test(ping): capture a paged body, and a body that must not be paged

No suite in the screenshot set had an over-long body, so the pager's own
rendering appeared NOWHERE in CI. The one behaviour 7.14.2 changed on the
confirm path was the one behaviour no capture could show, which is how it came
to be checked by pointing a camera at an OLED instead.

test_ping_long_body_is_paged sends 255 characters and captures the numbered
pages. The body is a digit ramp -- the Nth character is str(N % 10) -- so a
character dropped or repeated at a page seam is visible by inspection rather
than by counting.

test_ping_short_body_is_not_paged is the control, and it is the more important
of the two. A pager that numbered EVERY confirmation would make ordinary
approvals cost extra presses, and without a negative case that regression passes
unnoticed: more screens always looks like more disclosure.

Both gated to 7.14.2 with requires_firmware, so they SKIP rather than fail on
older builds.

What these do NOT assert: the press durations. Intermediate pages advance on a
short click and only the last page takes a hold -- there is no physical button
in an emulator, so that half stays a hardware check. It is now a short list
rather than a whole round.

Author: BitHighlander

scripts/generate-test-report.py

@@ -342,6 +342,21 @@ def parse_junit(path):
           'Binance denom renders in full',
           'A long denom must render completely and must not overflow the formatting buffer.',
           ['Transfer screen showing the full denom']),
+         ('S12', 'test_msg_ping', 'test_ping_long_body_is_paged',
+          'A long body is paged, not clipped',
+          'A body that will not fit one screen is shown across several, with the page number '
+          'in the title. Before 7.14.2 the device drew what fitted and stopped - no ellipsis, '
+          'no warning - and a later warning screen claimed "Hold to view it anyway" while '
+          're-drawing the same clipped text. These captures are the evidence that the '
+          'remainder is now actually reachable. The press DURATIONS (click to page, hold to '
+          'approve) are not assertable in an emulator with no physical button.',
+          ['Numbered page screens covering the whole body']),
+         ('S13', 'test_msg_ping', 'test_ping_short_body_is_not_paged',
+          'A body that fits is not paged',
+          'The control for S12. A fitting body must still take exactly one screen with an '
+          'unnumbered title - otherwise a pager that numbered every confirmation, making '
+          'ordinary approvals cost extra presses, would pass unnoticed.',
+          ['Single unnumbered confirmation screen']),
      ]),
     ('X', 'Device Specifications', '0.0.0',
      'The KeepKey is an open-source hardware wallet built on an ARM Cortex-M3 (STM32F205, 120MHz) '

tests/test_msg_ping.py

@@ -55,6 +55,47 @@ def test_ping(self):
             res = self.client.ping('random data', passphrase_protection=True)
             self.assertEqual(res, 'random data')
 
+    def test_ping_long_body_is_paged(self):
+        """A body that will not fit one screen must be shown across several.
+
+        Before 7.14.2 the device drew what fitted and stopped: no ellipsis, no
+        warning, nothing to tell the user the tail of an address or an amount
+        had been dropped. A warning screen was then added that said "Hold to
+        view it anyway" and re-drew the SAME clipped body, which is worse --
+        it claims a disclosure it does not make.
+
+        Now the body is paged, and the titles carry n/m. This test exists so
+        those pages are CAPTURED: the screens are the evidence, and until this
+        test existed no suite with an over-long body was in the screenshot set,
+        so the pager's own rendering appeared nowhere in CI.
+
+        The press DURATIONS -- click to page, hold to approve -- are not
+        assertable here. The emulator has no physical button; that half needs
+        hardware.
+        """
+        self.requires_firmware("7.14.2")
+        self.setup_mnemonic_nopin_nopassphrase()
+
+        # Digit ramp: the Nth character is str(N % 10), so a dropped or
+        # repeated character at a page seam is visible by inspection.
+        body = ''.join(str(i % 10) for i in range(255))
+        res = self.client.ping(body, button_protection=True)
+        self.assertEqual(res, body)
+
+    def test_ping_short_body_is_not_paged(self):
+        """The control for the test above.
+
+        A body that fits must still take exactly one screen with an unnumbered
+        title. Without this, a pager that numbered every confirmation -- making
+        ordinary approvals cost two presses -- would pass unnoticed.
+        """
+        self.requires_firmware("7.14.2")
+        self.setup_mnemonic_nopin_nopassphrase()
+
+        body = ''.join(str(i % 10) for i in range(100))
+        res = self.client.ping(body, button_protection=True)
+        self.assertEqual(res, body)
+
     def test_ping_format_specifier_sanitize(self):
         self.setup_mnemonic_pin_passphrase()
         self.client.clear_session()