Fix MAX_STANDARD_TX_WEIGHT check

The interactive-tx construction protocol needs to make sure the
constructed transaction does not exceed MAX_STANDARD_TX_WEIGHT. A naive
estimate of the transaction weight after signing was used, but was not
accurate. Specifically, it double-counted EMPTY_SCRIPT_SIG_WEIGHT and
didn't include SEGWIT_MARKER_FLAG_WEIGHT.

Author: jkczyz

lightning/src/ln/interactivetxs.rs

@@ -29,6 +29,7 @@ use bitcoin::{
 use crate::chain::chaininterface::fee_for_weight;
 use crate::ln::chan_utils::{
 	BASE_INPUT_WEIGHT, EMPTY_SCRIPT_SIG_WEIGHT, FUNDING_TRANSACTION_WITNESS_WEIGHT,
+	SEGWIT_MARKER_FLAG_WEIGHT,
 };
 use crate::ln::channel::{FundingNegotiationContext, TOTAL_BITCOIN_SUPPLY_SATOSHIS};
 use crate::ln::funding::FundingTxInput;
@@ -266,9 +267,11 @@ impl ConstructedTransaction {
 		let remote_outputs_value = context.remote_outputs_value();
 		let remote_weight_contributed = context.remote_weight_contributed();
 
-		let satisfaction_weight =
+		let expected_witness_weight =
 			Weight::from_wu(context.inputs.iter().fold(0u64, |value, (_, input)| {
-				value.saturating_add(input.satisfaction_weight().to_wu())
+				value
+					.saturating_add(input.satisfaction_weight().to_wu())
+					.saturating_sub(EMPTY_SCRIPT_SIG_WEIGHT)
 			}));
 
 		let lock_time = context.tx_locktime;
@@ -342,7 +345,12 @@ impl ConstructedTransaction {
 			return Err(AbortReason::MissingFundingOutput);
 		}
 
-		let tx_weight = tx.tx.weight().checked_add(satisfaction_weight).unwrap_or(Weight::MAX);
+		let tx_weight = tx
+			.tx
+			.weight()
+			.checked_add(Weight::from_wu(SEGWIT_MARKER_FLAG_WEIGHT))
+			.and_then(|weight| weight.checked_add(expected_witness_weight))
+			.unwrap_or(Weight::MAX);
 		if tx_weight > Weight::from_wu(MAX_STANDARD_TX_WEIGHT as u64) {
 			return Err(AbortReason::TransactionTooLarge);
 		}