spec/presets.go index 312ec7a79a78888f687210a56e218c32ad16a4e4..9454520c9f284666349d8b2334c59879e1c169d0 100644 --- a/genesis/spec/presets.go +++ b/genesis/spec/presets.go @@ -3,7 +3,7 @@ package spec import ( "sort" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" ) // Files here can be used as starting points for building various 'chain types' but are otherwise diff --git a/genesis/spec/presets_test.go b/genesis/spec/presets_test.go index 8e578640e8790aab8923006e7ec8d864a3cec5b5..dde6f296c7103fa5ca33dcaf0416aa797c440265 100644 --- a/genesis/spec/presets_test.go +++ b/genesis/spec/presets_test.go @@ -4,7 +4,7 @@ import ( "testing" "github.com/hyperledger/burrow/keys/mock" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) diff --git a/permission/permissions.go b/permission/permissions.go index 5bfcf61c9205c1a6ae222e8110298759c8cd8a9a..48b5bd9dd3bd2e11353993c8ce96964017a8a75a 100644 --- a/permission/permissions.go +++ b/permission/permissions.go @@ -15,82 +15,9 @@ package permission import ( - "fmt" - "strings" - "github.com/hyperledger/burrow/permission/types" ) -//------------------------------------------------------------------------------------------------ - -// Base permission references are like unix (the index is already bit shifted) -const ( - // Chain permissions. - // These permissions grant the ability for accounts to perform certain transition within the execution package - // Root is a reserved permission currently unused that may be used in the future to grant super-user privileges - // for instance to a governance contract - Root types.PermFlag = 1 << iota // 1 - // Send permits an account to issue a SendTx to transfer value from one account to another. Note that value can - // still be transferred with a CallTx by specifying an Amount in the InputTx. Funding an account is the basic - // prerequisite for an account to act in the system so is often used as a surrogate for 'account creation' when - // sending to a unknown account - in order for this to be permitted the input account needs the CreateAccount - // permission in addition. - Send // 2 - // Call permits and account to issue a CallTx, which can be used to call (run) the code of an existing - // account/contract (these are synonymous in Burrow/EVM). A CallTx can be used to create an account if it points to - // a nil address - in order for an account to be permitted to do this the input (calling) account needs the - // CreateContract permission in addition. - Call // 4 - // CreateContract permits the input account of a CallTx to create a new contract/account when CallTx.Address is nil - // and permits an executing contract in the EVM to create a new contract programmatically. - CreateContract // 8 - // CreateAccount permits an input account of a SendTx to add value to non-existing (unfunded) accounts - CreateAccount // 16 - // Bond is a reserved permission for making changes to the validator set - currently unused - Bond // 32 - // Name permits manipulation of the name registry by allowing an account to issue a NameTx - Name // 64 - - // Moderator permissions. - // These permissions concern the alteration of the chain permissions listed above. Each permission relates to a - // particular canonical permission mutation or query function. When an account is granted a moderation permission - // it is permitted to call that function. See snative.go for a marked-up description of what each function does. - HasBase - SetBase - UnsetBase - SetGlobal - HasRole - AddRole - RemoveRole - - NumPermissions uint = 14 // NOTE Adjust this too. We can support upto 64 - - TopPermFlag types.PermFlag = 1 << (NumPermissions - 1) - AllPermFlags types.PermFlag = TopPermFlag | (TopPermFlag - 1) - DefaultPermFlags types.PermFlag = Send | Call | CreateContract | CreateAccount | Bond | Name | HasBase | HasRole - - // Chain permissions strings - RootString string = "root" - SendString = "send" - CallString = "call" - CreateContractString = "createContract" - CreateAccountString = "createAccount" - BondString = "bond" - NameString = "name" - - // Moderator permissions strings - HasBaseString = "hasBase" - SetBaseString = "setBase" - UnsetBaseString = "unsetBase" - SetGlobalString = "setGlobal" - HasRoleString = "hasRole" - AddRoleString = "addRole" - RemoveRoleString = "removeRole" - UnknownString = "#-UNKNOWN-#" - - AllString = "all" -) - var ( ZeroBasePermissions = types.BasePermissions{0, 0} ZeroAccountPermissions = types.AccountPermissions{ @@ -98,99 +25,16 @@ var ( } DefaultAccountPermissions = types.AccountPermissions{ Base: types.BasePermissions{ - Perms: DefaultPermFlags, - SetBit: AllPermFlags, + Perms: types.DefaultPermFlags, + SetBit: types.AllPermFlags, }, Roles: []string{}, } AllAccountPermissions = types.AccountPermissions{ Base: types.BasePermissions{ - Perms: AllPermFlags, - SetBit: AllPermFlags, + Perms: types.AllPermFlags, + SetBit: types.AllPermFlags, }, Roles: []string{}, } ) - -//--------------------------------------------------------------------------------------------- - -//-------------------------------------------------------------------------------- -// string utilities - -// Returns the string name of a single bit non-composite PermFlag, or otherwise UnknownString -// See BasePermissionsToStringList to generate a string representation of a composite PermFlag -func PermFlagToString(pf types.PermFlag) string { - switch pf { - case AllPermFlags: - return AllString - case Root: - return RootString - case Send: - return SendString - case Call: - return CallString - case CreateContract: - return CreateContractString - case CreateAccount: - return CreateAccountString - case Bond: - return BondString - case Name: - return NameString - case HasBase: - return HasBaseString - case SetBase: - return SetBaseString - case UnsetBase: - return UnsetBaseString - case SetGlobal: - return SetGlobalString - case HasRole: - return HasRoleString - case AddRole: - return AddRoleString - case RemoveRole: - return RemoveRoleString - default: - return UnknownString - } -} - -// PermStringToFlag maps camel- and snake case strings to the -// the corresponding permission flag. -func PermStringToFlag(perm string) (types.PermFlag, error) { - switch strings.ToLower(perm) { - case AllString: - return AllPermFlags, nil - case RootString: - return Root, nil - case SendString: - return Send, nil - case CallString: - return Call, nil - case CreateContractString, "createcontract", "create_contract": - return CreateContract, nil - case CreateAccountString, "createaccount", "create_account": - return CreateAccount, nil - case BondString: - return Bond, nil - case NameString: - return Name, nil - case HasBaseString, "hasbase", "has_base": - return HasBase, nil - case SetBaseString, "setbase", "set_base": - return SetBase, nil - case UnsetBaseString, "unsetbase", "unset_base": - return UnsetBase, nil - case SetGlobalString, "setglobal", "set_global": - return SetGlobal, nil - case HasRoleString, "hasrole", "has_role": - return HasRole, nil - case AddRoleString, "addrole", "add_role": - return AddRole, nil - case RemoveRoleString, "removerole", "rmrole", "rm_role": - return RemoveRole, nil - default: - return 0, fmt.Errorf("unknown permission %s", perm) - } -} diff --git a/permission/snatives/snatives.go b/permission/snatives/snatives.go index 40e560ea9087903b220e5eaec49a82a3721ce352..5b47b8af5e894c0b9f5cdf6e26947db2ad398c35 100644 --- a/permission/snatives/snatives.go +++ b/permission/snatives/snatives.go @@ -21,6 +21,7 @@ import ( "github.com/hyperledger/burrow/crypto" "github.com/hyperledger/burrow/permission" "github.com/hyperledger/burrow/permission/types" + ptypes "github.com/hyperledger/burrow/permission/types" ) //--------------------------------------------------------------------------------------------------- @@ -36,12 +37,12 @@ type PermArgs struct { func (pa PermArgs) String() string { body := make([]string, 0, 5) - body = append(body, fmt.Sprintf("PermFlag: %s", permission.String(pa.PermFlag))) + body = append(body, fmt.Sprintf("PermFlag: %v", permission.String(pa.PermFlag))) if pa.Address != nil { body = append(body, fmt.Sprintf("Address: %s", *pa.Address)) } if pa.Permission != nil { - body = append(body, fmt.Sprintf("Permission: %s", permission.String(*pa.Permission))) + body = append(body, fmt.Sprintf("Permission: %v", permission.String(*pa.Permission))) } if pa.Role != nil { body = append(body, fmt.Sprintf("Role: %s", *pa.Role)) @@ -55,10 +56,10 @@ func (pa PermArgs) String() string { func (pa PermArgs) EnsureValid() error { pf := pa.PermFlag // Address - if pa.Address == nil && pf != permission.SetGlobal { + if pa.Address == nil && pf != ptypes.SetGlobal { return fmt.Errorf("PermArgs for PermFlag %v requires Address to be provided but was nil", pf) } - if pf == permission.HasRole || pf == permission.AddRole || pf == permission.RemoveRole { + if pf == ptypes.HasRole || pf == ptypes.AddRole || pf == ptypes.RemoveRole { // Role if pa.Role == nil { return fmt.Errorf("PermArgs for PermFlag %v requires Role to be provided but was nil", pf) @@ -67,7 +68,7 @@ func (pa PermArgs) EnsureValid() error { } else if pa.Permission == nil { return fmt.Errorf("PermArgs for PermFlag %v requires Permission to be provided but was nil", pf) // Value - } else if (pf == permission.SetBase || pf == permission.SetGlobal) && pa.Value == nil { + } else if (pf == ptypes.SetBase || pf == ptypes.SetGlobal) && pa.Value == nil { return fmt.Errorf("PermArgs for PermFlag %v requires Value to be provided but was nil", pf) } return nil @@ -75,7 +76,7 @@ func (pa PermArgs) EnsureValid() error { func HasBaseArgs(address crypto.Address, permFlag types.PermFlag) PermArgs { return PermArgs{ - PermFlag: permission.HasBase, + PermFlag: ptypes.HasBase, Address: &address, Permission: &permFlag, } @@ -83,7 +84,7 @@ func HasBaseArgs(address crypto.Address, permFlag types.PermFlag) PermArgs { func SetBaseArgs(address crypto.Address, permFlag types.PermFlag, value bool) PermArgs { return PermArgs{ - PermFlag: permission.SetBase, + PermFlag: ptypes.SetBase, Address: &address, Permission: &permFlag, Value: &value, @@ -92,7 +93,7 @@ func SetBaseArgs(address crypto.Address, permFlag types.PermFlag, value bool) Pe func UnsetBaseArgs(address crypto.Address, permFlag types.PermFlag) PermArgs { return PermArgs{ - PermFlag: permission.UnsetBase, + PermFlag: ptypes.UnsetBase, Address: &address, Permission: &permFlag, } @@ -100,7 +101,7 @@ func UnsetBaseArgs(address crypto.Address, permFlag types.PermFlag) PermArgs { func SetGlobalArgs(permFlag types.PermFlag, value bool) PermArgs { return PermArgs{ - PermFlag: permission.SetGlobal, + PermFlag: ptypes.SetGlobal, Permission: &permFlag, Value: &value, } @@ -108,7 +109,7 @@ func SetGlobalArgs(permFlag types.PermFlag, value bool) PermArgs { func HasRoleArgs(address crypto.Address, role string) PermArgs { return PermArgs{ - PermFlag: permission.HasRole, + PermFlag: ptypes.HasRole, Address: &address, Role: &role, } @@ -116,7 +117,7 @@ func HasRoleArgs(address crypto.Address, role string) PermArgs { func AddRoleArgs(address crypto.Address, role string) PermArgs { return PermArgs{ - PermFlag: permission.AddRole, + PermFlag: ptypes.AddRole, Address: &address, Role: &role, } @@ -124,7 +125,7 @@ func AddRoleArgs(address crypto.Address, role string) PermArgs { func RemoveRoleArgs(address crypto.Address, role string) PermArgs { return PermArgs{ - PermFlag: permission.RemoveRole, + PermFlag: ptypes.RemoveRole, Address: &address, Role: &role, } diff --git a/permission/snatives/snatives_test.go b/permission/snatives/snatives_test.go index 76545151df366826e1f24deb5a6f100af8e48b2d..9441ed15eaccc20c7391e3ce4452ec01933ecb4a 100644 --- a/permission/snatives/snatives_test.go +++ b/permission/snatives/snatives_test.go @@ -3,7 +3,7 @@ package snatives import ( "testing" - "github.com/hyperledger/burrow/permission" + permission "github.com/hyperledger/burrow/permission/types" "github.com/stretchr/testify/assert" ) diff --git a/permission/types/base_permissions.go b/permission/types/base_permissions.go index fe0dd5e32abe7f1db5dd33cb1906a784e3f8129a..401f46d1225a4589311cfa8472ce52310bbd576c 100644 --- a/permission/types/base_permissions.go +++ b/permission/types/base_permissions.go @@ -2,24 +2,6 @@ package types import "fmt" -// A particular permission -type PermFlag uint64 - -// permission number out of bounds -type ErrInvalidPermission PermFlag - -func (e ErrInvalidPermission) Error() string { - return fmt.Sprintf("invalid permission %d", e) -} - -// set=false. This error should be caught and the global -// value fetched for the permission by the caller -type ErrValueNotSet PermFlag - -func (e ErrValueNotSet) Error() string { - return fmt.Sprintf("the value for permission %d is not set", e) -} - // Base chain permissions struct type BasePermissions struct { // bit array with "has"/"doesn't have" for each permission diff --git a/permission/errors.go b/permission/types/errors.go similarity index 59% rename from permission/errors.go rename to permission/types/errors.go index 795b621cac31d5a52159c6a16bafa24ce4106e68..0b022277e9352561b2fe83a655f750c6a146d21f 100644 --- a/permission/errors.go +++ b/permission/types/errors.go @@ -12,7 +12,22 @@ // See the License for the specific language governing permissions and // limitations under the License. -package permission +package types -//------------------------------------------------------------------------------------------------ -// Some errors +import ( + "fmt" +) + +type ErrInvalidPermission PermFlag + +func (e ErrInvalidPermission) Error() string { + return fmt.Sprintf("invalid permission %d", e) +} + +// set=false. This error should be caught and the global +// value fetched for the permission by the caller +type ErrValueNotSet PermFlag + +func (e ErrValueNotSet) Error() string { + return fmt.Sprintf("the value for permission %d is not set", e) +} diff --git a/permission/types/perm_flag.go b/permission/types/perm_flag.go new file mode 100644 index 0000000000000000000000000000000000000000..c749aa308b6f3e1b292b0e30cefc4a4030958b24 --- /dev/null +++ b/permission/types/perm_flag.go @@ -0,0 +1,155 @@ +package types + +import ( + "fmt" + "strings" +) + +// Base permission references are like unix (the index is already bit shifted) +const ( + // Chain permissions. + // These permissions grant the ability for accounts to perform certain transition within the execution package + // Root is a reserved permission currently unused that may be used in the future to grant super-user privileges + // for instance to a governance contract + Root PermFlag = 1 << iota // 1 + // Send permits an account to issue a SendTx to transfer value from one account to another. Note that value can + // still be transferred with a CallTx by specifying an Amount in the InputTx. Funding an account is the basic + // prerequisite for an account to act in the system so is often used as a surrogate for 'account creation' when + // sending to a unknown account - in order for this to be permitted the input account needs the CreateAccount + // permission in addition. + Send // 2 + // Call permits and account to issue a CallTx, which can be used to call (run) the code of an existing + // account/contract (these are synonymous in Burrow/EVM). A CallTx can be used to create an account if it points to + // a nil address - in order for an account to be permitted to do this the input (calling) account needs the + // CreateContract permission in addition. + Call // 4 + // CreateContract permits the input account of a CallTx to create a new contract/account when CallTx.Address is nil + // and permits an executing contract in the EVM to create a new contract programmatically. + CreateContract // 8 + // CreateAccount permits an input account of a SendTx to add value to non-existing (unfunded) accounts + CreateAccount // 16 + // Bond is a reserved permission for making changes to the validator set - currently unused + Bond // 32 + // Name permits manipulation of the name registry by allowing an account to issue a NameTx + Name // 64 + + // Moderator permissions. + // These permissions concern the alteration of the chain permissions listed above. Each permission relates to a + // particular canonical permission mutation or query function. When an account is granted a moderation permission + // it is permitted to call that function. See snative.go for a marked-up description of what each function does. + HasBase + SetBase + UnsetBase + SetGlobal + HasRole + AddRole + RemoveRole + + NumPermissions uint = 14 // NOTE Adjust this too. We can support upto 64 + + TopPermFlag PermFlag = 1 << (NumPermissions - 1) + AllPermFlags PermFlag = TopPermFlag | (TopPermFlag - 1) + DefaultPermFlags PermFlag = Send | Call | CreateContract | CreateAccount | Bond | Name | HasBase | HasRole + + // Chain permissions strings + RootString string = "root" + SendString = "send" + CallString = "call" + CreateContractString = "createContract" + CreateAccountString = "createAccount" + BondString = "bond" + NameString = "name" + + // Moderator permissions strings + HasBaseString = "hasBase" + SetBaseString = "setBase" + UnsetBaseString = "unsetBase" + SetGlobalString = "setGlobal" + HasRoleString = "hasRole" + AddRoleString = "addRole" + RemoveRoleString = "removeRole" + UnknownString = "#-UNKNOWN-#" + + AllString = "all" +) + +// A particular permission +type PermFlag uint64 + +// Returns the string name of a single bit non-composite PermFlag, or otherwise UnknownString +// See BasePermissionsToStringList to generate a string representation of a composite PermFlag +func (pf PermFlag) String() string { + switch pf { + case AllPermFlags: + return AllString + case Root: + return RootString + case Send: + return SendString + case Call: + return CallString + case CreateContract: + return CreateContractString + case CreateAccount: + return CreateAccountString + case Bond: + return BondString + case Name: + return NameString + case HasBase: + return HasBaseString + case SetBase: + return SetBaseString + case UnsetBase: + return UnsetBaseString + case SetGlobal: + return SetGlobalString + case HasRole: + return HasRoleString + case AddRole: + return AddRoleString + case RemoveRole: + return RemoveRoleString + default: + return UnknownString + } +} + +// PermStringToFlag maps camel- and snake case strings to the +// the corresponding permission flag. +func PermStringToFlag(perm string) (PermFlag, error) { + switch strings.ToLower(perm) { + case AllString: + return AllPermFlags, nil + case RootString: + return Root, nil + case SendString: + return Send, nil + case CallString: + return Call, nil + case CreateContractString, "createcontract", "create_contract": + return CreateContract, nil + case CreateAccountString, "createaccount", "create_account": + return CreateAccount, nil + case BondString: + return Bond, nil + case NameString: + return Name, nil + case HasBaseString, "hasbase", "has_base": + return HasBase, nil + case SetBaseString, "setbase", "set_base": + return SetBase, nil + case UnsetBaseString, "unsetbase", "unset_base": + return UnsetBase, nil + case SetGlobalString, "setglobal", "set_global": + return SetGlobal, nil + case HasRoleString, "hasrole", "has_role": + return HasRole, nil + case AddRoleString, "addrole", "add_role": + return AddRole, nil + case RemoveRoleString, "removerole", "rmrole", "rm_role": + return RemoveRole, nil + default: + return 0, fmt.Errorf("unknown permission %s", perm) + } +} diff --git a/permission/permissions_test.go b/permission/types/perm_flag_test.go similarity index 91% rename from permission/permissions_test.go rename to permission/types/perm_flag_test.go index 5d930a7c703809a04adbf4cfe2512249b1490481..2ec7a6edb257f51ff897cc7d29151df051706e3a 100644 --- a/permission/permissions_test.go +++ b/permission/types/perm_flag_test.go @@ -1,4 +1,4 @@ -package permission +package types import ( "testing" diff --git a/permission/util.go b/permission/util.go index 656761cd83030127313ede68c528ffe8973b00cd..7470b94d90b27ee48b04cf40b67b215c8370f4c2 100644 --- a/permission/util.go +++ b/permission/util.go @@ -45,7 +45,7 @@ func convertPermissionsMapStringIntToBasePermissions(permissions map[string]bool basePermissions := ZeroBasePermissions for permissionName, value := range permissions { - permissionsFlag, err := PermStringToFlag(permissionName) + permissionsFlag, err := types.PermStringToFlag(permissionName) if err != nil { return basePermissions, err } @@ -74,7 +74,7 @@ func BasePermissionsFromStringList(permissions []string) (types.BasePermissions, func PermFlagFromStringList(permissions []string) (types.PermFlag, error) { var permFlag types.PermFlag for _, perm := range permissions { - flag, err := PermStringToFlag(perm) + flag, err := types.PermStringToFlag(perm) if err != nil { return permFlag, err } @@ -92,15 +92,15 @@ func BasePermissionsToStringList(basePermissions types.BasePermissions) ([]strin // Creates a list of individual permission flag strings from a possibly composite PermFlag // by projecting out each bit and adding its permission string if it is set func PermFlagToStringList(permFlag types.PermFlag) ([]string, error) { - permStrings := make([]string, 0, NumPermissions) - if permFlag > AllPermFlags { + permStrings := make([]string, 0, types.NumPermissions) + if permFlag > types.AllPermFlags { return nil, fmt.Errorf("resultant permission 0b%b is invalid: has permission flag set above top flag 0b%b", - permFlag, TopPermFlag) + permFlag, types.TopPermFlag) } - for i := uint(0); i < NumPermissions; i++ { + for i := uint(0); i < types.NumPermissions; i++ { permFlag := permFlag & (1 << i) if permFlag > 0 { - permStrings = append(permStrings, PermFlagToString(permFlag)) + permStrings = append(permStrings, permFlag.String()) } } return permStrings, nil @@ -110,7 +110,7 @@ func PermFlagToStringList(permFlag types.PermFlag) ([]string, error) { func BasePermissionsString(basePermissions types.BasePermissions) string { permStrings, err := BasePermissionsToStringList(basePermissions) if err != nil { - return UnknownString + return types.UnknownString } return strings.Join(permStrings, " | ") } @@ -118,7 +118,7 @@ func BasePermissionsString(basePermissions types.BasePermissions) string { func String(permFlag types.PermFlag) string { permStrings, err := PermFlagToStringList(permFlag) if err != nil { - return UnknownString + return types.UnknownString } return strings.Join(permStrings, " | ") } diff --git a/permission/util_test.go b/permission/util_test.go index 4d1c806b1073c39c83bc7a6d1a18f85a1117dfb6..780c1651cb91900798536133288d0a8cdfeed134 100644 --- a/permission/util_test.go +++ b/permission/util_test.go @@ -9,15 +9,15 @@ import ( ) func TestBasePermissionsFromStringList(t *testing.T) { - basePerms, err := BasePermissionsFromStringList([]string{HasRoleString, CreateContractString, SendString}) + basePerms, err := BasePermissionsFromStringList([]string{types.HasRoleString, types.CreateContractString, types.SendString}) require.NoError(t, err) - permFlag := HasRole | CreateContract | Send + permFlag := types.HasRole | types.CreateContract | types.Send assert.Equal(t, permFlag, basePerms.Perms) assert.Equal(t, permFlag, basePerms.SetBit) - basePerms, err = BasePermissionsFromStringList([]string{AllString}) + basePerms, err = BasePermissionsFromStringList([]string{types.AllString}) require.NoError(t, err) - permFlag = AllPermFlags + permFlag = types.AllPermFlags assert.Equal(t, permFlag, basePerms.Perms) assert.Equal(t, permFlag, basePerms.SetBit) @@ -26,21 +26,21 @@ func TestBasePermissionsFromStringList(t *testing.T) { } func TestBasePermissionsToStringList(t *testing.T) { - permStrings, err := BasePermissionsToStringList(allSetBasePermission(Root | HasRole | SetBase | Call)) + permStrings, err := BasePermissionsToStringList(allSetBasePermission(types.Root | types.HasRole | types.SetBase | types.Call)) require.NoError(t, err) assert.Equal(t, []string{"root", "call", "setBase", "hasRole"}, permStrings) - permStrings, err = BasePermissionsToStringList(allSetBasePermission(AllPermFlags)) + permStrings, err = BasePermissionsToStringList(allSetBasePermission(types.AllPermFlags)) require.NoError(t, err) assert.Equal(t, []string{"root", "send", "call", "createContract", "createAccount", "bond", "name", "hasBase", "setBase", "unsetBase", "setGlobal", "hasRole", "addRole", "removeRole"}, permStrings) - permStrings, err = BasePermissionsToStringList(allSetBasePermission(AllPermFlags + 1)) + permStrings, err = BasePermissionsToStringList(allSetBasePermission(types.AllPermFlags + 1)) assert.Error(t, err) } func TestBasePermissionsString(t *testing.T) { - permissionString := BasePermissionsString(allSetBasePermission(AllPermFlags &^ Root)) + permissionString := BasePermissionsString(allSetBasePermission(types.AllPermFlags &^ types.Root)) assert.Equal(t, "send | call | createContract | createAccount | bond | name | hasBase | "+ "setBase | unsetBase | setGlobal | hasRole | addRole | removeRole", permissionString) } diff --git a/txs/tx_test.go b/txs/tx_test.go index ada6bcd607b1964a943ae5fccb90f306afe69644..bb916e86ab3a144dfaf9d170d1a195a8b7ac01ed 100644 --- a/txs/tx_test.go +++ b/txs/tx_test.go @@ -21,8 +21,8 @@ import ( acm "github.com/hyperledger/burrow/account" "github.com/hyperledger/burrow/crypto" - ptypes "github.com/hyperledger/burrow/permission" "github.com/hyperledger/burrow/permission/snatives" + ptypes "github.com/hyperledger/burrow/permission/types" "github.com/hyperledger/burrow/txs/payload" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require"