From 8639bbd750ea4270d45fa80d0c7783bb59b26c71 Mon Sep 17 00:00:00 2001
From: Shirofune-Security
 <43838376+Shirofune-Security@users.noreply.github.com>
Date: Tue, 22 Sep 2026 10:23:04 +0900
Subject: [PATCH] Pass literal named switches in negative public provider cases

---
 tests/NativeProviderConfigure.Windows.Tests.ps1 | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/tests/NativeProviderConfigure.Windows.Tests.ps1 b/tests/NativeProviderConfigure.Windows.Tests.ps1
index 2147690b..52019079 100644
--- a/tests/NativeProviderConfigure.Windows.Tests.ps1
+++ b/tests/NativeProviderConfigure.Windows.Tests.ps1
@@ -42,8 +42,12 @@ $p=Get-Content -LiteralPath $InputPath -Raw|ConvertFrom-Json
 $a=@{ProviderAction=[string]$p.Action;ProviderPack=[string[]]$p.Names;ResultsPath=[string]$p.ResultsPath}
 if($p.Action -ceq 'Configure'){$a.Auto=$true;$a.BackupPath=[string]$p.BackupPath}
 if($p.DryRun){$a.DryRun=$true}
-$extra=[string[]]$p.Extra
-& ([string]$p.Script) provider-packs @a @extra
+# Array-splatted strings are positional values, not named PowerShell switches.
+# Fixed literal branches exercise the public parameter parser exactly.
+if(@($p.Extra).Count -eq 0){& ([string]$p.Script) provider-packs @a}
+elseif(@($p.Extra).Count -eq 1 -and $p.Extra[0] -ceq '-WhatIf'){& ([string]$p.Script) provider-packs @a -WhatIf}
+elseif(@($p.Extra).Count -eq 1 -and $p.Extra[0] -ceq '-GrantEventLogReaders'){& ([string]$p.Script) provider-packs @a -GrantEventLogReaders}
+else{throw 'Unreviewed fixture option.'}
 exit $global:LASTEXITCODE
 '@ | Set-Content -LiteralPath $wrapper -Encoding UTF8
 function Public([string]$Name,[string]$Action,[string[]]$Names,[switch]$DryRun,[int]$Expected=0,[string[]]$Extra=@()){