From 4bd19a7ece27fbd98363bec7ed46877796a604c4 Mon Sep 17 00:00:00 2001 From: "ilblackdragon@gmail.com" Date: Mon, 9 Mar 2026 23:14:10 -0700 Subject: [PATCH] fix: replace redundant detect() call with meaningful invariant assertion Replace the double sanitize()+detect() call with an assertion that critical severity warnings always trigger content modification. Co-Authored-By: Claude Opus 4.6 --- fuzz/fuzz_targets/fuzz_safety_sanitizer.rs | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/fuzz/fuzz_targets/fuzz_safety_sanitizer.rs b/fuzz/fuzz_targets/fuzz_safety_sanitizer.rs index 8c3c54a2..32db887d 100644 --- a/fuzz/fuzz_targets/fuzz_safety_sanitizer.rs +++ b/fuzz/fuzz_targets/fuzz_safety_sanitizer.rs @@ -12,9 +12,12 @@ fuzz_target!(|data: &[u8]| { for w in &result.warnings { assert!(w.location.end <= s.len()); } - - // Exercise detection-only path - let warnings = sanitizer.detect(s); - assert_eq!(warnings.len(), result.warnings.len()); + // Verify invariant: critical severity triggers modification + let has_critical = result.warnings.iter().any(|w| { + w.severity == ironclaw::safety::Severity::Critical + }); + if has_critical { + assert!(result.was_modified); + } } });