From da2b9482e5937805a4531f2fcbd296e3ba0509d0 Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Fri, 2 Oct 2026 21:11:07 +0200 Subject: [PATCH] Rust: the rename fault fires inside replace_file_atomically, at the call a swallowed error would hide The seam sat before the call, so a mutant that swallowed the real rename's result was invisible to it. It now makes the rename itself fail, on both platforms. Co-Authored-By: Claude Opus 5.5 --- packages/cultcache-rs/src/lib.rs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/cultcache-rs/src/lib.rs b/packages/cultcache-rs/src/lib.rs index cfdb27e3..fae1e7f9 100644 --- a/packages/cultcache-rs/src/lib.rs +++ b/packages/cultcache-rs/src/lib.rs @@ -3007,9 +3007,7 @@ fn stage_and_replace(mut staged: File, staged_path: &Path, bytes: &[u8], destina .and_then(|()| staged.sync_all()) .with_context(|| format!("failed to sync {}", staged_path.display()))?; drop(staged); - injected_write_fault(WriteStep::Rename) - .map_err(anyhow::Error::from) - .and_then(|()| replace_file_atomically(staged_path, destination)) + replace_file_atomically(staged_path, destination) } /// Releases a lock taken around `result`'s action and returns that result. @@ -3085,7 +3083,7 @@ fn remove_abandoned_staging_files(destination: &Path) -> Result<()> { #[cfg(unix)] fn replace_file_atomically(staged: &Path, destination: &Path) -> Result<()> { - fs::rename(staged, destination).with_context(|| { + injected_write_fault(WriteStep::Rename).and_then(|()| fs::rename(staged, destination)).with_context(|| { format!( "failed to atomically replace {} with {}", destination.display(), @@ -3101,6 +3099,8 @@ fn replace_file_atomically(staged: &Path, destination: &Path) -> Result<()> { MOVEFILE_REPLACE_EXISTING, MOVEFILE_WRITE_THROUGH, MoveFileExW, }; + injected_write_fault(WriteStep::Rename).context("failed to atomically replace the store")?; + let staged_wide = staged .as_os_str() .encode_wide()