Files
lighthouse/consensus/state_processing/src/epoch_cache.rs
Michael Sproul 9b08e1ad63 Fix total_effective_balance=0 in PreEpochCache (#9106)
Fix a **consensus fault** in `PreEpochCache` 🙀

Fortunately it's only reachable on a network with `total_active_balance=0`, i.e. a network that's already completely dead. As such this PR is not time-sensitive in any way.


  Add the floor on `total_effective_balance` when converting from `PreEpochCache` to `EpochCache`. An alternative would be to add the floor inside `PreEpochCache::get_total_active_balance`, however that would be redundant, as the only place this function is called outside this file is in single-pass epoch processing:

176cce585c/consensus/state_processing/src/per_epoch_processing/single_pass.rs (L461-L462)

The `set_total_active_balance` call already handles the floor.

A regression test is included.


Co-Authored-By: Michael Sproul <michael@sigmaprime.io>
2026-04-20 00:59:39 +00:00

223 lines
8.3 KiB
Rust

use crate::common::altair::BaseRewardPerIncrement;
use crate::common::base::SqrtTotalActiveBalance;
use crate::common::{altair, base};
use crate::metrics;
use fixed_bytes::FixedBytesExtended;
use safe_arith::SafeArith;
use tracing::instrument;
use types::state::{EpochCache, EpochCacheError, EpochCacheKey};
use types::{ActivationQueue, BeaconState, ChainSpec, EthSpec, ForkName, Hash256};
/// Precursor to an `EpochCache`.
pub struct PreEpochCache {
epoch_key: EpochCacheKey,
effective_balances: Vec<u64>,
total_active_balance: u64,
}
impl PreEpochCache {
pub fn new_for_next_epoch<E: EthSpec>(
state: &mut BeaconState<E>,
) -> Result<Self, EpochCacheError> {
// The decision block root for the next epoch is the latest block root from this epoch.
let latest_block_header = state.latest_block_header();
let decision_block_root = if !latest_block_header.state_root.is_zero() {
latest_block_header.canonical_root()
} else {
// State root should already have been filled in by `process_slot`, except in the case
// of a `partial_state_advance`. Once we have tree-states this can be an error, and
// `self` can be immutable.
let state_root = state.update_tree_hash_cache()?;
state.get_latest_block_root(state_root)
};
let epoch_key = EpochCacheKey {
epoch: state.next_epoch()?,
decision_block_root,
};
Ok(Self {
epoch_key,
effective_balances: Vec::with_capacity(state.validators().len()),
total_active_balance: 0,
})
}
pub fn update_effective_balance(
&mut self,
validator_index: usize,
effective_balance: u64,
is_active_next_epoch: bool,
) -> Result<(), EpochCacheError> {
if validator_index == self.effective_balances.len() {
self.effective_balances.push(effective_balance);
if is_active_next_epoch {
self.total_active_balance
.safe_add_assign(effective_balance)?;
}
Ok(())
} else if let Some(existing_balance) = self.effective_balances.get_mut(validator_index) {
// Update total active balance for a late change in effective balance. This happens when
// processing consolidations.
if is_active_next_epoch {
self.total_active_balance
.safe_add_assign(effective_balance)?;
self.total_active_balance
.safe_sub_assign(*existing_balance)?;
}
*existing_balance = effective_balance;
Ok(())
} else {
Err(EpochCacheError::ValidatorIndexOutOfBounds { validator_index })
}
}
/// Note: the spec-mandated floor (max with EFFECTIVE_BALANCE_INCREMENT) is applied in
/// `into_epoch_cache` and `set_total_active_balance`. This returns the raw sum.
pub fn get_total_active_balance(&self) -> u64 {
self.total_active_balance
}
pub fn into_epoch_cache(
self,
activation_queue: ActivationQueue,
spec: &ChainSpec,
) -> Result<EpochCache, EpochCacheError> {
let epoch = self.epoch_key.epoch;
// Apply the spec-mandated floor from `get_total_balance`:
// max(EFFECTIVE_BALANCE_INCREMENT, sum(...))
// This prevents division by zero in base reward calculation when all
// validators have zero effective balance.
let total_active_balance =
std::cmp::max(self.total_active_balance, spec.effective_balance_increment);
let sqrt_total_active_balance = SqrtTotalActiveBalance::new(total_active_balance);
let base_reward_per_increment = BaseRewardPerIncrement::new(total_active_balance, spec)?;
let effective_balance_increment = spec.effective_balance_increment;
let max_effective_balance =
spec.max_effective_balance_for_fork(spec.fork_name_at_epoch(epoch));
let max_effective_balance_eth =
max_effective_balance.safe_div(effective_balance_increment)?;
let mut base_rewards = Vec::with_capacity(max_effective_balance_eth.safe_add(1)? as usize);
for effective_balance_eth in 0..=max_effective_balance_eth {
let effective_balance = effective_balance_eth.safe_mul(effective_balance_increment)?;
let base_reward = if spec.fork_name_at_epoch(epoch) == ForkName::Base {
base::get_base_reward(effective_balance, sqrt_total_active_balance, spec)?
} else {
altair::get_base_reward(effective_balance, base_reward_per_increment, spec)?
};
base_rewards.push(base_reward);
}
Ok(EpochCache::new(
self.epoch_key,
self.effective_balances,
base_rewards,
activation_queue,
spec,
))
}
}
pub fn is_epoch_cache_initialized<E: EthSpec>(
state: &BeaconState<E>,
) -> Result<bool, EpochCacheError> {
let current_epoch = state.current_epoch();
let epoch_cache: &EpochCache = state.epoch_cache();
let decision_block_root = state
.epoch_cache_decision_root(Hash256::zero())
.map_err(EpochCacheError::BeaconState)?;
Ok(epoch_cache
.check_validity(current_epoch, decision_block_root)
.is_ok())
}
#[instrument(skip_all, level = "debug")]
pub fn initialize_epoch_cache<E: EthSpec>(
state: &mut BeaconState<E>,
spec: &ChainSpec,
) -> Result<(), EpochCacheError> {
if is_epoch_cache_initialized(state)? {
// `EpochCache` has already been initialized and is valid, no need to initialize.
return Ok(());
}
let _timer = metrics::start_timer(&metrics::BUILD_EPOCH_CACHE_TIME);
let current_epoch = state.current_epoch();
let next_epoch = state.next_epoch().map_err(EpochCacheError::BeaconState)?;
let decision_block_root = state
.epoch_cache_decision_root(Hash256::zero())
.map_err(EpochCacheError::BeaconState)?;
state.build_total_active_balance_cache(spec)?;
let total_active_balance = state.get_total_active_balance_at_epoch(current_epoch)?;
// Collect effective balances and compute activation queue.
let mut effective_balances = Vec::with_capacity(state.validators().len());
let mut activation_queue = ActivationQueue::default();
for (index, validator) in state.validators().iter().enumerate() {
effective_balances.push(validator.effective_balance);
// Add to speculative activation queue.
activation_queue
.add_if_could_be_eligible_for_activation(index, validator, next_epoch, spec);
}
// Compute base rewards.
let pre_epoch_cache = PreEpochCache {
epoch_key: EpochCacheKey {
epoch: current_epoch,
decision_block_root,
},
effective_balances,
total_active_balance,
};
*state.epoch_cache_mut() = pre_epoch_cache.into_epoch_cache(activation_queue, spec)?;
Ok(())
}
#[cfg(test)]
mod tests {
use super::*;
use types::Epoch;
/// Regression test for division-by-zero when all validators have zero effective balance.
///
/// When `process_effective_balance_updates` drops all effective balances to 0, the
/// `PreEpochCache` accumulates `total_active_balance = 0`. Without the spec-mandated floor
/// of `max(EFFECTIVE_BALANCE_INCREMENT, sum)`, `BaseRewardPerIncrement::new()` would divide
/// by `integer_sqrt(0) = 0`.
#[test]
fn into_epoch_cache_zero_total_active_balance() {
let spec = ChainSpec::minimal();
let cache = PreEpochCache {
epoch_key: EpochCacheKey {
epoch: Epoch::new(1),
decision_block_root: Hash256::zero(),
},
effective_balances: vec![0, 0, 0, 0],
total_active_balance: 0,
};
// Verify the raw total is zero.
assert_eq!(cache.get_total_active_balance(), 0);
// This should succeed, not panic with division by zero.
let epoch_cache = cache
.into_epoch_cache(ActivationQueue::default(), &spec)
.expect("into_epoch_cache should not fail with zero total_active_balance");
// Base reward for validator index 0 should be 0.
assert_eq!(epoch_cache.get_base_reward(0).unwrap(), 0);
}
}