Tags and Properties for Check-in 1abe1089c1
- branch=h9-fuzzcov propagates to descendants
- closed added by [ea39083758] on 2026-07-23 14:42:24
- sym-h9-fuzzcov propagates to descendants
- sym-trunk cancelled
|
2026-07-23
| ||
| 14:42 | • Edit [1abe1089c1]: Mark "Closed". artifact: ea39083758 user: dmestas | |
|
2026-07-20
| ||
| 04:06 |
fuzz: floor outcome reachability across the fuzz targets
serve_fuzz already fails a run when its generator stops reaching the dispatch arms it exists to exercise, and merge3 does the same for conflict shapes. Generalize that guard so a generator that has drifted to one outcome can no longer pass every no-crash round while testing nothing on the arm it dropped. Six targets gain a measured reached-outcomes floor: delta decodeInt and targetSize (a decoded value vs MalformedDelta), artifact predicates (simple-pathname and wiki-name each accepting and rejecting), sync card parsers (push/igot/uvgimme each accepting and rejecting), logstore open (torn-tail recovery vs Corrupt), and transport deframe (a damaged container both decoding and being rejected). Every threshold is counted at a fixed seed, stated in the comment, and set below the arm's measured frequency; each floor gates above a minimum round count so short runs never trip it. Every other target carries a one-line note on why its outcome space does not partition: round-trips have only a success arm, and several garbage generators reach only their reject arm, the accept arm covered by the round-trip and deterministic tests. closed check-in: 1abe1089c1 user: dmestas tags: h9-fuzzcov | |