Tatsh / dbeaver-creds / 25095651768

100%

push

github

tests: skip --wrap target on Apple, validate cipher_len in backends

Two cross-platform fixes the Tests CI surfaced:

- **Apple's ld64 does not implement GNU `--wrap`.** The Tests run on
  `macos-latest` failed with `ld: unknown options:
  --wrap=dbc_decrypt_aes_128_cbc`. Gate the `test_api_mock` target on
  `NOT APPLE` in `tests/CMakeLists.txt` so macOS builds skip it; the
  other two test executables (`test_backend`, `test_api`) don't use
  `--wrap` and continue to run on every supported platform.
- **`test_rejects_zero_length` failed under BCrypt on Windows MinGW.**
  `dbc_decrypt_aes_128_cbc` was supposed to reject `cipher_len == 0`,
  but only the macOS (CommonCrypto) backend short-circuited. OpenSSL's
  `EVP_DecryptUpdate` happens to fail at finalisation when the input
  is empty (so the test was passing on Linux by accident), and BCrypt
  silently returns success with `out_len == 0`. Add an explicit
  `if (cipher_len == 0 || cipher_len % 16 != 0) return -1;` guard at
  the top of `src/openssl.c` and `src/win32.c` so the contract is
  uniform across all three backends.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

2 of 2 new or added lines in 1 file covered. (100.0%)

106 of 130 relevant lines covered (81.54%)

3.24 hits per line