swaitsandClaude Opus 5.5
c539004d1a
check / check (push) Canceled after 0s
Max-testing pass, ranks 4-6 and step 9 for ledger-core. Fuzzing (rank 4): fuzz_op_sequence now drives balanced pairs, foreign lines, periods, closes, and amounts from raw decimal bits, and asserts the books stay valid (TB balances, posted entries validate, no draft in a closed period); new fuzz_core_serde (every persisted core type round-trips) and fuzz_store_open (a corrupt journal is an error, never a panic); hangs count (-timeout=10). 54M executions; one crash: - fuzz_journal_line: a number too big for an integer parsed as a float, and its canonical form (which the hash chain covers) re-canonicalized differently. The journal never holds floats (R-2), so the reader now refuses them (JournalLine::parse, used by every journal reader); regression a_journal_line_with_a_float_is_refused. Checked first: the real books' journal has none. Rerun: 13.2M executions, clean. Seeds in fuzz/seeds/ (synthetic, minimal); the grown corpora stay out of git. `just fuzz <target> <seconds>`. Miri (rank 4): the core's unit, bridge, and invariant tests under Miri (our code has no unsafe; rust_decimal and chrono do): no undefined behavior. `just miri`. A pinned nightly (nightly-2026-10-01, with miri) is now in mise.toml. Benchmarks (rank 6): criterion (new dev-dependency: the playbook's Rust benchmark tool; none existed) in benches/books.rs; baselines in docs/testing.md. The store's per-command rehearsal clone costs ~1 ms at 10k entries. No budget yet, so nothing gates on them. `just bench`. CI: .github/workflows/check.yml runs `just check` on every push; scheduled.yml runs proofs, the GnuCash oracle, fuzzing, and mutation weekly. Tools come from mise.toml. docs/testing.md: every layer, its oracle rank, command, runtime, and gate; benchmark baselines; the ASSUMED invariants for Stephen to reject; the gap list with triggers. docs/oracle.md's fuzzing paragraph had claimed persistent corpora that didn't exist; corrected. Also: ledger-import now inherits the workspace lints (nightly cargo warned). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GWVo7x3UHw5kwCUaWxiejX
28 lines
1.1 KiB
Rust
28 lines
1.1 KiB
Rust
// Fuzz target: every type the store persists from ledger-core, fed
|
|
// arbitrary bytes. Garbage must be refused, never panic; whatever parses
|
|
// must round-trip: serialize, parse again, serialize, same bytes.
|
|
#![no_main]
|
|
|
|
use libfuzzer_sys::fuzz_target;
|
|
use serde::{Serialize, de::DeserializeOwned};
|
|
|
|
fn round_trip<T: Serialize + DeserializeOwned>(data: &[u8]) {
|
|
if let Ok(v) = serde_json::from_slice::<T>(data) {
|
|
let once = serde_json::to_string(&v).expect("a parsed value serializes");
|
|
let again: T = serde_json::from_str(&once).expect("its own output parses");
|
|
assert_eq!(serde_json::to_string(&again).unwrap(), once, "not a fixed point");
|
|
}
|
|
}
|
|
|
|
fuzz_target!(|data: &[u8]| {
|
|
round_trip::<ledger_core::JournalEntry>(data);
|
|
round_trip::<ledger_core::Asset>(data);
|
|
round_trip::<ledger_core::Period>(data);
|
|
round_trip::<ledger_core::Invoice>(data);
|
|
round_trip::<ledger_core::Bill>(data);
|
|
round_trip::<ledger_core::AmortizationSchedule>(data);
|
|
round_trip::<ledger_core::RecurringEntry>(data);
|
|
round_trip::<ledger_core::PayrollRun>(data);
|
|
round_trip::<ledger_core::Money>(data);
|
|
});
|