keyhog-sources 0.5.44

keyhog-sources: pluggable input backends for KeyHog (git, S3, GCS, Azure Blob, Docker, Web)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

//! KH-GAP-010: Binary sources must not read unbounded file into RAM.

#[test]
fn binary_mod_uses_bounded_read_or_mmap() {
    let src = std::fs::read_to_string(concat!(env!("CARGO_MANIFEST_DIR"), "/src/binary/mod.rs"))
        .expect("binary/mod.rs");

    let has_mmap = src.contains("mmap") || src.contains("Mmap");
    let has_size_cap = src.contains("MAX_") || src.contains("max_bytes") || src.contains("limit");

    assert!(
        has_mmap || has_size_cap,
        "KH-GAP-010: binary source must document bounded read (mmap or explicit cap)"
    );

    // Current implementation loads full file - this gate fails until streaming lands.
    assert!(
        !src.contains("std::fs::read("),
        "KH-GAP-010: replace std::fs::read with bounded/mmap path for large binaries"
    );
}