Flips one byte of a stored chunk and leaves its digest alone, so the next restore must refuse.
Makes the refusal executable in production, not only in a test: a chunk with the wrong bytes
gives a heap of the right length that renders subtly wrong with no error. The stored digest is
left untouched; corrupting both would restore cleanly and prove nothing.
Flips one byte of a stored chunk and leaves its digest alone, so the next restore must refuse.
Makes the refusal executable in production, not only in a test: a chunk with the wrong bytes gives a heap of the right length that renders subtly wrong with no error. The stored digest is left untouched; corrupting both would restore cleanly and prove nothing.