Function TEST

pj_runtime/tests/payload_anchor_test.cpp:36–60

}  // namespace

TEST(PayloadAnchorKeepalive, ReleaseRunsWhileDsoStillMapped) {
  bool dso_mapped = true;
  // The plugin DSO token: when its last copy drops, the ".so" unloads.
  auto library_keepalive =
      std::shared_ptr<void>(reinterpret_cast<void*>(0x1), [&dso_mapped](void*) { dso_mapped = false; });

  AnchorProbe probe{&dso_mapped};
  PJ_payload_anchor_t anchor{};
  anchor.ctx = &probe;
  anchor.release = &probeRelease;

  PJ::sdk::BufferAnchor wrapped = PJ::detail::wrapPayloadAnchor(anchor, library_keepalive);

  // The extension catalog tears down and drops its DSO token. The wrapped anchor
  // must hold its OWN copy, so the ".so" stays mapped.
  library_keepalive.reset();
  EXPECT_TRUE(dso_mapped) << "wrapped anchor must keep the producing plugin DSO token alive";
  EXPECT_FALSE(probe.release_ran);

  // Destroying the anchor runs release — and it must run BEFORE the DSO unloads.
  wrapped.reset();
  EXPECT_TRUE(probe.release_ran);
  EXPECT_FALSE(probe.released_after_unload) << "plugin release fn was called after the DSO unloaded (UAF)";
  EXPECT_FALSE(dso_mapped) << "the captured keepalive drops once the anchor is destroyed";
}

TEST(PayloadAnchorKeepalive, NullReleaseYieldsEmptyAnchor) {
  PJ_payload_anchor_t anchor{};  // release == nullptr → no ownership to track.