Skip to content

Strengthen C++ Core Guidelines safety and test coverage for 1.1.1 - #18

Open
dev-camo wants to merge 12 commits into
mainfrom
codex/cpp-core-guidelines-1.1.1
Open

dev-camo wants to merge 12 commits into
mainfrom
codex/cpp-core-guidelines-1.1.1

Conversation

@dev-camo

@dev-camo dev-camo commented Oct 16, 2026 •

Copy link
Copy Markdown
Member

D2SteamFix's ACL and elevation paths had avoidable ownership, bounds, and exception-safety gaps. This patch gives security data stable ownership, validates ACL/SID extents, closes exclusive journal files before failure cleanup, scopes and serializes privileges, and contains startup exceptions. It also fixes native rename-buffer termination, optional-renderer inspection, and invalid-handle handling. Bumps 1.1.0 → 1.1.1 while preserving the recovery format and normal launch/repair behavior.

Adds nine isolated Windows suites, eleven selected Microsoft C++ Core Check diagnostics enforced as errors, and complete-source coverage reporting. Tests use real owned files, ACLs, DPAPI, registry fixtures, pipes, modules, processes, and dialogs; finite external-boundary faults verify rollback, recovery preservation, cancellation, transport restart, and permission fallback.

The UI suite independently probes native desktop window creation and enumeration before launching children. Missing or hung dialogs fail, including the first information dialog; reason-specific regressions exercise both an exiting child and an idle child.

Validation of commit 6e3ef45 in Windows run 38964139238:

  • MSVC Debug and Release pass /W4 /WX and all selected analysis checks.
  • All nine suites pass in both configurations, with no conditional or CTest skips.
  • Full-source line coverage: 89.47% (2,370/2,649). All twelve production translation units and emitted production headers contribute; uncalled code stays in the denominator. The coverage artifact includes HTML, Cobertura, every uncovered line range, and complete test output.
  • Supplementary MinGW C++20 compilation/linking, portable quoting checks, independent/repeated inclusion of all thirteen headers, documentation links, and whitespace checks pass.

Independent agent cross-reviews covered production changes outside their original owners and the final integrated tests. No open actionable findings remain.

Win32 interoperability retains statement-specific analyzer suppressions and an application-lifetime broker. If a helper response is lost after handle duplication, Windows reclaims an unreported handle when the parent exits. Coverage remains below 100%; native API/resource failures, exceptional paths, and desktop-token launches include remaining gaps. Live Steam repair, UAC consent, and alternate-account behavior require manual Windows checks. This review does not certify complete guideline conformance or the strict safety profiles.

@dev-camo
dev-camo marked this pull request as ready for review October 16, 2026 20:14
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-16T20:44:14.897225Z 6e3ef45 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@dev-camo

Copy link
Copy Markdown
Member Author

Held for testing on an actual Windows install.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: f4d5726fa7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5d76a7efb4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread tests/ui_entry_tests.cpp Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant