engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

jitsi-meet+jicofo+llama.cpp: 5-MOAD scan; 2 new jicofo defects

Browse source 
jicofo (Java Jitsi signaling backend):
- jicofo-0001: MOAD-0001 CWE-407 reInviteParticipantsById List.contains O(P x R), 250.5x at P=1000 R=500 HIGH
- jicofo-0002: MOAD-0004 CWE-312 YouTube/RTMP stream key logged verbatim at INFO level HIGH
- MOADs 0002/0003/0005 CLEAN

jitsi-meet frontend (previously scanned, marking done):
- 4 MOAD-0001 defects (0001-0004); MOADs 0002/0003/0004/0005 CLEAN

llama.cpp (previously scanned, marking done):
- llamacpp-0001 MOAD-0001 CWE-407 grammar stacks std::find O(S^2); MOADs 0002/0003/0004/0005 CLEAN

Also includes langchain-0002 MOAD-0001 unique_documents O(D^2) from prior session.
This commit is contained in:
russell@unturf.com 2026-04-03 15:13:16 -04:00
parent 43e0ed15f1
commit 0f711c3996
9 changed files with 504 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
SCAN-TODO.md
View file

@ -27,7 +27,7 @@ Rule: clone, scan, delete clone after. Keep disk under 90%.
- [x] Rocket.Chat (deeper, TypeScript) — 0003 MOAD-0001 video-conf endDirectCall O(S*U); 0004 MOAD-0004 CWE-312 OAuth secrets logged; MOAD-0002/0003/0005 CLEAN
- [x] Zulip (deeper, Python) — 3 MOAD-0001 defects: user_groups.py lock_subgroups O(G*F), update_user_group O(D*F), actions/user_groups.py full_member_group_user_ids O(M*F); MOAD-0002/0003/0004/0005 CLEAN
- [ ] Jitsi Meet (Java/TypeScript)
- [x] Jitsi Meet (Java/TypeScript) — jitsi-meet frontend: 4 MOAD-0001 defects (0001-0004); jicofo backend: jicofo-0001 MOAD-0001 reInviteParticipantsById List.contains O(P x R) HIGH 250x; jicofo-0002 MOAD-0004 CWE-312 YouTube stream key logged verbatim; jicofo MOADs 0002/0003/0005 CLEAN
- [ ] Matrix Dendrite (Go, alt homeserver — already in defects/)
- [ ] Mattermost (deeper, Go)
@ -49,7 +49,7 @@ Rule: clone, scan, delete clone after. Keep disk under 90%.
- [ ] LangChain (Python, LLM orchestration)
- [ ] Hugging Face Transformers (Python)
- [ ] vLLM (Python/C++, LLM serving)
- [ ] llama.cpp (C++, already deleted clone, re-clone to scan)
- [x] llama.cpp (C++) — llamacpp-0001 MOAD-0001 CWE-407 grammar_advance_stack std::find O(S^2) MEDIUM-HIGH; MOADs 0002/0003/0004/0005 CLEAN
## Priority 6 — Scientific/Data