#[cfg(miri)]
#[test]
fn eager digest blocks panic corrupts inline position() {
  // `EagerBuffer` stores its cursor in the last byte of the internal block.
  // When `digest blocks` completes a previously partial block, it overwrites
  // that byte with input data before invoking the caller-provided `compress`
  // callback. If the callback panics, safe code can catch the panic and keep
  // using the buffer while its cursor byte no longer satisfies the internal
  // `pos < block size` invariant. Under Miri this `get pos` call reaches the
  // `unreachable unchecked` used for the assumed-valid cursor.
  let mut buf = EagerBuffer::<U4>::new(&[1, 2]);

  let  = std::panic::catch unwind(std::panic::AssertUnwindSafe(|| {
    buf.digest blocks(&[3, 0xff], | | panic!("simulated compression failure"));
  }));

  let  = buf.get pos();
}

#[cfg(miri)]
#[test]
fn read buffer generator panic corrupts inline position() {
  // `ReadBuffer` stores its cursor in `buffer[0]`, but `write block` gives
  // `gen block` mutable access to the whole internal block before restoring
  // `buffer[0]` to a valid cursor. If `gen block` writes an arbitrary first
  // byte and panics, safe code can catch the panic and later observe an
  // invalid cursor. Under Miri this `get pos` call reaches the
  // `unreachable unchecked` used for the assumed-valid cursor.
  let mut buf = ReadBuffer::<U4>::default();

  let  = std::panic::catch unwind(std::panic::AssertUnwindSafe(|| {
    buf.write block(
      1,
      |block| {
        block[0] = 0xff;
        panic!("simulated block generation failure");
      },
      | | {},
    );
  }));

  let  = buf.get pos();
}