#!/usr/bin/env bash
# The hardened flavor in CI (docs/SAFETY.md): the tree is built with SIFT_HARDEN (default 1: stack protector, FORTIFY_SOURCE=3, zero-initialized
# locals, trap-mode UBSan for bounds, shifts, nulls and pointer overflow...) in a private copy, a cluster of its own loads it, and the regression
# tests run on it. A violation is a trap instruction: the backend dies, the test fails. Complements the ASan flavor (which sees heap and stack
# but not an overrun inside a palloc chunk or a struct) with checks that cost nothing to enable and run on the release code generation.
#
#   scripts/hardened.sh [TEST...]        (SIFT_HARDEN=pkg|init|1, default 1; SIFT_TMP and SIFT_PORT as scripts/pgtest.sh)
#
# The default tests are the decoders and the readers of stored bytes: codec, column unit, kernels at every SIMD level, shredder, term
# blobs, corruption tests, positions, the table AM. scripts/ci.sh runs this as the job `hardened`.
set -euo pipefail

REPO=$(cd "$(dirname "$0")/.." && pwd)
source "$REPO/scripts/source-snapshot.sh"
TMP=${SIFT_TMP:-/tmp/sift-hardened-$$}
WORK=$TMP/hardened
TESTS=("$@")
(( ${#TESTS[@]} )) || TESTS=(colcodec_basic colcodec_simd col_enc col_kernels_simd kernels_simd kernels_filter shred_values shred_kernels shred_diff
	verify_corrupt store_corrupt query_errors phrase_positions position_blocks index_build_postings tbl_basic tbl_agg)
export SIFT_HARDEN=${SIFT_HARDEN:-1}
# the trap flavor, not the ASan flavor scripts/ci.sh full exports
unset SANITIZE

rm -rf "$WORK" && mkdir -p "$WORK/tree"
# a private copy: the build writes into the tree and the flavor must not disturb the checkout's own build
copy_git_sources "$REPO" "$WORK/tree"
cd "$WORK/tree"
export SIFT_TMP=$WORK/cluster SIFT_ROOT=$WORK/root
scripts/pgtest.sh install
trap 'scripts/pgtest.sh stop >/dev/null 2>&1 || true; [[ -n ${KEEP:-} ]] || rm -rf "$WORK"' EXIT
scripts/pgtest.sh start
scripts/pgtest.sh regress "${TESTS[@]}"
echo "hardened: ${#TESTS[@]} tests passed on SIFT_HARDEN=$SIFT_HARDEN ($(gcc --version | head -1))"