github.com/prysmaticlabs/prysm@v1.4.4/slasher/detection/attestations/spanner.go

// Package attestations defines an implementation of a
// slashable attestation detector using min-max surround vote checking.
package attestations

import (
	"context"
	"fmt"

	"github.com/pkg/errors"
	"github.com/prometheus/client_golang/prometheus"
	"github.com/prometheus/client_golang/prometheus/promauto"
	types "github.com/prysmaticlabs/eth2-types"
	ethpb "github.com/prysmaticlabs/prysm/proto/eth/v1alpha1"
	"github.com/prysmaticlabs/prysm/shared/featureconfig"
	"github.com/prysmaticlabs/prysm/shared/params"
	"github.com/prysmaticlabs/prysm/slasher/db"
	dbtypes "github.com/prysmaticlabs/prysm/slasher/db/types"
	"github.com/prysmaticlabs/prysm/slasher/detection/attestations/iface"
	slashertypes "github.com/prysmaticlabs/prysm/slasher/detection/attestations/types"
	"go.opencensus.io/trace"
)

var (
	latestMinSpanDistanceObserved = promauto.NewGauge(prometheus.GaugeOpts{
		Name: "latest_min_span_distance_observed",
		Help: "The latest distance between target - source observed for min spans",
	})
	latestMaxSpanDistanceObserved = promauto.NewGauge(prometheus.GaugeOpts{
		Name: "latest_max_span_distance_observed",
		Help: "The latest distance between target - source observed for max spans",
	})
	sourceLargerThenTargetObserved = promauto.NewCounter(prometheus.CounterOpts{
		Name: "attestation_source_larger_then_target",
		Help: "The number of attestation data source epoch that aren larger then target epoch.",
	})
)

// We look back 128 epochs when updating min/max spans
// for incoming attestations.
// TODO(#5040): Remove lookback and handle min spans properly.
const epochLookback = types.Epoch(128)

var _ iface.SpanDetector = (*SpanDetector)(nil)

// SpanDetector defines a struct which can detect slashable
// attestation offenses by tracking validator min-max
// spans from validators and attestation data roots.
type SpanDetector struct {
	slasherDB db.Database
}

// NewSpanDetector creates a new instance of a struct tracking
// several epochs of min-max spans for each validator in
// the beacon state.
func NewSpanDetector(db db.Database) *SpanDetector {
	return &SpanDetector{
		slasherDB: db,
	}
}

// DetectSlashingsForAttestation uses a validator index and its corresponding
// min-max spans during an epoch to detect an epoch in which the validator
// committed a slashable attestation.
func (s *SpanDetector) DetectSlashingsForAttestation(
	ctx context.Context,
	att *ethpb.IndexedAttestation,
) ([]*slashertypes.DetectionResult, error) {
	ctx, traceSpan := trace.StartSpan(ctx, "spanner.DetectSlashingsForAttestation")
	defer traceSpan.End()
	sourceEpoch := att.Data.Source.Epoch
	targetEpoch := att.Data.Target.Epoch
	dis := targetEpoch - sourceEpoch

	if sourceEpoch > targetEpoch { // Prevent underflow and handle source > target slashable cases.
		dis = sourceEpoch - targetEpoch
		sourceEpoch, targetEpoch = targetEpoch, sourceEpoch
		sourceLargerThenTargetObserved.Inc()
	}

	if dis > params.BeaconConfig().WeakSubjectivityPeriod {
		return nil, fmt.Errorf(
			"attestation span was greater than weak subjectivity period %d, received: %d",
			params.BeaconConfig().WeakSubjectivityPeriod,
			dis,
		)
	}

	spanMap, err := s.slasherDB.EpochSpans(ctx, sourceEpoch, dbtypes.UseCache)
	if err != nil {
		return nil, err
	}
	targetSpanMap, err := s.slasherDB.EpochSpans(ctx, targetEpoch, dbtypes.UseCache)
	if err != nil {
		return nil, err
	}

	var detections []*slashertypes.DetectionResult
	distance := uint16(dis)
	for _, idx := range att.AttestingIndices {
		if ctx.Err() != nil {
			return nil, errors.Wrap(ctx.Err(), "could not detect slashings")
		}
		span, err := spanMap.GetValidatorSpan(idx)
		if err != nil {
			return nil, err
		}
		minSpan := span.MinSpan
		if minSpan > 0 && minSpan < distance {
			slashableEpoch := sourceEpoch + types.Epoch(minSpan)
			targetSpans, err := s.slasherDB.EpochSpans(ctx, slashableEpoch, dbtypes.UseCache)
			if err != nil {
				return nil, err
			}
			valSpan, err := targetSpans.GetValidatorSpan(idx)
			if err != nil {
				return nil, err
			}
			detections = append(detections, &slashertypes.DetectionResult{
				ValidatorIndex: idx,
				Kind:           slashertypes.SurroundVote,
				SlashableEpoch: slashableEpoch,
				SigBytes:       valSpan.SigBytes,
			})
			continue
		}

		maxSpan := span.MaxSpan
		if maxSpan > distance {
			slashableEpoch := sourceEpoch + types.Epoch(maxSpan)
			targetSpans, err := s.slasherDB.EpochSpans(ctx, slashableEpoch, dbtypes.UseCache)
			if err != nil {
				return nil, err
			}
			valSpan, err := targetSpans.GetValidatorSpan(idx)
			if err != nil {
				return nil, err
			}
			detections = append(detections, &slashertypes.DetectionResult{
				ValidatorIndex: idx,
				Kind:           slashertypes.SurroundVote,
				SlashableEpoch: slashableEpoch,
				SigBytes:       valSpan.SigBytes,
			})
			continue
		}

		targetSpan, err := targetSpanMap.GetValidatorSpan(idx)
		if err != nil {
			return nil, err
		}
		// Check if the validator has attested for this epoch or not.
		if targetSpan.HasAttested {
			detections = append(detections, &slashertypes.DetectionResult{
				ValidatorIndex: idx,
				Kind:           slashertypes.DoubleVote,
				SlashableEpoch: targetEpoch,
				SigBytes:       targetSpan.SigBytes,
			})
			continue
		}
	}

	return detections, nil
}

// UpdateSpans given an indexed attestation for all of its attesting indices.
func (s *SpanDetector) UpdateSpans(ctx context.Context, att *ethpb.IndexedAttestation) error {
	ctx, span := trace.StartSpan(ctx, "spanner.UpdateSpans")
	defer span.End()
	// Save the signature for the received attestation so we can have more detail to find it in the DB.
	if err := s.saveSigBytes(ctx, att); err != nil {
		return err
	}
	// Update min and max spans.
	if err := s.updateMinSpan(ctx, att); err != nil {
		return err
	}
	return s.updateMaxSpan(ctx, att)
}

// saveSigBytes saves the first 2 bytes of the signature for the att we're updating the spans to.
// Later used to help us find the violating attestation in the DB.
func (s *SpanDetector) saveSigBytes(ctx context.Context, att *ethpb.IndexedAttestation) error {
	ctx, traceSpan := trace.StartSpan(ctx, "spanner.saveSigBytes")
	defer traceSpan.End()
	target := att.Data.Target.Epoch
	source := att.Data.Source.Epoch
	// handle source > target well
	if source > target {
		target = source
	}
	spanMap, err := s.slasherDB.EpochSpans(ctx, target, dbtypes.UseCache)
	if err != nil {
		return err
	}

	// We loop through the indices, instead of constantly locking/unlocking the cache for equivalent accesses.
	for _, idx := range att.AttestingIndices {
		if ctx.Err() != nil {
			return errors.Wrap(ctx.Err(), "could not save signature bytes")
		}
		span, err := spanMap.GetValidatorSpan(idx)
		if err != nil {
			return err
		}
		// If the validator has already attested for this target epoch,
		// then we do not need to update the values of the span sig bytes.
		if span.HasAttested {
			return nil
		}

		sigBytes := [2]byte{0, 0}
		if len(att.Signature) > 1 {
			sigBytes = [2]byte{att.Signature[0], att.Signature[1]}
		}
		// Save the signature bytes into the span for this epoch.
		newSpan := slashertypes.Span{
			MinSpan:     span.MinSpan,
			MaxSpan:     span.MaxSpan,
			HasAttested: true,
			SigBytes:    sigBytes,
		}
		spanMap, err = spanMap.SetValidatorSpan(idx, newSpan)
		if err != nil {
			return err
		}
	}
	return s.slasherDB.SaveEpochSpans(ctx, target, spanMap, dbtypes.UseCache)
}

// Updates a min span for a validator index given a source and target epoch
// for an attestation produced by the validator. Used for catching surrounding votes.
func (s *SpanDetector) updateMinSpan(ctx context.Context, att *ethpb.IndexedAttestation) error {
	ctx, traceSpan := trace.StartSpan(ctx, "spanner.updateMinSpan")
	defer traceSpan.End()
	source := att.Data.Source.Epoch
	target := att.Data.Target.Epoch
	if source < 1 {
		return nil
	}
	// handle source > target well
	if source > target {
		source, target = target, source
	}
	valIndices := make([]uint64, len(att.AttestingIndices))
	copy(valIndices, att.AttestingIndices)
	latestMinSpanDistanceObserved.Set(float64(att.Data.Target.Epoch - att.Data.Source.Epoch))

	// the for loop tries to update min span using cache for as long as there
	// is a relevant cached epoch. when there is no such epoch in cache batch
	// db read and write is used.
	var spanMap *slashertypes.EpochStore
	epoch := source - 1
	lookbackEpoch := epoch - epochLookback
	// prevent underflow
	if epoch < epochLookback {
		lookbackEpoch = 0
	}
	untilEpoch := lookbackEpoch
	if featureconfig.Get().DisableLookback {
		untilEpoch = 0
	}
	var err error
	dbOrCache := dbtypes.UseCache
	for ; epoch >= untilEpoch; epoch-- {
		if ctx.Err() != nil {
			return errors.Wrap(ctx.Err(), "could not update min spans")
		}
		spanMap, err = s.slasherDB.EpochSpans(ctx, epoch, dbtypes.UseCache)
		if err != nil {
			return err
		}
		indices := valIndices[:0]
		for _, idx := range valIndices {
			span, err := spanMap.GetValidatorSpan(idx)
			if err != nil {
				return err
			}
			newMinSpan := uint16(target - epoch)
			if span.MinSpan == 0 || span.MinSpan > newMinSpan {
				span = slashertypes.Span{
					MinSpan:     newMinSpan,
					MaxSpan:     span.MaxSpan,
					SigBytes:    span.SigBytes,
					HasAttested: span.HasAttested,
				}
				spanMap, err = spanMap.SetValidatorSpan(idx, span)
				if err != nil {
					return err
				}
				indices = append(indices, idx)
			}
		}
		if epoch <= lookbackEpoch && dbOrCache == dbtypes.UseCache {
			dbOrCache = dbtypes.UseDB
		}
		if err := s.slasherDB.SaveEpochSpans(ctx, epoch, spanMap, dbOrCache); err != nil {
			return err
		}
		if len(indices) == 0 {
			break
		}
		if epoch == 0 {
			break
		}
	}
	return nil
}

// Updates a max span for a validator index given a source and target epoch
// for an attestation produced by the validator. Used for catching surrounded votes.
func (s *SpanDetector) updateMaxSpan(ctx context.Context, att *ethpb.IndexedAttestation) error {
	ctx, traceSpan := trace.StartSpan(ctx, "spanner.updateMaxSpan")
	defer traceSpan.End()
	source := att.Data.Source.Epoch
	target := att.Data.Target.Epoch
	// handle source > target well
	if source > target {
		source, target = target, source
	}
	latestMaxSpanDistanceObserved.Set(float64(target - source))
	valIndices := make([]uint64, len(att.AttestingIndices))
	copy(valIndices, att.AttestingIndices)
	for epoch := source + 1; epoch < target; epoch++ {
		if ctx.Err() != nil {
			return errors.Wrap(ctx.Err(), "could not update max spans")
		}
		spanMap, err := s.slasherDB.EpochSpans(ctx, epoch, dbtypes.UseCache)
		if err != nil {
			return err
		}
		indices := valIndices[:0]
		for _, idx := range valIndices {
			span, err := spanMap.GetValidatorSpan(idx)
			if err != nil {
				return err
			}
			newMaxSpan := uint16(target - epoch)
			if newMaxSpan > span.MaxSpan {
				span = slashertypes.Span{
					MinSpan:     span.MinSpan,
					MaxSpan:     newMaxSpan,
					SigBytes:    span.SigBytes,
					HasAttested: span.HasAttested,
				}
				spanMap, err = spanMap.SetValidatorSpan(idx, span)
				if err != nil {
					return err
				}
				indices = append(indices, idx)
			}
		}
		if err := s.slasherDB.SaveEpochSpans(ctx, epoch, spanMap, dbtypes.UseCache); err != nil {
			return err
		}
		if len(indices) == 0 {
			break
		}
	}
	return nil
}