workflow · 4

Workflow

REA features that sit around any analysis: Evidence records, snapshots and bundles, and comparing two versions of the same program. Also here: what npx rea-agents setup writes for Claude Code, and patch diffing two builds with compare_functions while tying every claim to Evidence.

• Inspect Godot PCK Assets and Verify Extracted Bytes with REA

  Inspect and extract a Godot PCK with REA. Compare source paths, MD5 claims and observed SHA-256 hashes, then test a mismatch and an unknown checksum.

  3 min read · REA 6.8.0

• Patch Diffing: Compare Two Binaries Function by Function (zlib CVE-2018-25032)

  Patch diffing walkthrough: build zlib 1.2.11 and 1.2.12, compare deflateInit2_ and compress_block in Ghidra through REA, and read the real diff that shows the CVE fix.

  7 min read · REA 6.7.0

• Unsupported Class File Major Version 61 or 65: Fix It in Java, Gradle, D8

  Reproduce UnsupportedClassVersionError and Unsupported class file major version 61/65/69, map it to a Java release, find the class, fix it with --release.

  7 min read

• Why the file Command Gets the Type Wrong: "Zip archive data" for JAR, APK and DOCX

  Why file says "Zip archive data" for an APK, IPA, JAR or DOCX, "data" for a signed profile and "JAR" for half a JAR: 25 samples and the magic rules behind each miss.

  7 min read