code wiki / _hdl_build / nx_torrent_gateway_gate.nx
nx_torrent_gateway_gate.nx
buildroot/runtime/_hdl_build/nx_torrent_gateway_gate.nx
about
nx_torrent_gateway_gate.nx -- referee for the R3c front gateway's security keystone (imports the gateway,
main stripped, tests the pure fns). PROVES:
tg_backend_req injects exactly ONE authoritative "X-Nishi-Level: <level>" built FRESH from the validated
level -- a client-supplied X-Nishi-Level cannot survive (no privilege spoof), and the POST body is forwarded.
tg_gate_decision: the login/auth/sw bootstrap is PUBLIC (reachable to log in); a gated /torrent/* path with
NO session (level 0) -> DENY (401); a logged-in member+ (level>=1) -> ALLOW (area enforced downstream).
GREEN iff every row matches. Prints verdict=GREEN to STDOUT *and* returns the exit code.
Durable -> knowledge/status/torrent_gateway_gate.log. license_tier: ORIGINAL
dependencies 2 imports · 0 importers
imports: nx_torrent_gateway.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 12 | func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 13 | func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } |
| 14 | func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } |
| 15 | func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } |
| 16 | func chk(got: i64, want: i64, label: *u8) -> i64 |
| 22 | func gcount(buf: *u8, n: i64, pat: *u8) -> i64 called by 1: main |
| 30 | func main() -> i64 |