Skip to content

fix(fuzz): drop a statically dead null guard in the markdown oracle #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
g-cqd merged 1 commit into from
Aug 5, 2026
Merged

fix(fuzz): drop a statically dead null guard in the markdown oracle #20

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions fuzz/fuzz-markdown.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,11 @@ export function fuzz(data) {
const text = data.toString('utf8')
const result = extractFrontmatter(text)

if (result == null || typeof result !== 'object') {
throw new Error(`extractFrontmatter returned ${JSON.stringify(result)}`)
}
// No explicit null/shape guard: extractFrontmatter returns an object
// literal on every path, so CodeQL correctly flags `result == null` as
// statically dead (js/comparison-between-incompatible-types). It also buys
// nothing — were it ever to return null, the property reads below throw a
// TypeError, which the fuzzer reports as a crash just the same.
if (typeof result.body !== 'string') {
throw new Error(`body is not a string: ${JSON.stringify(result.body)}`)
}
Expand Down
Loading