@@ -1750,17 +1750,6 @@ mod test {
17501750 . unwrap ( )
17511751 }
17521752
1753- fn process_rss_bytes ( ) -> u64 {
1754- let status = std:: fs:: read_to_string ( "/proc/self/status" ) . unwrap ( ) ;
1755- let rss_kib = status
1756- . lines ( )
1757- . find_map ( |line| line. strip_prefix ( "VmRSS:" ) )
1758- . and_then ( |value| value. split_whitespace ( ) . next ( ) )
1759- . and_then ( |value| value. parse :: < u64 > ( ) . ok ( ) )
1760- . expect ( "VmRSS must be available from /proc/self/status" ) ;
1761- rss_kib * 1024
1762- }
1763-
17641753 #[ tokio:: test]
17651754 async fn rejected_token_flood_keeps_issuer_cache_bounded ( ) {
17661755 let mut tempdir = temp_dir ( ) ;
@@ -1809,23 +1798,12 @@ mod test {
18091798 . await ;
18101799
18111800 let now = chrono:: Utc :: now ( ) . timestamp ( ) . max ( 0 ) as u64 ;
1812- let warmup_key = SigningKey :: generate ( & mut csprng) ;
1813- let warmup_token = sign_untrusted_direct_token ( & warmup_key, now) ;
1814- assert ! ( handle_token( & state, & warmup_token) . await . is_err( ) ) ;
1815- let rss_before = process_rss_bytes ( ) ;
1816-
18171801 for _ in 0 ..2048 {
18181802 let issuer_key = SigningKey :: generate ( & mut csprng) ;
18191803 let token = sign_untrusted_direct_token ( & issuer_key, now) ;
18201804 assert ! ( handle_token( & state, & token) . await . is_err( ) ) ;
18211805 }
18221806
1823- let rss_growth = process_rss_bytes ( ) . saturating_sub ( rss_before) ;
1824- // Allow allocator page retention and CI measurement noise without permitting unbounded growth.
1825- assert ! (
1826- rss_growth <= 8 * 1024 * 1024 ,
1827- "rejected-token flood grew process RSS by {rss_growth} bytes"
1828- ) ;
18291807 assert_eq ! ( state. issuer_key_cache_len( ) . await , 0 ) ;
18301808 }
18311809
0 commit comments