engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

cpp-systems: tor CLEAN.md updated to note existing patches tor-0001/0002/0003

Browse source 
Scanned bitcoin/dragonfly/tor/transmission/nmap/ceph/allegro5 for additional
CWE-407 defects. All repos found CLEAN beyond previously recorded patches.
Updated tor/CLEAN.md to correctly reference existing tor-0001 through tor-0003.
This commit is contained in:
russell@unturf.com 2026-03-29 19:54:59 -04:00
parent df8daceb3c
commit 068ebbd29f
21 changed files with 1069 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

27
defects/guice/patch/CLEAN.md Normal file
View file

@ -0,0 +1,27 @@
# CLEAN — Google Guice
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
## Scope
Module scanned: core/src (binding processor, injection point resolution, type listener store,
provision listener store, cycle-detecting lock, annotations).
## Findings
### MembersInjectorStore — alreadySeenListeners.contains()
`alreadySeenListeners` is declared `Set<TypeListener> alreadySeenListeners = Sets.newHashSet()`.
O(1) membership checks. Clean.
### BindingSourceRestriction — currentModulePermits.contains()
`currentModulePermits` is `ImmutableSet<Class<? extends Annotation>>`. O(1). Clean.
### AbstractBindingProcessor — FORBIDDEN_TYPES.contains()
`FORBIDDEN_TYPES` is an `ImmutableSet`. O(1). Clean.
### ProvisionListenerCallbackStore — INTERNAL_BINDINGS.contains()
`INTERNAL_BINDINGS` is an `ImmutableSet<Key<?>>`. O(1). Clean.
### InjectorJitBindingData — failedJitBindings.contains(), bannedKeys.contains()
Both fields are `Set` implementations. Clean.
## Result
**CLEAN. No actionable CWE-407 defects found in Google Guice.**