morluto
8451d28392
Classify the WABT reader file-size boundary as a deterministic resource constraint with its input allowance. Give Go input-size refusals selected-input recovery rather than evidence-write advice. Preserve configuration and cleanup semantics. Validation: 66 focused tests across four files including public CLI refusals, plus docs checks and five conformance tests. Sparse admission fixtures and version-only WABT stubs; no real WABT execution. Refs #4621, #4622
59 lines
2.0 KiB
TypeScript
59 lines
2.0 KiB
TypeScript
import { mkdir, open, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
import { expect } from "vitest";
|
|
import { z } from "zod";
|
|
import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
|
|
import { cliTest } from "../../support/cli/cliFixture.js";
|
|
|
|
for (const { command, limit } of [
|
|
{ command: "inspect-go-binary", limit: 256 * 1024 * 1024 },
|
|
{ command: "inspect-wasm-artifact", limit: 8 * 1024 * 1024 },
|
|
]) {
|
|
cliTest.skipIf(process.platform === "win32")(
|
|
`${command} identifies fixed input-size refusal and recovery`,
|
|
async ({ cli }) => {
|
|
const root = await createTestTempDirectory("rea-artifact-input-limit-");
|
|
const selected = join(root, "oversized.bin");
|
|
const handle = await open(selected, "wx");
|
|
try {
|
|
await handle.truncate(limit + 1);
|
|
} finally {
|
|
await handle.close();
|
|
}
|
|
const tools = join(root, "tools");
|
|
await mkdir(tools);
|
|
for (const tool of ["wasm-validate", "wasm-objdump", "wasm2wat"])
|
|
await writeFile(
|
|
join(tools, tool),
|
|
`#!/bin/sh
|
|
if [ "$1" = --version ]; then printf '1.0.42\\n'; exit 0; fi
|
|
printf 'Unexpected analysis command\\n' >&2
|
|
exit 1
|
|
`,
|
|
{ mode: 0o700 },
|
|
);
|
|
const output = await cli.run({
|
|
arguments: [command, selected, "--json"],
|
|
environment: { REA_WABT_BIN_DIRECTORY: tools },
|
|
});
|
|
expect(output.exitCode).toBe(1);
|
|
const refusal = z
|
|
.object({
|
|
code: z.literal("resource_constraint"),
|
|
category: z.literal("resource_constraint"),
|
|
retryable: z.literal(false),
|
|
details: z.object({
|
|
resource: z.literal("file-size"),
|
|
reported_limits: z.object({
|
|
maximum_input_bytes: z.literal(limit),
|
|
}),
|
|
}),
|
|
remediation: z.object({ action: z.string() }),
|
|
})
|
|
.parse(output.json);
|
|
expect(refusal.remediation.action).toContain("input byte allowance");
|
|
expect(refusal.remediation.action).not.toContain("evidence reply");
|
|
},
|
|
);
|
|
}
|