code wiki / _hdl_build / nx_cms_blocks_gate.nx

nx_cms_blocks_gate.nx

buildroot/runtime/_hdl_build/nx_cms_blocks_gate.nx

19481 B449 linesdepth 5pulls 9 transitivereach 0 importersview sourcekind gate/prooftopic cms
docsdependenciesstructsconstsfunctions

about

nx_cms_blocks_gate.nx -- CMS C11 GATE (re-runnable, evidence-driven): BLOCK EDITOR + UPLOADS at the wire (the Gutenberg + media-library class). Proves: blocks render through the TEAM-AUTHORED _pe_blockr (TEMPLATE_TABLE, emit12) in document order; rich blocks sanitized ON WRITE; image uploads are REAL multipart (nx_multipart) and pass only when magic bytes MATCH the extension, size is within the site's upload.conf cap (config DATA), and the name is traversal-proof; served uploads come back BYTE-IDENTICAL with the right Content-Type; block ops are session+CSRF guarded. Appends "CMSGATE row=nx_cms_blocks ... verdict=PASS|FAIL". Exit 0 iff all rows pass. license_tier: ORIGINAL

dependencies 5 imports · 0 importers

nx_cms_store.nx nx_connect.nx nx_sha256.nx nx_syscalls.nx nx_kill_portable.nx nx_cms_blocks_gate.nx

imports: nx_cms_store.nxnx_connect.nxnx_sha256.nxnx_syscalls.nxnx_kill_portable.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main kb_mkdir sys_mmap kb_writefile sys_openat_wr sys_write sys_close kb_len cst_copy sys_openat_rd sys_openat_wr ↻ sys_close ↻ sys_mmap ↻ sys_read sys_write ↻ sys_renameat sys_mmap ↻ sha256_digest sys_mmap ↻ sha256_init sys_mmap ↻ sha256_k sha256_update sha256_compress_ni_blocks blk_set_byte sha256_compress sha256_compress_ni blk_word blk_byte sha256_final blk_set_byte ↻ sha256_compress ↻ sys_fork sys_openat_wr ↻ sys_dup3 sys_execve sys_exit sys_wait4 sys_openat_rd ↻ kb_w

structs

none

consts

15const KB_PORT: i64 = 8085
16const KB_SITE: *u8 = "/tmp/_cms_blocks_site"

functions

18func kb_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 2: kb_rowmain calls 1: sys_write
19func kb_len(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
called by 3: kb_indexkb_postmain
20func kb_cat(dst: *u8, off: i64, s: *u8) -> i64
called by 5: kb_postkb_post_mpkb_getkb_mp_bodymain
26func kb_catn(dst: *u8, off: i64, s: *u8, n: i64) -> i64
called by 5: kb_postkb_post_mpkb_getkb_mp_bodymain
32func kb_index(hay: *u8, n: i64, needle: *u8) -> i64
called by 2: kb_hasmain calls 1: kb_len
44func kb_has(hay: *u8, n: i64, needle: *u8) -> i64 { if kb_index(hay, n, needle) >= 0 { return 1 } return 0 }
called by 1: main calls 1: kb_index
46func kb_http(req: *u8, rl: i64, resp: *u8, cap: i64) -> i64
called by 1: main calls 7: sys_socketsys_mmapnx_connect_boundedsys_closesys_writesys_set_socket_timeout+1
80func kb_post(req: *u8, path: *u8, cookie: *u8, body: *u8) -> i64
called by 1: main calls 4: kb_catkb_catnkb_lensys_mmap
103func kb_post_mp(req: *u8, path: *u8, cookie: *u8, body: *u8, blen: i64) -> i64
called by 1: main calls 3: kb_catkb_catnsys_mmap
124func kb_get(req: *u8, path: *u8, cookie: *u8) -> i64
called by 1: main calls 2: kb_catkb_catn
138func kb_mp_body(out: *u8, csrf: *u8, fname: *u8, pay: *u8, plen: i64) -> i64
called by 1: main calls 2: kb_catkb_catn
149func kb_row(id: i64, ok: i64, what: *u8) -> i64
called by 1: main calls 2: kb_wsys_mmap
159func kb_mkdir(path: *u8, mode: i64) -> i64
called by 1: main calls 1: sys_mmap
164func kb_writefile(path: *u8, buf: *u8, n: i64) -> i64
called by 1: main calls 3: sys_openat_wrsys_writesys_close
172func main() -> i64
calls 31: kb_mkdirkb_writefilekb_lencst_copysys_renameatsys_mmap+25