security_commit_test.go RawHistoryFolder

1package drm
2
3import (
4	"errors"
5	"sync/atomic"
6	"testing"
7
8	"github.com/bnema/neferwl/internal/ports"
9)
10
11func TestSecurityFinalCommitSnapshotRejectsEngage(t *testing.T) {
12	o, _, commits := testOutput(t)
13	var state atomic.Uint64
14	securityGate(t, o, &state)
15	// The frame was admitted in unlocked generation zero; before the final
16	// commit boundary a lock engages. No client fence is handed to KMS.
17	state.Store(3)
18	err := o.commitWith(70, nil, true, true, pendingFrame{security: ports.SecurityState{}}, overlayWin{})
19	if !errors.Is(err, errSecurityScene) || len(*commits) != 0 || !o.protected {
20		t.Fatalf("obsolete commit admitted: %v commits=%d", err, len(*commits))
21	}
22}