gensokyo-dev
17f581ff75
Add opt-in retained GDB and objdump summaries using the shared analysis-view layer. Preserve default complete Evidence, ordered records, provenance and completion facts. Validate real Bash disassembly, whole-client context costs, CLI publication and cleanup; retain the original measured cohorts and explicit coverage limitations. Closes #5584.
29 lines
2.4 KiB
Python
29 lines
2.4 KiB
Python
from pathlib import Path
|
|
import json,re,hashlib,argparse
|
|
parser=argparse.ArgumentParser(description='Match every native instruction byte against independently mapped ELF file ranges');parser.add_argument('--root',type=Path,required=True);args=parser.parse_args();lab=args.root;oracle=json.loads((lab/'elf-oracle.json').read_text());image=Path(oracle['path']).read_bytes();assert hashlib.sha256(image).hexdigest()==oracle['artifact_sha256'];rows=[]
|
|
for directory in sorted(lab.iterdir()):
|
|
bundle=directory/'evidence.json'
|
|
if not bundle.is_file():continue
|
|
for parent in json.loads(bundle.read_text())['records']:
|
|
if parent['operation'] not in ['gdb_console','inspect_with_objdump']:continue
|
|
params=parent['parameters'];gdb=parent['operation']=='gdb_console'
|
|
symbol=params.get('command','').removeprefix('disassemble /r ') if gdb else params.get('symbol')
|
|
if symbol not in {s['name'] for s in oracle['symbols']}:continue
|
|
spec=next(s for s in oracle['symbols'] if s['name']==symbol)
|
|
report=parent['normalized_result'];assert report['completion_status']=='complete' and not report['output_truncated']
|
|
if gdb:
|
|
assert parent['subject'] is None
|
|
console='\n'.join(line for line in report['records'] if line.startswith('~'));assert console==report['console']
|
|
text=''.join(json.loads(line[1:]) for line in report['records'] if line.startswith('~'))
|
|
pattern=r'^\s*(?:=>\s*)?0x([0-9a-f]+)[^:]*:\s*((?:[0-9a-f]{2}(?:\s+|$))+)'
|
|
else:
|
|
assert parent['subject']['digest']['sha256']==oracle['artifact_sha256'];text=report['stdout'];pattern=r'^\s*([0-9a-f]+):\s*((?:[0-9a-f]{2}(?:\s+|$))+)'
|
|
address=spec['address'];collected=bytearray();count=0
|
|
for line in text.splitlines():
|
|
m=re.match(pattern,line)
|
|
if not m:continue
|
|
actual=int(m[1],16);raw=bytes.fromhex(m[2]);assert actual==address+len(collected),(directory,actual,address+len(collected));collected.extend(raw);count+=1
|
|
expected=image[spec['file_offset']:spec['file_offset']+spec['bytes']];assert collected==expected,(directory,len(collected),len(expected));rows.append({'case':directory.name,'mode':'gdb' if gdb else 'objdump','symbol':symbol,'byte_bearing_lines':count,'bytes':len(collected),'exact_file_bytes':True,'parent_evidence_id':parent['evidence_id']})
|
|
assert rows
|
|
(lab/'native-final-verification.json').write_text(json.dumps({'status':'passed','artifact_sha256':oracle['artifact_sha256'],'records':rows},indent=2)+'\n');print(json.dumps(rows))
|