Function run

tests/fuzz/fuzz-full_channel.c:246–378

};

void run(const u8 *data, size_t size)
{
	struct pubkey local_per_commitment_point;
	struct bitcoin_outpoint funding;
	struct amount_sat funding_amount;
	struct channel *lchannel, *rchannel;
	const struct htlc **htlc_map;
	const u8 *funding_wscript_alt;
	int anchor;
	struct pending_htlc *pending_htlcs = tal_arr(tmpctx, struct pending_htlc, 0);
	u64 next_htlc_id = 0;
	u32 current_blockheight = fromwire_u32(&data, &size);

	init_channels(tmpctx, &data, &size, &local_per_commitment_point, &funding, &funding_amount,
		      &current_blockheight, &lchannel, &rchannel);

	if (!lchannel || !rchannel)
		goto cleanup;

	while (size > 0) {
		enum side commit_side = LOCAL;
		int op = fromwire_u8(&data, &size) % 7;
		switch (op) {
		case 0: /* ADD_HTLC */
		{
			if (tal_count(pending_htlcs) > MAX_HTLCS)
				break;

			enum side sender = (fromwire_u8(&data, &size) % 2) ? REMOTE : LOCAL;
			struct amount_msat msat = fromwire_amount_msat_bounded(&data, &size);
			u32 cltv = current_blockheight + fromwire_u16(&data, &size);
			struct pending_htlc p_htlc;

			p_htlc.sender = sender;
			p_htlc.id = next_htlc_id;
			memset(&p_htlc.preimage, (int)p_htlc.id, sizeof(p_htlc.preimage));

			if (add_htlc(lchannel, sender, p_htlc.id, &p_htlc.preimage, msat, cltv)) {
				add_htlc(rchannel, sender, p_htlc.id, &p_htlc.preimage, msat, cltv);
				tal_arr_expand(&pending_htlcs, p_htlc);
				next_htlc_id++;
			}
			commit_side = sender;
			break;
		}
		case 1: /* FULFILL_HTLC */
		{
			if (tal_count(pending_htlcs) == 0)
				break;

			size_t idx = fromwire_u64(&data, &size) % tal_count(pending_htlcs);
			struct pending_htlc p_htlc = pending_htlcs[idx];

			if (fromwire_u8(&data, &size) % 2) {
				if (fulfill_htlc(lchannel, p_htlc.sender, p_htlc.id, &p_htlc.preimage)) {
					fulfill_htlc(rchannel, p_htlc.sender, p_htlc.id, &p_htlc.preimage);
					tal_arr_remove(&pending_htlcs, idx);
				}