Files
mxaccess/analysis/ghidra/scripts/XrefReport.java
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

57 lines
2.3 KiB
Java

import ghidra.app.script.GhidraScript;
import ghidra.program.model.address.Address;
import ghidra.program.model.listing.Function;
import ghidra.program.model.symbol.Reference;
import ghidra.program.model.symbol.ReferenceIterator;
import java.io.File;
import java.io.PrintWriter;
public class XrefReport extends GhidraScript {
@Override
protected void run() throws Exception {
String[] args = getScriptArgs();
if (args.length < 2) {
println("usage: XrefReport <output-file> <address-or-rva> [<address-or-rva>...]");
return;
}
File output = new File(args[0]);
output.getParentFile().mkdirs();
long imageBase = currentProgram.getImageBase().getOffset();
try (PrintWriter writer = new PrintWriter(output, "UTF-8")) {
writer.printf("# %s xrefs%n%n", currentProgram.getName());
for (int i = 1; i < args.length; i++) {
long raw = Long.decode(args[i]);
long absolute = raw < imageBase ? imageBase + raw : raw;
Address target = toAddr(absolute);
Function targetFunction = getFunctionContaining(target);
writer.printf("## %s at %s%n%n", args[i], target);
writer.printf("Target function: `%s`%n%n", targetFunction == null ? "(none)" : targetFunction.getName());
writer.println("| From | Ref type | Caller function |");
writer.println("| --- | --- | --- |");
int count = 0;
ReferenceIterator references = currentProgram.getReferenceManager().getReferencesTo(target);
while (references.hasNext()) {
Reference reference = references.next();
Address from = reference.getFromAddress();
Function caller = getFunctionContaining(from);
writer.printf(
"| `%s` | `%s` | `%s` |%n",
from,
reference.getReferenceType(),
caller == null ? "" : caller.getName());
count++;
}
if (count == 0) {
writer.println("| (none) | | |");
}
writer.println();
}
}
}
}