570 B
570 B
| status |
|---|
| accepted |
Analyze a staged Sample snapshot
Passing the caller's path to Ghidra after hashing creates a race in which the bytes analyzed may differ from the recorded Sample identity. The CLI instead copies the input through a read-only handle into private staging while hashing, verifies that source metadata did not change during the copy, and gives only that snapshot to Ghidra. The extra temporary I/O and disk use buy reproducible identity, isolate Java from the caller's path, and allow the snapshot to be removed after either success or failure.