docs,fuzz: fix ownership/alloc comments; fuzz chunk metadata path

2026-09-13 05:48:27 +02:00
parent 5a829adb85
commit dcc78c14c5
3 changed files with 10 additions and 4 deletions
@@ -758,8 +758,9 @@ bool config_has_valid_delete_timing(const Config* config);
 /* Single source of truth for the cross-field ("combination") invariants a
 * Config must satisfy.  Returns NULL when `config` is consistent, or a static,
 * human-readable error string (no trailing period) describing the FIRST
- * violation found.  Pure: performs no I/O, no allocation, no logging and no
- * printing, so it is safe to call from every trust boundary.  The client calls
+ * violation found.  No I/O, no logging and no printing, so it is safe to call
+ * from every trust boundary; the iconv rule does invoke charset_spec_valid
+ * (which parses via str_dup/iconv_open), so it is not allocation-free.  The client calls
 * it from validate_config() for up-front UX and the server calls it from
 * validate_received_config() so the receiver enforces exactly the same
 * invariants it relies on (the server is the trust boundary). */