Repository: Parquery/icontract

Issue:
Invariant of a subclass applies to its base
Invariants of subclasses affect their base classes, as well as sibling classes.

Here is a example to reproduce the problem:
```
from icontract import invariant

@invariant(lambda: True)
class Base:
    pass

@invariant(lambda: False)
class Derived(Base):
    pass

Base()  # ViolationError
```

By the way, thanks for the nice library!

Discussion:
coveralls: 
[![Coverage Status](https://coveralls.io/builds/69906831/badge)](https://coveralls.io/builds/69906831)

coverage: 92.938% (+0.009%) from 92.929%
when pulling **796b241dd512b3349cacb2bfdf58a1c2fc07a201 on mristin/Fix-deeper-inheritance-after-2.7.0**
into **577b5031e0542d4960745051b8138b1a861b1bd2 on master**.

mristin: @verinov would you mind to take a look at this PR? Is it maybe possible to run this Git revision against your own code and test it?
verinov: @mristin I ran this branch with my code and everything looks good. Thank you!
Looking forward to the new release.

Patch:
diff --git a/icontract/_checkers.py b/icontract/_checkers.py
index efb445f..5e18a67 100644
--- a/icontract/_checkers.py
+++ b/icontract/_checkers.py
@@ -1213,7 +1213,7 @@ def add_invariant_checks(cls: ClassT) -> None:
         # We need to ignore __repr__ to prevent endless loops when generating error messages.
         # We also need to ignore __getattribute__ since pretty much any operation on the instance
         # will result in an endless loop.
-        if name in ["__new__", "__repr__", "__getattribute__"]:
+        if name in ("__new__", "__repr__", "__getattribute__"):
             continue
 
         if name == "__init__":
diff --git a/icontract/_metaclass.py b/icontract/_metaclass.py
index 623d933..a835f03 100644
--- a/icontract/_metaclass.py
+++ b/icontract/_metaclass.py
@@ -23,23 +23,38 @@ import icontract._checkers
 
 
 def _collapse_invariants(
-    bases: List[type], namespace: MutableMapping[str, Any]
+    bases: List[type], namespace: MutableMapping[str, Any], invariants_dunder: str
 ) -> None:
-    """Collect invariants from the bases and merge them with the invariants in the namespace."""
+    """
+    Collect invariants from the bases and merge them with the invariants in the namespace.
+
+    We do not only collapse ``__invariants__`` class property, but we also need to collapse
+    the filtered ``__invariants_on_call__`` and ``__invariants_on_setattr__``, as they are
+    sub-lists of the ``__invariants__``.
+    """
+    assert invariants_dunder in (
+        "__invariants__",
+        "__invariants_on_call__",
+        "__invariants_on_setattr__",
+    ), "Unexpected invariants_dunder: {!r}".format(invariants_dunder)
+
+    # region Invariants
     invariants = []  # type: List[Contract]
 
     # Add invariants of the bases
     for base in bases:
-        if hasattr(base, "__invariants__"):
-            invariants.extend(getattr(base, "__invariants__"))
+        if hasattr(base, invariants_dunder):
+            invariants.extend(getattr(base, invariants_dunder))
 
     # Add invariants in the current namespace
-    if "__invariants__" in namespace:
-        invariants.extend(namespace["__invariants__"])
+    if invariants_dunder in namespace:
+        invariants.extend(namespace[invariants_dunder])
 
     # Change the final invariants in the namespace
     if invariants:
-        namespace["__invariants__"] = invariants
+        namespace[invariants_dunder] = invariants
+
+    # endregion
 
 
 def _collapse_preconditions(
@@ -323,7 +338,14 @@ def _dbc_decorate_namespace(
     Instance methods are simply replaced with the decorated function/ Properties, class methods and static methods are
     overridden with new instances of ``property``, ``classmethod`` and ``staticmethod``, respectively.
     """
-    _collapse_invariants(bases=bases, namespace=namespace)
+    for invariant_dunder in (
+        "__invariants__",
+        "__invariants_on_call__",
+        "__invariants_on_setattr__",
+    ):
+        _collapse_invariants(
+            bases=bases, namespace=namespace, invariants_dunder=invariant_dunder
+        )
 
     for key, value in namespace.items():
         if inspect.isfunction(value) or isinstance(value, (staticmethod, classmethod)):


Test patch:
diff --git a/tests/test_inheritance_invariant.py b/tests/test_inheritance_invariant.py
index 9672d6c..4c9b48c 100644
--- a/tests/test_inheritance_invariant.py
+++ b/tests/test_inheritance_invariant.py
@@ -51,6 +51,117 @@ class TestOK(unittest.TestCase):
             "Invariant is expected to run before and after the method call.",
         )
 
+    def test_level_1_inheritance_of_invariants_does_not_leak_to_parents(self) -> None:
+        # NOTE (mristin):
+        # This is a regression test for:
+        # https://github.com/Parquery/icontract/issues/295
+        #
+        # The invariants added to a child class were unexpectedly leaked back to
+        # the parent class.
+
+        @icontract.invariant(lambda: True)
+        class Base(icontract.DBC):
+            def do_something(self) -> None:
+                pass
+
+            def __repr__(self) -> str:
+                return "instance of {}".format(self.__class__.__name__)
+
+        @icontract.invariant(lambda: False)
+        class Derived(Base):
+            pass
+
+        Base()
+
+        # NOTE (mristin):
+        # This produced an unexpected violation error.
+        Base().do_something()
+
+        had_violation_error = False
+        try:
+            Derived()
+        except icontract.ViolationError:
+            had_violation_error = True
+
+        assert had_violation_error
+
+    def test_level_2_inheritance_of_invariants_does_not_leak_to_parents(self) -> None:
+        # NOTE (mristin):
+        # This is a regression test for:
+        # https://github.com/Parquery/icontract/issues/295
+        #
+        # The invariants added to a child class were unexpectedly leaked back to
+        # the parent class.
+
+        @icontract.invariant(lambda: True)
+        class Base(icontract.DBC):
+            def do_something(self) -> None:
+                pass
+
+            def __repr__(self) -> str:
+                return "instance of {}".format(self.__class__.__name__)
+
+        @icontract.invariant(lambda: True)
+        class Derived(Base):
+            pass
+
+        @icontract.invariant(lambda: False)
+        class DerivedDerived(Base):
+            pass
+
+        Base()
+        Base().do_something()
+        Derived()
+
+        had_violation_error = False
+        try:
+            DerivedDerived()
+        except icontract.ViolationError:
+            had_violation_error = True
+
+        assert had_violation_error
+
+    # noinspection PyUnusedLocal
+    def test_level_3_inheritance_of_invariants_does_not_leak_to_parents(self) -> None:
+        # NOTE (mristin):
+        # This is a regression test for:
+        # https://github.com/Parquery/icontract/issues/295
+        #
+        # The invariants added to a child class were unexpectedly leaked back to
+        # the parent class.
+
+        class A(icontract.DBC):
+            def do_something(self) -> None:
+                pass
+
+            def __repr__(self) -> str:
+                return "instance of {}".format(self.__class__.__name__)
+
+        @icontract.invariant(lambda: True)
+        class B(A):
+            pass
+
+        # NOTE (mristin):
+        # CFalse should not in any way influence A, B and CTrue, but it did due to
+        # a bug.
+        @icontract.invariant(lambda: False)
+        class CFalse(B):  # pylint: disable=unused-variable
+            pass
+
+        @icontract.invariant(lambda: True)
+        class CTrue(B):
+            pass
+
+        A()
+
+        CTrue()
+
+        A().do_something()
+
+        # NOTE (mristin):
+        # This produced an unexpected violation error.
+        CTrue().do_something()
+
 
 class TestViolation(unittest.TestCase):
     def test_inherited(self) -> None: