ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Close hostile recovery and concurrency gaps

Browse source
This commit is contained in:
ms2k 2026-07-18 05:47:15 +09:00
commit 3f9b1b3543
1 changed files with 306 additions and 113 deletions
Download patch file Download diff file Expand all files Collapse all files

22
tests/tooling/test_verify.py
View file

@ -119,6 +119,20 @@ class VerificationTests(unittest.TestCase):
self.assertFalse(VERIFY.license_permitted("GPL-3.0-only", allowed))
self.assertFalse(VERIFY.license_permitted("MIT AND GPL-3.0-only", allowed))
def test_only_the_exact_materialized_fuser_source_is_approved(self) -> None:
package = {
"name": "fuser",
"version": "0.17.0",
"manifest_path": str(VERIFY.MATERIALIZED_FUSER_MANIFEST),
}
self.assertTrue(VERIFY.is_materialized_fuser(package))
self.assertFalse(VERIFY.is_materialized_fuser({**package, "version": "0.18.0"}))
self.assertFalse(
VERIFY.is_materialized_fuser(
{**package, "manifest_path": str(ROOT / "fuser/Cargo.toml")}
)
)
def test_workspace_source_discovery_is_not_confined_to_crates(self) -> None:
with tempfile.TemporaryDirectory(dir=ROOT) as directory:
package_root = Path(directory)
@ -192,8 +206,12 @@ class VerificationTests(unittest.TestCase):
VERIFY.audit_process_syscalls({})
def test_process_syscall_audit_rejects_failed_binary(self) -> None:
with self.assertRaisesRegex(VERIFY.VerificationError, "exercised path exited 1"):
VERIFY.validate_trace_exit("example", 1)
for binary, returncode in VERIFY.PROCESS_TRACE_EXIT_CODES.items():
VERIFY.validate_trace_exit(binary, returncode)
with self.assertRaisesRegex(VERIFY.VerificationError, "expected"):
VERIFY.validate_trace_exit(binary, returncode + 1)
with self.assertRaisesRegex(VERIFY.VerificationError, "expected None"):
VERIFY.validate_trace_exit("example", 0)
def test_workspace_binary_discovery_covers_every_current_target(self) -> None:
self.assertEqual(