aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAge
...
* fifty-seventh pass: characterise the consequence and re-frame which copy mattersuser2026-09-30
* fifty-sixth pass: payload origin cannot be emulated without faking the validatoruser2026-09-30
* fifty-fifth pass: compose the chain through the real dispatcher in emulationuser2026-09-30
* fifty-fourth pass: step two executed, all three steps now run in emulationuser2026-09-30
* fifty-third pass: fix the harness by instrumentation and execute step oneuser2026-09-30
* fifty-second pass: emulating step one is inconclusive and is labelled as suchuser2026-09-30
* fifty-first pass: reproduce the corruption step in emulationuser2026-09-30
* fiftieth pass: mechanically verify the candidate chain against the binaryuser2026-09-30
* forty-ninth pass: final static gate closes, giving a fully specified corrupti...user2026-09-30
* forty-eighth pass: the staging buffer and its count field are zeroed at alloc...user2026-09-30
* forty-seventh pass: re-verify the capacity claim, which holds on a corrected ...user2026-09-30
* forty-sixth pass: candidate one narrows to likely dead, candidate two survivesuser2026-09-30
* forty-fifth pass: the slot state word is the caller-supplied format codeuser2026-09-30
* forty-fourth pass: slot capacity is computed from the caller's format codeuser2026-09-30
* forty-third pass: trace slot capacity and the magic state to a caller-supplie...user2026-09-30
* forty-second pass: second and stronger candidate, a count field inside a stag...user2026-09-30
* forty-first pass: re-rank flagged sites by reachability from the real opcode ...user2026-09-29
* fortieth pass: close the reopened XGMI finding as boundeduser2026-09-29
* thirty-ninth pass: the slot table lies outside the code image, retiring the s...user2026-09-29
* thirty-eighth pass: close the slot-pointer blind spot, then distrust the answeruser2026-09-29
* thirty-seventh pass: search for the writer of the required slot stateuser2026-09-29
* thirty-sixth pass: resolve the slot-state precondition to a single exact valueuser2026-09-29
* thirty-fifth pass: continuity evidence for the candidate chain, plus a new pr...user2026-09-29
* thirty-fourth pass: provenance gate answers, static chain complete as a candi...user2026-09-29
* thirty-third pass: TA-side linkage of the chain, and the single remaining gateuser2026-09-29
* thirty-second pass: emitter analysis shows both ends of the chain are TA-issu...user2026-09-29
* thirty-first pass: recover the unanalysed small-opcode family and its consequ...user2026-09-29
* recover the SYS_DRV small-opcode dispatcher and reopen the XGMI findinguser2026-09-29
* thirtieth pass: re-derive reachability; the chain head is the request-handlin...user2026-09-29
* twenty-ninth pass: retract the unreachability closure, the consumer is calleduser2026-09-29
* close the E17334 lead: the consumer is unreachable in this builduser2026-09-29
* twenty-eighth pass: gate resolves into a split verdict, one writer bounded an...user2026-09-29
* twenty-seventh pass: resolve the lead's gate and move it one level downuser2026-09-29
* twenty-sixth pass: caller-side bound resolution; two more detector defects an...user2026-09-29
* twenty-fifth pass: finish the residue sweep and verify mnemonic matching acro...user2026-09-29
* twenty-fourth pass: read the unresolved-length residue; the 12*n idiom has a ...user2026-09-29
* twenty-third pass: run the primary length detector on SYS_DRV and ASD for the...user2026-09-29
* twenty-second pass: extend the scaled-index class to SYS_DRV and ASDuser2026-09-29
* twenty-first pass: destination pointers loaded from memory, the last defined ...user2026-09-29
* read the zero-validator request-destination candidates: all mis-attributeduser2026-09-29
* twentieth pass: extend the host-destination class to SYS_DRV and ASDuser2026-09-29
* nineteenth pass: verify the copy-helper operand convention every detector dep...user2026-09-29
* eighteenth pass: global-capacity tool is vacuous; correct a swapped dst/src f...user2026-09-29
* seventeenth pass: close the callee-length blind spot; class contains exactly ...user2026-09-29
* sixteenth pass: read all five width-flagged SYS_DRV sites; find a real detect...user2026-09-29
* fifteenth pass: decide SYS_DRV's field-flow sites by width x capacity, and re...user2026-09-29
* fourteenth pass: split IDA-merged extents in all three detectors, removing a ...user2026-09-29
* thirteenth pass: capacity-aware detector; two hits, both false positives expl...user2026-09-29
* twelfth pass: triage SYS_DRV field-flow sites; fix a direction bug in bounds ...user2026-09-29
* eleventh pass: search the callee-written length-slot class with both controls...user2026-09-29
generated by cgit v1.3.1-sl0p (git 2.54.0) at 2026-11-09 01:20:42 +0000 — sl0p fork