Ysopwnable
4fc6565b0f
* feat(native): inspect offline ELF layout through pwntools * fix(build): prepare offline ELF verification on clean runners * fix(native): preserve snapshot acquisition cancellation * fix(native): handle sectionless ELF and retain decoder diagnostics * test(native): verify malformed symbol table entry sizes * fix(native): respect inherited limits and unused segment fields * fix(native): preserve packed relocations and decoder launch constraints * fix(native): validate symbol spans and preserve resource failures * fix(native): preserve diagnostic completeness and memory failures * fix(native): guard bridge imports against allocation failures * fix(native): validate relocation symbol and section references * fix(native): retain diagnostics through compounded cleanup failures * fix(native): preserve unresolved relocation section references * fix(native): bound linkage evidence and preserve CPU signal diagnostics * fix(native): preserve file-size resource failure evidence * fix(native): retain opaque linkage names and late cancellation output * test(native): make CPU-limit fixture robust across runners * fix(native): verify resource failure branches before interpreting exits * fix(native): validate declared ELF string references * fix(native): validate section-name table before decoding * fix(native): enforce canonical ELF name-table escapes
79 lines
2.6 KiB
YAML
79 lines
2.6 KiB
YAML
name: Real offline binary layout
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
large_mcp:
|
|
description: "Also verify the complete 65,281-section result over MCP (slow)"
|
|
type: boolean
|
|
default: false
|
|
pull_request:
|
|
paths:
|
|
- ".github/workflows/real-binary-layout.yml"
|
|
- "bridge/pwntools/**"
|
|
- "src/native/pwntools/**"
|
|
- "src/domain/native/binaryLayout*"
|
|
- "src/application/binaryDiagnostics/**"
|
|
- "src/contracts/native/binaryDiagnosticsToolContracts.ts"
|
|
- "src/composition/binaryDiagnostics.ts"
|
|
- "src/server/registerBinaryDiagnosticsTools.ts"
|
|
- "src/server/createServer.ts"
|
|
- "src/cli/binaryDiagnosticsCommands.ts"
|
|
- "src/cli.ts"
|
|
- "src/cliCommandNames.ts"
|
|
- "src/contracts/toolContracts.ts"
|
|
- "src/contracts/toolEffects.ts"
|
|
- "src/process/OwnedCommand.ts"
|
|
- "src/process/ProviderProcess.ts"
|
|
- "src/process/ProviderDeadline.ts"
|
|
- "src/process/ProcessOwnership*.ts"
|
|
- "src/process/PrivateRuntimeRoot.ts"
|
|
- "src/artifacts/readStableArtifact*.ts"
|
|
- "src/artifacts/ArtifactReader.ts"
|
|
- "src/domain/analysisError*.ts"
|
|
- "scripts/verify-binary-layout.mjs"
|
|
- "scripts/lib/elf-section-name-fixtures.mjs"
|
|
- "scripts/lib/large-result-mcp.mjs"
|
|
- "scripts/fixtures/binary-layout*"
|
|
- "package.json"
|
|
- "package-lock.json"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: real-binary-layout-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
NODE_OPTIONS: --max-old-space-size=768
|
|
HUSKY: "0"
|
|
REA_VERIFY_LARGE_ELF_MCP: ${{ inputs.large_mcp && '1' || '0' }}
|
|
|
|
jobs:
|
|
real-binary-layout:
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 15
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version-file: .nvmrc
|
|
cache: npm
|
|
- run: npm ci
|
|
- name: Acquire exact upstream libraries in an isolated runner environment
|
|
shell: bash
|
|
run: |
|
|
layout_python_root="${RUNNER_TEMP}/rea-pwntools-layout"
|
|
python3 -m venv "${layout_python_root}"
|
|
"${layout_python_root}/bin/python" -m pip install --disable-pip-version-check \
|
|
'pwntools==4.15.0' 'pyelftools==0.33' 'unicorn==2.1.2'
|
|
command -v gcc
|
|
command -v ld
|
|
command -v strip
|
|
command -v strace
|
|
echo "REA_PWNTOOLS_PYTHON=${layout_python_root}/bin/python" >> "${GITHUB_ENV}"
|
|
echo "REA_VERIFY_STRACE_COMMAND=$(command -v strace)" >> "${GITHUB_ENV}"
|
|
- name: Verify source-owned fixtures through public CLI and MCP
|
|
run: npm run verify:binary:layout
|