Files
mxaccess/analysis/frida/write-mode-matrix.tsv
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

2.3 KiB

1capturetagscenariomethod_resultcom_hookcom_args_summaryputrequest_sizeputrequest_value_offsetputrequest_time_offsettransferdata_sizetransferdata_value_offsettransferdata_time_offsetcallback_sizecallback_value_offsetcallback_time_offsetnotes
2036-frida-write-secured-test-intTestChildObject.TestIntwrite-secured0x80004021 unsupportedCLMXProxyServer.WriteSecured.variantAsession=1 item=1 currentUser=1 verifier=0 vt=0x3 value=112nonenonenonenonenonenonenonenonenoneOperate tag rejects WriteSecured before value-bearing PutRequest.
3037-frida-write-secured2-test-intTestChildObject.TestIntwrite-secured2E_INVALIDARGCLMXProxyServer.WriteSecured.variantBsession=1 item=1 currentUser=1 verifier=0 vt=0x3 value=113 vt_date timestampnonenonenonenonenonenonenonenonenoneOperate tag rejects WriteSecured2 before value-bearing PutRequest.
4038-frida-write-secured-protectedvalueTestMachine_001.ProtectedValuewrite-secured0x80004021 unsupportedCLMXProxyServer.WriteSecured.variantAsession=1 item=1 currentUser=1 verifier=0 vt=0xb value=truenonenonenonenonenonenonenonenonenoneSecuredWrite tag still rejects public WriteSecured before value-bearing PutRequest.
5039-frida-write-secured-verified-protectedvalue1TestMachine_001.ProtectedValue1write-secured0x80004021 unsupportedCLMXProxyServer.WriteSecured.variantAsession=1 item=1 currentUser=1 verifier=1 vt=0xb value=truenonenonenonenonenonenonenonenonenoneVerifiedWrite tag still rejects public WriteSecured before value-bearing PutRequest.
6040-frida-write-normal-secured-protectedvalueTestMachine_001.ProtectedValuewritesuccessCLMXProxyServer.Write.variantAsession=1 item=1 vt=0xb value=true user/security=23718none8364none858475Supported public route for SecuredWrite is normal Write with fourth argument 2.
7041-frida-write-normal-verified-protectedvalue1TestMachine_001.ProtectedValue1writesuccessCLMXProxyServer.Write.variantAsession=1 item=1 vt=0xb value=true user/security=33718none8364none858475Supported public route for VerifiedWrite is normal Write with fourth argument 3.
8042-frida-write2-test-int-timestampTestChildObject.TestIntwrite2successCLMXProxyServer.Write.variantBsession=1 item=1 vt=0x3 value=114 vt_date timestamp user/security=1401824866470888475Write2 embeds FILETIME at PutRequest offset 24 and callback offset 75.