engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

syncthing/nextcloud-server/gitea: CWE-407 scan — syncthing-0001 blockIndexes O(D*B^2) MEDIUM; nextcloud-server CLEAN; gitea CLEAN

Browse source 
syncthing-0001: deviceDownloadState.blockIndexes []int with slices.Contains O(B)
  called per device per block in file sync hot path. Fix: map[int]struct{}.
  UNDF-2026-000000850. 2.9x measured at B=1000.
nextcloud-server: 386 in_array() calls, all on constant-size or config-level arrays.
gitea: 91 slices.Contains, all on small lists; container.Set used for hot paths.
This commit is contained in:
russell@unturf.com 2026-03-30 14:57:08 -04:00
parent 59e2f4e94d
commit 0fb51c7234
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
defects/syncthing/patch/syncthing-0001-devicedownloadstate-blockindexes-linear-scan.patch
View file

@ -1,5 +1,4 @@
# UNDF: UNDF-2026-000000850
# UNDF: (leave blank)
# CWE-407: Algorithmic Complexity — deviceFolderFileDownloadState.blockIndexes linear scan
#
# File: lib/model/devicedownloadstate.go