fuzz: add chanmon holder signer fuzz ops#4660
Conversation
|
I've assigned @valentinewallace as a reviewer! |
Allow chanmon consistency inputs to block and later unblock holder-side signing operations. This lets focused force-close fuzzing reuse the signer-op machinery without carrying the larger mining and settlement model.
joostjager
force-pushed
the
fuzz-chanmon-holder-signer-ops
branch
from
994d779 to
ba0e4c5
Compare
|
I've thoroughly reviewed the entire PR diff, examining:
I verified that:
No issues found. |
valentinewallace
left a comment
valentinewallace
left a comment
There was a problem hiding this comment.
Are there any heuristics on when to save vs spend fuzz opcodes? I'm not sure how to make that call, probably @TheBlueMatt should take a look. We can always update post-merge though, I suppose.
| // Keep holder signer unblocks adjacent to the existing signer op | ||
| // bytes. The helper re-enables both holder-side operations for |
There was a problem hiding this comment.
"Adjacent" makes me think these bytes should be 0xd3..d5, so I find that a bit confusing.
| self.node.timer_tick_occurred(); | ||
| } | ||
|
|
||
| // Re-enables holder-side signer operations and asks the chain monitor to |
There was a problem hiding this comment.
I think the commit message could be improved. It references a larger refactor, which I'm not sure is helpful as someone without much context, and I don't think it explains the "why" of the diff as it is stand-alone.
| // bytes. The helper re-enables both holder-side operations for | ||
| // every signer owned by the selected node, matching the existing | ||
| // key-manager-wide blocking model. | ||
| 0xe4 => harness.nodes[0].enable_holder_signer_ops(), |
There was a problem hiding this comment.
Other bytes of this fuzzer seem much more granular and enable/unblock on a per-op and per-channel basis. Maybe we could document why we're taking a more sweeping approach here? Also "the existing key-manager-wide blocking model" -- what does that mean?
|
👋 The first review has been submitted! Do you think this PR is ready for a second reviewer? If so, click here to assign a second reviewer. |
4 participants
Allow chanmon consistency inputs to block and later unblock holder-side signing operations. This lets focused force-close fuzzing reuse the signer-op machinery without carrying the larger mining and settlement model.
I split this out ahead of the broader force-close fuzzing work so we can review the signer-op modeling independently. The main question is whether these holder-side unblock actions are worth spending dedicated chanmon consistency opcodes on, or whether we should keep the opcode surface smaller and rely on final cleanup to re-enable them.