refactor(dynamic): add recursive dependency resolution for C receivers, enhance harness generation logic, and expand test coverage

tests/class_method_corpus.rs

@@ -241,6 +241,31 @@ fn class_method_c_collapses_to_class_underscore_method_symbol() {
     assert!(h.source.contains("UserService_run"));
 }
 
+#[test]
+fn class_method_c_builds_recursive_receiver_pointer() {
+    let mut spec = make_spec(Lang::C);
+    spec.entry_file = "tests/dynamic_fixtures/class_method/c_recursive_deps/vuln.c".into();
+    spec.sink_file = spec.entry_file.clone();
+    let h = lang::emit(&spec).expect("emit ok");
+    assert!(h.source.contains("ShellRunner nyx_shell_0 = {0};"));
+    assert!(
+        h.source
+            .contains("CommandRunner nyx_runner_0 = { .shell = &nyx_shell_0 };")
+    );
+    assert!(
+        h.source
+            .contains("UserService nyx_receiver = { .runner = &nyx_runner_0 };")
+    );
+    assert!(
+        h.source
+            .contains("UserService_run(&nyx_receiver, payload, strlen(payload));")
+    );
+    assert!(
+        !h.source
+            .contains("UserService_run(payload, strlen(payload));")
+    );
+}
+
 #[test]
 fn class_method_cpp_constructs_default_then_calls_method() {
     let spec = make_spec(Lang::Cpp);
@@ -477,6 +502,17 @@ mod e2e_phase_19 {
             cap: Cap::CODE_EXEC,
             bins: &["cc"],
         },
+        Case {
+            lang: Lang::C,
+            fixture_dir: "c_recursive_deps",
+            vuln_file: "vuln.c",
+            benign_file: "benign.c",
+            vuln_class: "UserService",
+            benign_class: "UserService",
+            method: "run",
+            cap: Cap::CODE_EXEC,
+            bins: &["cc"],
+        },
         Case {
             lang: Lang::Cpp,
             fixture_dir: "cpp",

tests/dynamic_fixtures/class_method/c_recursive_deps/benign.c

@@ -0,0 +1,25 @@
+/* Benign control for the recursive C receiver fixture. */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+typedef struct ShellRunner {
+    int enabled;
+} ShellRunner;
+
+typedef struct CommandRunner {
+    ShellRunner *shell;
+} CommandRunner;
+
+typedef struct UserService {
+    CommandRunner *runner;
+} UserService;
+
+void UserService_run(UserService *self, const char *input, size_t len) {
+    (void)input;
+    (void)len;
+    if (!self || !self->runner || !self->runner->shell) {
+        return;
+    }
+    system("true");
+}

tests/dynamic_fixtures/class_method/c_recursive_deps/vuln.c

@@ -0,0 +1,26 @@
+/* ClassMethod C fixture with a receiver pointer and recursive struct deps. */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+typedef struct ShellRunner {
+    int enabled;
+} ShellRunner;
+
+typedef struct CommandRunner {
+    ShellRunner *shell;
+} CommandRunner;
+
+typedef struct UserService {
+    CommandRunner *runner;
+} UserService;
+
+void UserService_run(UserService *self, const char *input, size_t len) {
+    (void)len;
+    if (!self || !self->runner || !self->runner->shell) {
+        return;
+    }
+    char buf[512];
+    snprintf(buf, sizeof(buf), "true %s", input ? input : "");
+    system(buf);
+}