Files
git.stella-ops.org/docs/features/unchecked/binaryindex/delta-signature-predicates.md

2.3 KiB

Delta-Signature Predicates (Function-Level Binary Diffs)

Module

BinaryIndex

Status

IMPLEMENTED

Description

Function-level delta signature predicates (v1 and v2) with signature generation, matching, and symbol change tracing. V2 adds symbol provenance and IR diffs, which is architecturally superior to the byte-level hunks proposed in the advisory.

Implementation Details

  • Modules: src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/
  • Key Classes:
    • DeltaSigPredicate (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Attestation/DeltaSigPredicate.cs) - V1 predicate for attestation
    • DeltaSigPredicateV2 (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Attestation/DeltaSigPredicateV2.cs) - V2 predicate with symbol provenance and IR diff support
    • DeltaSigPredicateConverter (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Attestation/DeltaSigPredicateConverter.cs) - converts between predicate versions
    • DeltaSigAttestorIntegration (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Attestation/DeltaSigAttestorIntegration.cs) - integrates delta-sig predicates with the Attestor module
    • GroundTruthProvenanceResolver (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Provenance/GroundTruthProvenanceResolver.cs) - enriches matches with symbol provenance data
    • CfgExtractor (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/CfgExtractor.cs) - extracts control flow graphs for delta-sig generation
  • Models: Models.cs in DeltaSig namespace - function match records, signature models
  • VEX Integration: DeltaSigVexBridge (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/VexIntegration/)

E2E Test Plan

  • Generate a V1 delta-sig predicate and verify it contains function-level diff data
  • Generate a V2 delta-sig predicate and verify it includes symbol provenance and IR diff metadata
  • Convert between V1 and V2 predicates via DeltaSigPredicateConverter and verify data fidelity
  • Verify DeltaSigAttestorIntegration produces valid attestation predicates for the Attestor module
  • Verify GroundTruthProvenanceResolver enriches function matches with provenance sources
  • Verify V2 predicates flow into VEX observations via DeltaSigVexBridge