code wiki / _hdl_build / nx_cms_migrate_exceed_gate.nx
nx_cms_migrate_exceed_gate.nx
buildroot/runtime/_hdl_build/nx_cms_migrate_exceed_gate.nx
about
nx_cms_migrate_exceed_gate.nx -- W-RE-004 head-to-head EXCEED (import-export-migrate, INTEGRITY axis).
Runs BOTH importers on the SAME corpus of bundles (pristine + byte-tampered):
OURS = cms_migrate_import (sha256-verifies the body before accepting)
INCUMBENT = a no-integrity importer (strip header, copy body, never verify) -- the CWE-494 failure
mode of migration tools that import without an integrity check (silent corruption).
Ground truth: a pristine bundle SHOULD import; a tampered bundle SHOULD be refused. Verdict COMPUTED by
nx_cms_exceed. Writes CMSEXCEED feature=import-export-migrate axis=integrity to cms_exceed.log on a
measured AHEAD + referee-clean + anti-false-green self-tests. license_tier: ORIGINAL
dependencies 3 imports · 0 importers
imports: nx_cms_exceed.nxnx_cms_migrate.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 13 | func em_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 14 | func em_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } |
| 15 | func em_cat(dst: *u8, off: i64, s: *u8) -> i64 { var o: i64=off; var k: i64=0; while s[k]!=(0 as u8){dst[o]=s[k];o=o+1;k=k+1} return o } called by 1: main |
| 16 | func em_catnum(dst: *u8, off: i64, v: i64) -> i64 |
| 21 | func em_cpy(dst: *u8, src: *u8) -> i64 { var k: i64=0; while src[k]!=(0 as u8){dst[k]=src[k];k=k+1} return k } called by 1: main |
| 22 | func em_row(id: i64, ok: i64, what: *u8) -> i64 |
| 30 | func em_incumbent_import(bundle: *u8, bn: i64) -> i64 called by 1: main |
| 39 | func main() -> i64 |