mirror of
https://github.com/morluto/rea
synced 2026-10-26 06:16:17 -04:00
Matt Van Horn
2edf3b23c1
Inspect selected ELF32/ELF64 PT_NOTE and SHT_NOTE declarations without executing the artifact, retaining independent table identities, source ranges, descriptor digests, GNU build-id/ABI fields and explicit coverage limitations. Integrate mvanhorn's implementation and hardening with current main while preserving byte-entropy registration and the Windows curated regression suite. The maintainer follow-up uses ordinary merges/pushes, not history rewriting. Executed validation: 96 focused/shared/docs tests, complete static/docs checks, eleven real CLI/MCP pairs including GCC ELF32 and Clang big-endian PowerPC64, and two actual Codex task traces checked against their Evidence. Full costs, grader correction and verification limits are recorded in PR #4837. Refs #6262.
80 lines
2.4 KiB
TypeScript
80 lines
2.4 KiB
TypeScript
import { expect, it } from "vitest";
|
|
import { ElfNotesService } from "./ElfNotesService.js";
|
|
import { ELF_NOTES_PROVIDER } from "../InvestigationProviders.js";
|
|
import type { ElfNotes } from "../../domain/native/elfNotes.js";
|
|
import { ok } from "../../domain/result.js";
|
|
import {
|
|
AnalysisCancelledError,
|
|
AnalysisInputError,
|
|
} from "../../domain/analysisErrorCore.js";
|
|
|
|
const identity = ELF_NOTES_PROVIDER;
|
|
const report: ElfNotes = {
|
|
artifact: {
|
|
path: "/artifacts/app",
|
|
sha256: "a".repeat(64),
|
|
bytes: 512,
|
|
},
|
|
format: "elf64",
|
|
byte_order: "little",
|
|
machine: 62,
|
|
type: 3,
|
|
type_name: "shared",
|
|
tables: [],
|
|
entries: [],
|
|
coverage: { status: "complete", examined_tables: 0, examined_entries: 0 },
|
|
limitations: ["No PT_NOTE program header or SHT_NOTE section was declared."],
|
|
};
|
|
|
|
it("rejects a relative path and extra arguments before reading", async () => {
|
|
let calls = 0;
|
|
const service = new ElfNotesService({
|
|
identity,
|
|
inspect: () => {
|
|
calls += 1;
|
|
return Promise.resolve(ok(report));
|
|
},
|
|
});
|
|
const relative = await service.inspect({ path: "app" });
|
|
const extra = await service.inspect({
|
|
path: report.artifact.path,
|
|
extra: true,
|
|
});
|
|
expect(relative.ok).toBe(false);
|
|
expect(extra.ok).toBe(false);
|
|
if (!relative.ok) expect(relative.error).toBeInstanceOf(AnalysisInputError);
|
|
if (!extra.ok) expect(extra.error).toBeInstanceOf(AnalysisInputError);
|
|
expect(calls).toBe(0);
|
|
});
|
|
|
|
it("records the selected ELF and an absent note table", async () => {
|
|
const result = await new ElfNotesService({
|
|
identity,
|
|
inspect: () => Promise.resolve(ok(report)),
|
|
}).inspect({ path: report.artifact.path });
|
|
expect(result.ok).toBe(true);
|
|
if (!result.ok) throw result.error;
|
|
expect(result.value).toMatchObject({
|
|
confidence: "observed",
|
|
subject: { format: "elf", architecture: "x86_64" },
|
|
normalized_result: report,
|
|
});
|
|
});
|
|
|
|
it("discards an observation if the caller cancels while the provider completes", async () => {
|
|
const controller = new AbortController();
|
|
const service = new ElfNotesService({
|
|
identity,
|
|
inspect: () => {
|
|
controller.abort();
|
|
return Promise.resolve(ok(report));
|
|
},
|
|
});
|
|
const result = await service.inspect(
|
|
{ path: report.artifact.path },
|
|
{ signal: controller.signal },
|
|
);
|
|
expect(result.ok).toBe(false);
|
|
if (!result.ok) expect(result.error).toBeInstanceOf(AnalysisCancelledError);
|
|
});
|