From 191f018d78e97bbbde6ff7e2066128d27d588533 Mon Sep 17 00:00:00 2001
From: "russell@unturf.com" <russell@unturf.com>
Date: Tue, 31 Mar 2026 11:44:37 -0400
Subject: [PATCH] undf: assign 949-951; tiled map editor 3 CWE-407 defects

tiled-0001: mapdocument.cpp sortObjects/sortLayers/moveLayersUp/Down/duplicate
  QList.contains() inside iteration over all map layers/objects = O(N*S)
  Fix: QSet O(1) lookup. MEDIUM severity. 24x speedup at N=2000,S=1000.

tiled-0002: mapobjectmodel.cpp classChanged
  QList.contains(tile) inside nested loop over all map objects = O(O*T)
  Fix: QSet O(1) lookup. MEDIUM severity. 14x speedup at O=2000,T=500.

tiled-0003: editpolygontool.cpp updateHandles
  QList.contains() inside QHash iteration = O(H*S)
  Fix: QSet O(1) lookup. MEDIUM severity. 13x speedup at H=1000,S=500.

3/3 PASS. MOAD-0002/0003/0004/0005 CLEAN.
---
 CLAUDE.md                                   |   2 +-
 defects/tiled-0001/patch/tiled-0001.patch   |  70 +++++++++++++++++
 defects/tiled-0001/test/tiled-0001-test     | Bin 0 -> 36048 bytes
 defects/tiled-0001/test/tiled-0001-test.cpp |  83 ++++++++++++++++++++
 defects/tiled-0002/patch/tiled-0002.patch   |  16 ++++
 defects/tiled-0002/test/tiled-0002-test     | Bin 0 -> 31624 bytes
 defects/tiled-0002/test/tiled-0002-test.cpp |  79 +++++++++++++++++++
 defects/tiled-0003/patch/tiled-0003.patch   |  30 +++++++
 defects/tiled-0003/test/tiled-0003-test     | Bin 0 -> 40768 bytes
 defects/tiled-0003/test/tiled-0003-test.cpp |  75 ++++++++++++++++++
 10 files changed, 354 insertions(+), 1 deletion(-)
 create mode 100644 defects/tiled-0001/patch/tiled-0001.patch
 create mode 100755 defects/tiled-0001/test/tiled-0001-test
 create mode 100644 defects/tiled-0001/test/tiled-0001-test.cpp
 create mode 100644 defects/tiled-0002/patch/tiled-0002.patch
 create mode 100755 defects/tiled-0002/test/tiled-0002-test
 create mode 100644 defects/tiled-0002/test/tiled-0002-test.cpp
 create mode 100644 defects/tiled-0003/patch/tiled-0003.patch
 create mode 100755 defects/tiled-0003/test/tiled-0003-test
 create mode 100644 defects/tiled-0003/test/tiled-0003-test.cpp

diff --git a/CLAUDE.md b/CLAUDE.md
index 28c151add..86d1a95a8 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -154,7 +154,7 @@ git push
 
 ### Current counts (update when generator runs)
 
-**947** assigned | **947** UNDF posts | last run: 2026-03-31
+**951** assigned | **951** UNDF posts | last run: 2026-03-31
 
 ### Patch stamp format
 
diff --git a/defects/tiled-0001/patch/tiled-0001.patch b/defects/tiled-0001/patch/tiled-0001.patch
new file mode 100644
index 000000000..7edcc1bf2
--- /dev/null
+++ b/defects/tiled-0001/patch/tiled-0001.patch
@@ -0,0 +1,70 @@
+# UNDF: UNDF-2026-000000949
+--- a/src/tiled/mapdocument.cpp
++++ b/src/tiled/mapdocument.cpp
+@@ -1225,6 +1225,9 @@ static QList<Layer *> sortLayers(const Map &map, const QList<Layer *> &layers)
+     if (layers.size() < 2)
+         return layers;
+
++    const QSet<Layer *> layerSet(layers.begin(), layers.end());
++
+     QList<Layer *> sorted;
+     sorted.reserve(layers.size());
+
+     LayerIterator iterator(&map);
+     while (Layer *layer = iterator.next()) {
+-        if (layers.contains(layer))
++        if (layerSet.contains(layer))
+             sorted.append(layer);
+     }
+
+@@ -1247,6 +1250,9 @@ static QList<MapObject *> sortObjects(const Map &map, const QList<MapObject *> &
+     if (objects.size() < 2)
+         return objects;
+
++    const QSet<MapObject *> objectSet(objects.begin(), objects.end());
++
+     QList<MapObject *> sorted;
+     sorted.reserve(objects.size());
+
+     LayerIterator iterator(&map);
+     while (Layer *layer = iterator.next()) {
+         if (layer->layerType() != Layer::ObjectGroupType)
+             continue;
+
+         for (MapObject *mapObject : static_cast<ObjectGroup*>(layer)->objects()) {
+-            if (objects.contains(mapObject))
++            if (objectSet.contains(mapObject))
+                 sorted.append(mapObject);
+         }
+     }
+@@ -686,7 +686,8 @@ void MapDocument::duplicateLayers(const QList<Layer *> &layers)
+     // Duplicate layers in the right order (groups before their children)
++    const QSet<Layer *> layerSet(layers.begin(), layers.end());
+     LayerIterator iterator(mMap.get());
+     iterator.toBack();
+     while (Layer *layer = iterator.previous())
+-        if (layers.contains(layer))
++        if (layerSet.contains(layer))
+             layersToDuplicate.append(layer);
+
+@@ -808,7 +809,8 @@ void MapDocument::moveLayersUp(const QList<Layer *> &layers)
+     // Move layers in the right order, and abort if one of the layers can't be
+     // moved (iterating backwards because when moving layers up we need to
+     // start moving the top-most layer first)
++    const QSet<Layer *> layerSet(layers.begin(), layers.end());
+     LayerIterator iterator(mMap.get());
+     iterator.toBack();
+     while (Layer *layer = iterator.previous()) {
+-        if (layers.contains(layer)) {
++        if (layerSet.contains(layer)) {
+             if (!MoveLayer::canMoveUp(*layer))
+                 return;
+
+@@ -837,6 +839,7 @@ void MapDocument::moveLayersDown(const QList<Layer *> &layers)
+     // Move layers in the right order, and abort if one of the layers can't be moved
++    const QSet<Layer *> layerSet(layers.begin(), layers.end());
+     for (Layer *layer : mMap->allLayers()) {
+-        if (layers.contains(layer)) {
++        if (layerSet.contains(layer)) {
+             if (!MoveLayer::canMoveDown(*layer))
+                 return;
diff --git a/defects/tiled-0001/test/tiled-0001-test b/defects/tiled-0001/test/tiled-0001-test
new file mode 100755
index 0000000000000000000000000000000000000000..83e5bef83b6101300f6f9096950ce29a34bd9d12
GIT binary patch
literal 36048
zcmeHwdwf*Ywf~tsU=+v+iZ!jTK?j>C#0&(?C}@Txum>g(3{-q|2$>1VB_tu4!O*G%
zCb6754ARzGf4AOS+uq*m@7}i3Ugcs`On3#X5Aap2RS`wc7(sjiqLSZt?Z?c?n4#9*
z-ygrvkE5A=_S$=|z4zK{t-bczo3mF{_-16-Y?+#TGPP?o8{QY4F94+yzM)gTASl&J
zv{CpSt2wk`h-Yz_NG}xuQpK|`V{mAfaH^2X<;j{;Ls`A1LTVE|6jHf#56clLD%5gC
zoXTa>tBj|HFPDgXDpcu-`l>{_mJ)6sCEzNwmLuBiX%y+H;Ud}ZdPRBJE+Q9|+b_$d
zh7L(j6)JiXP3W&g;!6#SkVcORQ_HD#q=x09n5IIigP!Vxp}^OvuS%BN^&NpHHGE5e
zH5ID*=Aj(X<*PoDoZ5A=zEt|Fc#))+3KgGS(b%wfO7RtqfeDQbP2u(l?IlwtOerpG
zYc8C~n?UVy;E#A}=9~o@hNXvKYB)1GL|oycv@tTB@|R7!x2-Dlz-x~m)Ak-MnSbRw
zujH+xJk)L~LwV>Sd~(QnoZc_OALSABSk2)Cqi1jMnPuW_=-(Gn@T?({#sEHg2>2pY
zI8^>$r@;fT<`@ExD^31q)4(rCQ?H%|z72H_)y@yn;NO)7enFb{|29qj6KU!lm!_Tn
zl?KnNY2Y)`;J-Z$d~q6hMH>9SNR$7PH2KFPzXN}%&wFX|m#3jaMjH6UH1Ne~@Xtg3
zi&Gmzaldzdr9TjC4K8VD3k6%}SC%z4HwEX{EN%>He*cnX%}xHcP)%#d?-yBz&UoV-
z_dHh9R$m<q23$o;8k-l_G}3#;3eA7x9M`0I6^%75ZNb3&hGoIl$sD0bnw^s7n%LA9
ztZkFoW$~hUp4QfymE|>|8dp&uSku_pTw4<gR#a8{+uL~smK-I?WS-tWr`qqD;t^#U
znw#dfgz#H|VlLP6kiVv_Er{N=SIw@iF7o651`W^^!PYk9@`q}cAftQv^qK(2K;3aC
zN{KQJyaj{1cx7wQ(n*)4c`kQrq5}(>Y8o4sG=WTLY1NAM^i2&kR;^fudYWqR>tE8|
z?r%X0o2h(grGG^ck^(hV)ViiyDIY};E@-;7p()_MF4z`c7Svk8p*EC8!)llMYwMT#
z>uMSr0cdG$XbRO41QAIOp0q5uY+3UP;sd<Zwycy{pz>=aQ!J}#XcEb7!H`U@ZLjgy
zHBi&O7t};S4MpaKrj#|e25D-TLh-gxp!V|16VWBLz)3L|CDsb~%(627q{1R?rq4UQ
z%s;VkQgQONF!`Q*n^-tGk;7H2%?tUb@E>F@Te#3O-RpN1P7*m5E(B^TxX=x8$iPgJ
zg<l(HtYO-4{FklS@n*wcwswYgrZxg$@;@7LoPqyF0yZ4wZTRm_$QsR04*XSJx^jeu
zGXDY?J%smenZ5||hkkeurl*nGze!l=n+<1Z!1sF@AJfnP%gL@iF5}^EQTlMLPsZ=&
z<+HTs5vRw7wl9%sWW!wgk2LdUYp+Szm;wT1YHud;XKJ^~G%El6gG-TqruMFcg$jNI
z6KI(BiHxt@`yl!Q`p5}f*$2u_Dy4}5&pv6FDYz!#_7;(@;3~eaS-@$orWUJbzXh)5
zZb~yPaA{idB1bInZz?1Rk6YlfDLge-wg+l+(7f)jz$K}8{yd3Cj5P=GABP35Y#U0*
zx4_A6QBRQtF6<MLQeuHq9qK8yz!mK%jalGejKouAfuEUxYT7~z90Qqn7FpmU6Hra7
zx4`9+fv2`u;JPJ$y9J(Wfp=KoR{LYE1%9?A{{{=3>_PS1Yk{AmfC%rmz`tREKVX5M
zYk_aH!1FBd%@+8#Ebtx+{5%VMmj$lYV3fSa0>99b|Mctsn-us+zwiW$yk}?8?3euz
zyRM#4#=ssH*={F`TGIw5ANVeQ$GwGL{i0Hh^4C*B{J_A#K-~r&CnXbqE*U4q65pDP
zlj4Z~AsHuy5&vZ}PKq)9qhy>EM|@2(P6{L5nv9d8h%ZjYNkPP~OU6kt#HT0Yq!8j0
zlW|f6@r#pjQnc~2l5tW9@r-0#r}&2_6a6Ix5I>NN)50nKTry6IAigyjCj}7yLo!Z+
zAOB@CP68kQQ8G?~9$%A;lYqxt6Y+s@mtr*P^oz<hJ{|+(=G-zkJ|iW5O-g)9O1v;7
zerZbl!j$+oQsOx&@nI?PlQ$1;-_ex#;gtB>De>1*;xDDdpGk@DOo?wviEm1Y|1Kr|
zZz=JANr~T+h*vG__JjRdY;yNh3Z`A@fpKL11cS8!X=HjK?In?>PouPzGVKhA3DPbG
z5arI}<!({s1kPb1?MhzGBhzMxw08wgvy^a-lWF$~oX?1~Kl8LRWLj91`-4b(nx`H5
zLbUS&k#>(r>*HyAW!fl+FWUJ%k@h%GdzjL?AJcfsu4{M?dXd4r4+-6*AW&le)g10d
z>&;GrlkEZcE&*Q!OlBkCkNk$$e$M^8x07!J90XZQ$xkEMXAGEK5MdU*&6#Un4dJ9W
zySbdhraH}f{?h5(1@r-SdDggmyoBw{c-{Oh%9{(R?nQv1Zl9?85Vh&Z=YT`$5xiKy
z|G5<KeSn)k2GzQMBgnZ*Bu1}A;-g6P8OO|zpk(50q$3LTi#mZMsUJPp*Xi%~Y}o^~
z<@t_hfoJ}L>POK-jjeufAA$gjiY78cwAt0eV&%>%y#PPH*h9_@l-KBEMwXNHl{*(9
zs+pPSq<#^)KGo?njxysup3Pi`N?2r@jjjG{FJ8m16RH+ozlm{k9pZ?}opxXBG3Q1?
z+}G*sKu8bO*kb-~^aRR8^nqR7=v<^n8qj+dMSEyM7#_`yoUq+7hU#|hc0K1hYKEaQ
zE$Le1xa|(zlD>ea-|Sq-hstN1M4$VqztjZtPf+kIvLl17{(^`U{zqzbX`SAjeL*Qw
zsO#lU2eq!$JP-5+5prp8(SKj`H_i^cqKD667^pY*BTA26a5txk&p13M<~&3o^Jz>C
zEIQx0h{eV~&)lzuR<Y=a%C19q)KSCQ>o&}a6@Qx<$NNX?7j;kx7U{7wH#;8s1~axY
z_s;NPP#2I_Llr35zlRlIx;$|_6i1(^eq){JQWo!$$ax-ea`gSbkcGoWg1)OC;|-?4
z(YwBjnUF<0#fXE_MMom}w(w;v`j`X_=$$u$d!xg<di1Um;$u4+xrKhrv7ZeLL>isB
zw$Pa@3R1`SW6->h{rHO;>NcM=Um}=;WMKCRjHU59GkV$PXOC6C`Rku;cd%n|*8AzT
ztoOulR`4V<<~#GvUdo4oC;_?8Cvwv$<SM#EL(X;<z0cV}2_%UuHs&?+)l2zMyuysv
zAf_}LJxHfVFSt)oW)>RD+eiGeh(#NnCBE4BZ9aFu-uVRN%NNaLU5E6p9i#+6Yp?s&
za6bc?dVocc=_b-ZAQR``!DJF3kZBV5M38AT-YjG~@hK<M`8K`lN{B19-C;fqpbuTj
zCrQEIZlX?X+IOI@zeJ=Dz4~Q4Ii-x}S-~GaWcp=){80aHZynR`*kL{jOrFg|u1C1Q
z^>h<UL!(>=T+~0!+)R}j9|Cq9iiE>lJ?1X~WyYUVpz8ny;-(!u+h(pdVw2xPIdi#8
zI#{P)F)oYi%Iw(+A&Z@J72bjE1q$@(dr-x-R0aBLH!FxeA-?8RytsO(hC@Iz;c@6}
z{YO14dbiS^W4QLzyAIHBtlmxv>!w>gH+ydJeAnaOwgI{a1MPz(Z=kO6xj_t?-uVF_
zG@8-db6FRL<Z)uCXhohcTIujX$w8oc-*qt8R<Hix3(VNVdd)A#SZwA18@m<Bkpruc
zV>pWy_psi#vwXH^SZsX<>R`4H6Z%Tul)<JA02m6E>znRbOHFX^(IZn)w=X)n(w((c
z@0>~F9@%PR?!Dn>*y^3sbgyxOt?s2a*K^D`;_ZERxc5=_`Zr7He_z2a)_Xh)?F66h
z39t7V&-Ab1_Lk((kR2V3e}nLXcRMRdMk}BN(Q6Ohk3^Pf;I}Dw<qXd=<?~pDgH-Bu
zELwG(#m;|@^}d<KY}=T7U#N=gYp?Mti+=wITis7h0~tfv<^xB8#(j$;e83y+s;4?*
zSs=;&EEa3Av)K2Kn@2wx7}%0e1&sI2Gmt$_)0C^H|5X+nH4lu~4R#^ss3HcBO}hnw
zITrcMsf0T=Y69h{5P8OnJZ{SK1rYNkg0U^W;dt`B-tvCf^1c}F)(Mf@r>;X@WAAsF
zaezhMI#M;i!qwy2jYjN6-hp%4sx|H7WD&qu1Hxk2-=n~NJai70CWZ74vYj!oU+SZ6
zN-xEx&Exqe&!V8<B*v2U9)@N+p2=)G+1`^O%v;&n5`leSKUfELvno%W>zFnU$y)gG
z1uQb{$?G^74~9mv=(M*HF^!KwrvTczGy4m~ZMUH8pz`rskto|Erh8_5CKgr0ebFTl
zh9151Y{*kI*B33sRI0Ckm@0{^%GE+=RCc|kcfLf@h7OL1(p0Li|AaT<b=U50(g2un
z`TP>Sn#<LFG-lB<4E@}5S+qKrMcz2hjGe6D85W&uXT2vgS-}V3b$xv+a?Xm4-|uz5
zpsy>UI!FqP>Rg|(4Eg|yH(BLGp1hsRCYt1LavkMjA1A+>WqhKmP;V9LWp)-hfO=1|
zf|q2SUiVXa7ww2ppSoPcsqPbcXFgthM)PsjSC&iNVUeYFdw&NX2M{EFHYcC7KQMK6
z?G9lIr2ef$JzmuF&T-yP>f=dE|L$_2BpQ2^Q;FufL$H!MLG2!Hznsmwp3^%EsAC*m
zE6`mBbZ?{Cy+otlPeH0D+11s#`uak!I@O}+725+GzJdcRb~|WtnDrjWG++Br<cU9o
zG^r1^+l77vSAehP7~|jZMz-60Ms05VpOA~&POIu!v>6rmoXaBnQTe;9U@O|TszeU(
z79xvT#2X))Dh5XH>>yf2mwvh29W@|uxPe6uVcm}LH<sGt7xNZrR)j>5r})%K1Fd%k
zz{o@5)7N{E)c+sg>-e|vM&U&=JQrbnI(~%QaAgo3PK;B`jg>;d=+}~}x`Za+@Z{v=
zOMZm-N)Qc&#rSSh2KTlr(7D*O@srW<B_CkMUPQf(P5w^-_e}(RF5pSl<MgHa$)FYz
z=3votE#`E&GY`{D*K?s8Sac@XXBNl}(SS0K&VpP(BNX&9_XoFKb#!``E#xGFBrmaG
z(7PIh1UP6sm41k3kUVzM_L&&(Xc;UYm_HsqH}kH-Ok{fHPHvTfvCMr(h|aLgShUSf
zQ|&G?X;F|*?68}5psTQ88+(1RtZ!g$2)X&>fqG&{@VR&DUGH#eR0w`4=wrPDnaq8=
zU0=5w2^gOW*IV&ltIW^g1ppSkn%GVsjp4>bbOD6pNaPC4LnL6rHtIpn!QBq8z#uu2
zLq?sC??ey8czfMP^fkYvQZY2f_|$8>KrHO-{hSjsS^>I}5bg51x34OqrgzqmI2U9&
z&6f8GOLLYpQki9oe;44o4Ut)Rjeu9ptw=RrMn&CMa`cmbKY??^HIp#%3y|17MZo`;
zfS*b5X#`&+;Hw4v;v&Gu5xhje8wC6;%0CKlD+lrUh;jbaJMTq)5>L=7hF4-|y(@w@
z&S23iXk?mUz&ME8=M6DqFRt6*HU9FY`TF=_jK7?(JDp;}7B&ov>;zk4!mdD;n=o1P
zNt-A>9{`&FCGREX7uV7LCzBlz{x&QsjiWTtU@#Ui<7p`jMS~<EACeHgw(Dqk8T4tm
zo^!;^EOZ#M``jI8@LA>}t{krR5l<7xT#j@Wz13a`?Z_48_2*(leR}0Hm9{rX+xv{&
ztY8m=Ez5<8tTbOi52UK!E9buiuGcy4TcM!JIKJ5RV4uA}=QXwxMv_c#!IMDj?LCnR
z#J+;P6<tR|_d-Bv4%aJtkIu}pF}-3J3<h6}#L4{u=TndVFFjn?e6V(w9s;ppSwfb@
zL_3|NnDoAzUZRsck&_Ut$6$%GuA_SAQtD%D&bchJ8j6*)!;{fDStOa<Dn0<Q+-|Te
zT6jCa3Ve;6D{wqTIARQw$b4rWi<YYLSQ|hB_OQ!Q1Y)4yh21I`!b@|p(9}E6LS%NV
zd>l=RKAoA+?z3WJ4iRqRtK2ApLt!x>Z&M9W8lpF`sZb8k+Z#a2s6Fy2y761e;6A2z
zU5{>5xQ_Zrh52}!O6^{B$7l5V3U*7G<Sp_+g4ZoXc3(7r1)=*`X!PvZ)cuvVkIiTM
zX<`Pn(tS|xI-loRn%iFw{gNQapA(b-Wwz0p9Nl_LUr!rtoXkyVouCi4&!|g!*PkHY
z-LFswq0ez*0DAs0sC9D{>Pzqms{KfB&V+)P?}R;43vCHDXvDgI^x3=`62FUBbU`k%
zRcf$UkfTD=M_0hgolouopB(Ycs7VO#@2F0`I3;%e1<{SKoL6yXEO+KxwEa$MZDf1V
zVAV(KoOoZdoqROFyWl}#?i|5L3$0HgkXe@NwQctqZ<ueQ3^U-dLEG$H>*;5ipyD0G
zR(HJ1Nfna>>ZF}asA<rdM%vn{BH1coQ+U3s<{=hsx3kN?pX)1l2U?i*#;;|zPoF?{
zHMaLtrn6^#kkHteCyB?qF2_ovuN1?HSw=DTht_f2DG1E%I4}_J85kHnBK}=pit^nr
z6YkjL{>vzs_6C%y`9$0@er36?-IZNEUfsJ3d}w<kz5q*(4H*CMzxQuV%=g5sYhH&4
zc#W65uuS8#fSdPQa=9-yQgC?&GD$8UM)}<z=v~Y4f{BfDIg7PJ@<{03AueYHpaP$H
zB$w~k*R>)$O}vo84??58v8krdcF>HQG%_3tH^UU<k$gu^3^JdH@0McPyjt=VSUmnK
z-po?Y*|0{5t8M6Cd>npAPjeyUt4)$BzT6V_0p<J^_&@#`+%t6>67)YI2gEuIeS8?=
z4<M(qkI?dPG4DgX5)&p-Va@#*38;FSbK@TX^<bU}O*U^u57lhB6doCj*IzEjc<BTu
zdmQ6fE#R3DNAuV_n0h}XvJB$B@Fw$BDk10Nv7*H92-6Of=sqYgy^Mt>YT%fDOPI!h
zE!5=u-Z-B46DqU;iE{DSU!-R3KZ*>EKw>r%R=>ddUjlwU6}%pB((QL~lYFp%=%5N2
zw$CFE_=wws(#b03b$G*!7lp_2;%?H!==`Ok$%_g3iMOpL0hElsp8GnC&pgH_UgH@|
znOL0@cS7P47W;=@15*X28BCQ>_g<O>_j(I@eC{3kUALl^ZsK25_2{=b0X{}x-i4~9
zzQZIGhNXb{kd!seJD5bV^q{H3*vs56-m!&O2>hrC=zW;eP@nr<eI5B=Als$1n2P<8
zA_aZj2oS#SH9q(DzIUzH_PKZO=a^m&cx~@_3!d`!zJ*z4<fUNT(8ZWHLl;0Xgz{)<
zbv84eRW_(O3N3`mT8YGQkOjLpI*hsZw0;u=AP3)vi0ErbzbgJ@#%xd~vjS7rd_wNz
zi$Pil7VL$EWEUPQxvsh#!iAn)(CrYk`MKbzMMRsngM9p4Jr+$@jxGTwwjbp}3FbPX
zazDN5v70z%z9fZKwCI-?S3Sy!W2439?GKV+{27Eq%`>+BUSn9i0$kH=6Rr5BXvIGi
zpcRMSvND6>r|ZcfWDF?hJytj+AYV9(uPP$POZ7YRveDG;Rm;!sqyL$EYugRp=*-;8
zXtTq+<pB2~y{WOsH=|lStJtF(<(v1h4ppdI_?nQ9PaE&^nZx`eT0{m0)|?oDDtmuB
ze6kwcOg;KqUaS6ikB6)ojVfb(+l~RV(Mz?nz8zGH_xZPc@U;-q&50`D-txs-K_d9Z
zqL>+Ady4vQN~zBa<6Q6jHSo`ljl@0!CTC{+iS@pb<uh(`=2aT+R~iRdtkX``v)6c!
zoWyo=?!D@D|E0TwfO^?`b;b`!Ic_1(9P9f5f$8xYhrI=_v4Vb|@qy3%3De7-_6m0#
zv%PF~pebJWVV^$z6Iw8>?jsl2tk`{%TF@)zh95J0PbF#ub#g0>FMOEjVTO%&dX4KH
zl?MDQy@!VDosaNQE<Xf|0Xn}j_Rk%_Lf$fL3gnTslkbgQT^U;{{0|;|Q-wAaJtni!
z8@)9bOR_$1)Xr_i-;&wzgmS2Z#CgnxwcIw=+YiU(Hl{!LIy3eOHztpHqpKViNNfgN
zncDz}yeVCo<KeeE2#4PnN}lvh<riqugW0BU`Uz2u57HEFviyWM{_2r%VqQi7vC~7q
z@D8?m2X|k-!n&2;k{Ko|IF5Nd3vGjS4m<tb;Xudq^7kz@h3`qqPvo;z`Van*?2%1f
z2Jpg*`Y<)3yyOVnQt~CTn#__YZ;ifb7v$|pebbq1V^m-*I^cy7Yh-|~-pCGHrTbOA
z>t7*)WN_w_Uto;SINxc$@dkm;cY6EK6A*j#HfnyQ`!9M|kmsi1B8!=}1HI7-@{fXC
zZ^HB2&vy%+qLEE?jz$TqyFdK4C?OrAk?kek*zLg3BE2)@y^cS-KcN@kBwG7>;H&7w
znxGHu@N}Fk(mT&1kiO|9Ph@AVH?kGZpph?9W1%yB#?8(=GDb)we8lz480j?6L;Wl|
z(n&Uo-D~uMj6^;kF{uw*FnOq{>o!2ddfI~x7F*fctT)I>ROx=9^)QP*-a$2hPGhMK
z;Pzp=4&rM*i1rc=AR<sS%jq*>lv$0{T0T_q8<P6Yvjxjx?U4@j!_!T#aSwzCgSwwZ
zAEu%{(G&D+%t1sEhpyqZE$6jSj4GmP(H%5VUo#UZ;`8z2*;0ifk92?=Jl*sfe-l;1
ziY`%F9D4*x5n_4rI4OxoH{i$fSO<QkpDxQ89|@bs)f2C#;>rykgBvRVcy}HRbZoNy
zLJFq6cnK7B`Rgz=szK}SkVx#mfG7UzSR{U%5?j%H^HciShoA1-h+|`uw~K5M!l5A>
zw->IrX!eC`eNLTQ=d($`jF7X`YkXEg8>jP~jA4(c6stF(O-j%u(j>lU9mE`FB5eQu
z7U>tl0@a(j)G@u|w#nLn-Zc`~e8xv=r1VXX3#mG;cebDh<t4}U$i-CSsiX?N+6-@G
zr_H<iB#}?={4sh}rf<qBo;nZ$$KUNFaK~*<U4tDBB@xCTc`<i;qi1jp_9#)oqQT1k
zx(53`x|Yysr_f-6pDkJ?G)R9<rJ6<G7}sB)(YXEJ(O-Ao12$4z^W1r;CpPWp#27iR
zVtVJ}L-PJZw4kCBx?afp0OWlFf%Hv(@<jTElJ_F;0SQPx$t39FbLN?s0VjhzVp|I^
zuhC<X_<RzZB9iz{8ZN98Jh2KAcT*_F7hB)Ai2EfZ?m%7cbP)bL^NGI*c?TMT@k)#?
z8e+vpYdIIiw_tT5^~n<?<f-zW^cX?%&4lFl@d}mqfjTBDUcoD-sOT7)g^pFaU)0xJ
z4UUSF0#Nm(YJk0<y$_4766&JQ-RNX`*AA?bpcNKcv_d!iiwFqhq;K)z`S2nPPxC8D
zc|K3TUx2)t*8^^z1v;Ar^m8+Q)O?vDzs5%}&S2JJP%j34ukpnb`Jjh64j8=A1$lk6
z004M9W(T{M&JiGr33i(oRJUWBbe|Vg$fFboPl<d6>+X7z%gssaZl50ES|@4GMS5)P
zQDs~aE*MGgn>uQxDTf*G$zcA1GJzrSir%?~DvgbKg>S}UCjmQm<+;d~<#hE_8auIw
zs5JU~df6x3fJ(KRq%j3;Qdw}!SFp|NevKI~!_2~7CZ9unwolD6)a`SB<khDmQ5jE_
zvCfNx@if&LzMJtW3Jw*VknkDrkf8+9pyy;Im<O<9>Jgimp_U__2zD^T^&p#rO!6W2
zD|PP0fZg|{Df#%zWXI8dB~$yADeli1$iZEow92~y5ikpEv;7u+k@h=_`Obs!yIWsN
z|MG|FkMAaxhS5>Pmqssp{!K4Uo-oZ|@a)sqH1e5c{43nvitMn*ZvvohgJ6$gsFHU6
z6YRnIO7r;m_mw&*)JKz}fp}plsFcDB`;oz7+YikPnba%63oNz(yin}qtZ*k4j*SE>
zOm%XrI@V~nC*{?(8;%kznm7*-N7Na2(ZpdfqQM8O;CWxchr|T#*SyA`EUdt6dpQr8
zlTiPc_`w^yoAZO${YCgEESd$=8N+Y>bRPx`Z+Y<$h$QB-1l@m1wSRTGYfu$9Y?Gw>
z`$YG|87VG<9Y85e17g8=FZZdC#-x6h=5`>oB>xTwTu0+iK<6oM!U%fl|HQll4F@N4
zRx(Hb2{pqr@CZUED}hhx3sBXw0P2C9<{xAGh_puZ4(|5uT1!J5U4a4LiG90w%;VU0
z@?zr0ESke-(TAZAybzu|FC88kyaw2;mItu7_tAL{e#GH<5&L@c=u+!C;F_e3Am-7D
z1o)qtM>l}UVgDb6OsOfxYN@OTWw@nsh=ea;spy-=Jh}EK3FH5A818IyVhz&!MV2=L
z?F!%hgC<sny$6T0Gx|MiE1-AGN+SrJa|>v_J<lTTiSc4l9A=t<v03r;=uC%4hFo!d
zBIYlvy)uZ-d<Q;huY~HXG~S(Vt#u^1);f_~YaO=K68<MHPsC4lw)cJJKB=$y0XRCo
z9{gOl!9ur!PZ&r?M3YVwPPh2BLGnX(Ob$kc+c6}Xo({5O4&ZID9g`*3E${+B({L*v
z)~nh00?pPi@{>!I&Ytk{1pPg+8Dy_~Kvrj^`=vql$|#?K1<$uQ1}u0|mLkG3c?P}W
z{?WcHCtrkc`$R59TA>@HUWZ+BMA{{M^<+E?v*Z)>LNnvfC!2^S=xgf91PPH|A*A3$
z&l6;X$Q8&1NKlJ{mqvq4W7F<B2WZX$8Z(Z@n!E7Ry_YyRHu)iuqwQSeIPzT5YP?Ut
z8wkD+aPu7$O8A4sdO>K8)$ehAY(Ra(bg&QFbZaL^$R5@=oI1h^j?k$LI*!rRvnm^B
zFv4S91Ljq5*sv&O17nz&kl}If48kQN`GmF*%AG}|omsSq>z`vtjSizNyE_~4N_IsF
z#Ro!JM<T;)l+_o_=WFK|kuGL&WPX1bj+=3N=p1zEBM<gb>|)9zCx-AARYt>beKUCe
zD)PL&hlk^khJ&}>z*-?O%VHC$b>!^Wcr1V5zQA-!=8gkMeMS+V-Z0a_iKut}C&~)P
z5lzO%F`WD%KTIA?b<}Q$FLs+9>&<{OpZAySpQn88r+vmBG20zHmHh+1lds@S?6p)D
zJdF)2OnOg~*Ju`6Q5oynfQl>K`(gW3>eIJN=h2+lx=gZvyzT*-@AyiZ8Uta3sf#u+
zqs`&kjl+2`iD>S46{=quL2c3qTB?ko1!4<$JPvJv2(}%}ZR(x>4H|<_;Mu~tH=Nr#
zL=B<Ee71RH57oSkpWC{Vm{=WU6WhSIA2+W-j)WaF4-r1<1{(N%F*P0H+8@qnh$FS{
z7TRSZ-z@BO!5jQ6ZDNH7|1_=eyv7c1?;(fRwZo@B_&(Gw`KV+JxMB4x2*V1`J9Y;E
zp2)#3JE^qkP-PR8gR0d!G2MWU4_e?A0YGa2@9Hl)K!Y#_fjg*ZE&Y`|RMxt}cME;(
zjeLRm>Avit=cfz7?R<Xv7#WiD6WgLDqvT9AeJ%APTIOJpGE7YcJEXG3!JdP|eP>{~
z|1Kv0{AIB*7-87xwmm4G-$CaCZXoRu?Vx@M(i<c9ko3YYj1AgrppfN3f=PH4dy(SU
z5!OYt#lRg)>L`KaBkSQmy>kV+!ujaS_VfeKV9*Dj|4Xr_k3O9|{|CpC-ONT2pF7~R
z>s|lxnbrQHMz>pbL8qZw9P=cVW}S``_8KPRT(;L_?iqG{jgHQ-*nDsvPQa9!_w#dT
z<>V#tIZLq#AK4EMvJfzHo&&y#DoyXAl5ksOkf(JNVTu08O3SU(XxZKqSck+HKw5+y
zij`Rj8YlHwB|3`D)pHI)T|Yt2B`7kf(Y|ECSJ}-wc=i=N<VeSvLy?ngd;I0$FCTv;
z_+$86h`)OLwX?nsA_qNn##%1UMzzCi1uh1q7+(l;H8Ec%$g#-$q1>&iCvq%GOO6(}
zacCE>V`>K6M49NQ`BRLRTJJzLLH9$7yAy_`3!4!Zd44x3y^!vAv28O*o@b_&=NG|W
zRv8OHo@0D6bMMk424`{ZUSwAn_lA~PWqFrHmLE~V#l6jYqy^L~wxzN7+68a(yViQb
z_a^OszOyFHAO{E;zZmR^b|po25LQf|`yrhs_NX{>#UY&|al8SOiS0>2!7yQY1O(;$
z;xqc=Tfjle{wI5B6&Q}&OFzeu3VW#^Z?Ko16@H&y^7B4T1J3=taK(_L4=$NpbLt;S
z;o^;ZMv~qh7)>GJ-{JPs5n(SqGss@j$+eSf#-Aj625-J0eK}JH$*0HS&v~Q>Es8gQ
zLz48f*iAmT45*C>!)YV02oUbOc}8F3N749F{0M_d_-!AlBCK>I42!DPPkHcPXak>z
zXpY&v8(oHgmoTH>eCp5Ce;gd&#$N_0kIo1%nJ184`QE-`Cj~L>68sw-^GAS-_1cd9
zUnv7^vdD0F1TrkAg3>IzK*0Yp3h)~MH^+eP=H>X2OFn+amaqCAlt|+X(FL=V#s`hw
zu4<!y%Lrw%4NW`!oTk8O3Y@0EX$qXCz-bB$O#%9@3O!eZ+gh(^XsT@t2ZC4NV`u&;
z#q!H%OPa!0EDue&VqS<ob92S=Wi_Gt!g_`6tCy>xPaOsDsiWqWwq*JIpksn#ae-s%
zG)Jhup>4u7b*;f*bxTcc&=aa?3gj2aioSY1_4r&<5`S}D9lqexc2mPGj<M4mK-^T;
z+=MR$HHF%)x@tjF7~gKHXbQEiRQ(x?uNVdXA&gH(1su2C=E%Rb9-okMOq=FNeyZuJ
zt7f(~-`eI0O~<#TnwlD#mN+iG)M05ihvyeKu9@a&D)_5d(94wayx*d<mfzCc_EoBH
z8j^ytC881OG07$jjf1yF4a48SCyn^-R&pFd4UNITgrcG%m!s_ZiV4L<S3267TSIdf
z|3k1g)OH2E`)XF=+fR;pJ}Ow-+!Vq$nA#i-O^(Lq<`y+R4#%8n;{uLQbEu}#(JV@j
zcT^LsE!YTL!N7P2A`STFR}Fm-s}29U8INGDz=UgBgLVGG#^##9b-~7(_8>Tn$V-+s
zf4(}OCHT3e8K0R7wu-)<V!R}khh}rfRK+XlhiMSMeF=@?Izoi+^Q1>}>UJcVHa&)~
z))0<K(N%rCEP#%tNZ}k3z=mL(2C)n^)cR{{+Co#8gQio8ugPD*#i&SYgXC(>D4al~
zHHDW=57#b*bUUuW05%2NLo=W}XgHIZf+XC7ij8e(6LJsTl928qt;$nft<CUweOg0P
zAlU9`4u>4gb&l4WrX@j*^W;@mHRI!CHKFF#n{Gj-kb^!F1|&(=o)E&<(F$u@S~Pqn
zE!-F?Y{RF*1cOy;4o4tZ2L^3e5xmMVuCX!T2!l5rj=BbL;Z+WLEKtt85?bi0Yp0y!
zkYDn#3>(@i!y)>l9V&sgT1<TpYGXyFhPLYZnpV!?$+X3!C-BL%nugZGx`x)a5UItc
zaARXjs8tKJ6sA#QDM?%>a1BKX)Jv*4)LhowvQkywgwN!)l?U-rwt5h$iH}i3sL(?F
zhEwo@;u{rqs235cs0vGM=Ve~~7SeF|LtFUBzyKW~GP?%`N)aAMxDa9cV*>+p_U3Mc
z>kw{4_yEGE5N=0kBHWKK>+yks&k;Hh=3#oAim({rLWETaLllSK>@kYN>A7|b^1}gn
zFOFYoD7SX!z`$E@+}2}F+KBun!nFwVpBfmTe?wv-EJpfq>`>f|ki7&vz?c7*fq~5k
z&DRG8?7)|Y^N<S>F2tei2N2Suz8Piv-gTO-J=b>L$l>-4sFUF5<8Q<Efq_dYWBKr0
z3Y_>W#$O4JqEbFBCwE3p-Yk8@t@aM>+Hbipo8-J0P+tCKg!hAXydVMb5Z(~}?ghMq
z%FBm#%h%ESqXPp(bIp^J>&dat&p}~Idw^hR(zc%>ZT~6KK0ieojd!~GicgVNb&9mc
zQ>4+J@y8hF<<zF{<mBF*W1mZXFGciUk+!gJU|<r)TAPuRyDr0%lXqvPC&v-Vnwe9Y
zvEa-c2Oyx>^c*`Ik?{`VvsHZd2>z{I6FBCBZyo{)ZOLF98MS9_%gOWZMER$3?A{Rx
zT;<z#KE<e(J2TgzZsG@eY~QQ$ac&v@v$6QJ(0PhyXuOF(euH{OVaqCO5||O~U7t~r
zlNZaJp5s`TRi2Z7XLfl`QDoT6oJE;aGSAE@nw^u6u1wF#o6bAn8<EitsAn*g!NcPN
z?u}^2&Dhu|leAc$fr1h@irks)A>5h&Z98*t`57Z_1Z0M#o>?OZAAJz_zO4fTe<plr
zK#cIMBii1X1$>e0nK?xn52GmPP^OwVcSPnGSpjGznmuC#=hG_SD*<ma!i}b6-<h>8
z6aP*pfM_Gqj_id_AlU<5?#f^}dFzQTv8?Gi`Rl0dcMkL9lthM?=d@)00mLcsa!MeJ
zg+7^8sJsN3(Lig8N7Cp8)KiZ`3!4#&dQdoBJsWJ9H&aDJqvJF`4&K=Zcip$MFs99j
z@V2MLIWwm!b0@VB!<^DW#%az#>&>qX4A5Rd7VUK;@l_BlDu@;+oS;Qj=IWt)JZnT1
zx=0@>df>poz;Dg~z7Ny%If-v(PLD0~`K%%P3~9mVkMQ>%aCSn+WfC9nP&gq~L(|ch
zvmqn%_e0~HPB<O-E5&#O{u`cAyl4FwKPVI#e&?`t*|DtknRgKf;<Srx<nEE#8%Jrc
zjeHQKLHxW+!7umOw%UGR*LGy#{ekT4lf$)Nl1fK1{arFId-d7cPFwbm&(?mHvCkGe
zTU$SZB9D*A-g1`q?`Mmw7dB@<KT3PsR(5QZb}Tcyf0TAO`&XHW96lra^-+W<>qg`}
z{hX%2X$qXCz-bDcrod?moTk8O3Y@0EX$qXCz-bDcrojJi6j1jxsCyZ(B<Bx(afKcg
zr@JAnak|^W8mGG~=ou-3#JyoSpv0f2xWh=(zA5ACz6kCM1<Wqt_*ZTGQTIkDpPWkn
z<m5mzW!Ol*A3SO~zYl(8dSsyOlj&kN3$6$mCtn3U<a4D5C*KD>GMlFHT9S83mCF8+
zf0rJ9VjUsQzw^f~JFeh)vLe;)BQhUcIQ&udUnt`$9}brBnn8CC!Z|%2&zBv+87>}&
zYl%NcWc+Q3_){5A^h4(Rp9<9dYN_~&;LD|_REAYDTqMI58Ft8UgADJN;YJzu$Z(Gg
z_sj5z4Atcvxj4{Dk3)t<GAxy0l?)fjutkO)GTb1;`(-Gwef3{;UrD+W8T0{4Jh-{$
zDo6f;#o?w<*x{N~h+AwXObPSo#5*Py7Zw#4x(Z}MI$Q)NIn2^NpzlKrdT7{fNLeQb
z+#yrXMmSXdZv&p8<!Ysr0gsZuGQ1P~<`noU32#q<za!yyr@${mLkZ8u6nLA2Ka~Qf
zeI&|nroeL{Zv@Yh0;k$}y@Web;J=XYD*Ss`dbqzE;R_NzRpw_r6?zKvBK(~aPCiR|
zz5)19bQ>%4Z%_(JWY;c{@SYSneU5_gE4?bSYd*kj*l8$g5fB<zdKPl{xrzI71XR=L
zOI(B}p{Hd+l;{6O;=V+cKVAF(gXbTkO}$0sOol`Cmwf9s($-QBs@%_TcwXYZMFsy8
z;F@-}rtT+H@OJ?}OGPZ<0N_K3-Z@ZgXQ97UQZbW%nx1cQxOlhzjtBe~8Ru#0o*tzp
zu1%AFKH#G>zNO_!`YT)|m`JGJMRFYZo*)tzA-_XqvV^y#!T%G2XN=a=e5Z>1EKUC3
zrh)gSfxnUlelFU7v8v1xP6Rwx!>pRp-)lKM$%m@QY)%IiONMnEf3CLwDgmRt4SIer
z;T!4WlXz$kg`Q(+@SF*?m<#?dNokJ`xPzA*{Bt4TL-7y&<C&r0a{<2?HT2*!Z1nJb
zG=%?_CjS#@;I9Lo3+<@nlq18>+iCKDkp_Mt_;;vw&IFv=>9|&4roA0{R!Mj+z8^;q
z-%CUIL>fG=r-9pGJrMpQ6FC}<@0H<oKHz6%z*td&B9gTmW&R?E04$gAl@h*D!ucL8
z(tb#IWFBj<S>?Y(Kxv<po-@(Eq4Hk<_)v6MAmK+OQ$HloXvN?w#}NG7j{FXp#~S<y
zaFX}b`TFO857nNHY2drlzz+b<>73HeY}jj~sfH@i8Yvdq7{JG(J?g$Okc&S>fDhH4
zO27$!>bNwf$*)z{wuW4V&2)p`;s$<i;ZWyoaOvUX<#TWXsH*waVC&qv`L{N&ENsE`
zj<{qG7d5))g{oQ`R^V<$*Ti{M%>jPx;@p-tZ`FzlS5Ylat$12mf=#%uaCWuJUtR3C
zltl@;0aBJPrpp?=xO%a8PIDlL@~+7|xjejV*~;(KG=_r}6%|v&xg^)bn!t*hrrMyt
zVOdKf;hyZTqM~#F%8ObmD$>`(^Zb>1Cf0;1mi>JwN@_xL`4P!Mh-QC{PP>Y5IbuNc
zyyCjq)e}!a#IMphS5ZwMP>s`8HA{jOEB?M-PQgh++=h9oK9-0RgUzjfZE%a5Fz|yK
zG?^a{<GkbwVx)0+bvmx1^v=2t*KUFxswer&TjtL9<LpywjbO;Xu?UVsHU>00ZzkR#
z6K$bzU0q?Vmb~KBA6n+GrAtofGR#1;U))ye4}gSi{+e*RR@;om1#v=>+AvfOy56$E
z&kr{G`N27@uC-=a&>tY?MiEQQkDRz<l+N_ZtbYHD>pYbe{)#!}bf@Y}-`wdQpMUO*
z8Pyf@{qsH3eHDO~-!R8h=`8~;TyX5KV6qG=zfN85S(?1h5*JtEN>a;}rKNQ5CGNH)
zLdY99OVt&cxD|77W<SpM5>mQhbTCrCAGg7(cAn~**e_p+%3GjuIsrHCBo+0`J2&OM
zqKP)qt(}8z9vz&53uG-9sD8!!U1baW*4s!2qxI7vYjKY$YG2&emUth0Lu#T_F{#L}
zBk>bS;^(${g>Z41|C*>u0{oyLzcF^QU)}U7S}2JNHVdFXgKzGoi(?1pN_YFMq#HVV
zW%4L@l{mUfqC2q&2Su-whrj6@DRfkAuwu{<xr*uJcc{Lqxvha;w%c9>rCtQSwp=8e
zAS>O%I@F!E7G~7^K^m--3vEl)^{{;A8v6R-M0ft$MZ<}V#q+9zA?j(_MDHA_e@H*M
zigDJuE#z1Fufn(31*J9LUp)mK`&x`Kr8P*W@GEE>(_NCBXjjTb$;lgrlR5tO8Q4{l
zxQ!TRz*(>nCwFO50&gwWxbEUj8=4i$CyM)-lS-Nz6>MD*toYKc%wN8@Ioa%?vAcjw
zolo{O1&E{mDwn}1L3=INH76=bj;iZ#8dYJn3~9fVyQur57l*zR+aG9a_Se@m1#pu#
zUA>%Oc%kl~1m&H{i3A}D$?KR0C)@~bBqkraF?=k%bD_fm4Naue16uj@g*e4uIFxKb
z;OLfR%Pr2yx`dh=dQe24!K@aA{55X07Q><ywyj)-W7!Bpts<;fZ~UJMv}lD*&7oi+
z{%K8NODml!53RI-7Ka-e0}~no5`^2GC(wP}JUhviRv1{>gepXcbK5*c&Xa>8ex$YH
z-#JhL`PR}H(h6zv)(Y`jxTIOW;C6DYFa!%)!@2OL2IOw$s;MwoFX#RG0I;bTs=>w9
z!S>o<O9)mu-Kx&93X?$KQ17U`W?2K!3xvx<iKb$5(qPdnTLx=GE*$>Ofc$DU{J~Ae
zpFHlzfqz_vDQ+#ES7zk_E%RuJr^=Veaw;scX2!c(?<g?24XowsWqB1kRYn=Ab(8{o
zQ_3qps0tk_qYP8aUk^Aw%h0Uaul5yGsOrb^o<FJWuK|=?{i^&v*?tw$`CEFZk3?rx
zUitqU0HZ94^0FeepP}|GkcB^l!}`!Vo%RG&d9@Fq!cv)8wO{2^;T=e)Jq8t5`wS{P
zBFj_ziFT^}60F4}T$NY*9x7DjRsE{G>i<t=`RNj&+DB1gsYFcWY40et{4W3_nkf7U
zzeX;Ac$D8*#6%y|JB9b*&syFg%c+q68vsiInVhKR-&4wO94#`dP~}%BR9uA{Q_A<q
z@+#~|8E{ojg^#3^SAKmJuA8iC7NIJqpiiWfSAI(ss{K2aKUIEq$nt9ZmA^xUyAlH<
zFr?Q1bV_;UKUU#es$v<Y*8fUM`HdvdcvQFn{vzw6_(#DG;)O`8+FvUD<0|Y_8D*F<
z9NIC!>H1?S<_Uki+TTpAPsLT3352?(yxR9vp~@$#Pw>Bj(}!Y+#HxO^Kc_;6>=?-}
zJ*u1<hyMhO`lQMy{Qb)BpVDDfUWN4UNCuT}p<3|BP|3LfChJ%63scG~KfVf8J5~PF
zIDIvU+M?R8{Ix1n?NsHdt=6Yd)?Z`=;$4-OZrDVsDsK%H?<6weWs&TEscgVSfYDyB
tYLB7|+=q#_<2CWz-!5Jsf}hX&sCpHQ)P?H1f>Ag>B4Ssj6iA6`{|D85l=c7s

literal 0
HcmV?d00001

diff --git a/defects/tiled-0001/test/tiled-0001-test.cpp b/defects/tiled-0001/test/tiled-0001-test.cpp
new file mode 100644
index 000000000..b7ecf2a58
--- /dev/null
+++ b/defects/tiled-0001/test/tiled-0001-test.cpp
@@ -0,0 +1,83 @@
+// tiled-0001-test.cpp
+// CWE-407 unit test: mapdocument.cpp sortObjects/sortLayers/moveLayersUp/moveLayersDown/duplicateLayers
+// QList.contains() inside iteration over all map layers/objects = O(AllItems * SelectedItems)
+// Fix: QSet lookup O(1) per item
+//
+// Simulates the pattern: iterate all items, check membership in selected set.
+
+#include <QList>
+#include <QSet>
+#include <QElapsedTimer>
+#include <cstdio>
+#include <cstdlib>
+#include <cassert>
+
+// Simulate the defective sortObjects pattern
+static QList<void*> sortObjects_defective(const QList<void*> &allObjects, const QList<void*> &selected) {
+    QList<void*> sorted;
+    sorted.reserve(selected.size());
+    for (void *obj : allObjects) {
+        if (selected.contains(obj))  // O(N) per call
+            sorted.append(obj);
+    }
+    return sorted;
+}
+
+// Fixed version: QSet for O(1) lookup
+static QList<void*> sortObjects_fixed(const QList<void*> &allObjects, const QList<void*> &selected) {
+    const QSet<void*> selectedSet(selected.begin(), selected.end());
+    QList<void*> sorted;
+    sorted.reserve(selected.size());
+    for (void *obj : allObjects) {
+        if (selectedSet.contains(obj))  // O(1) per call
+            sorted.append(obj);
+    }
+    return sorted;
+}
+
+int main() {
+    // N = total objects on map, S = selected objects
+    const int N = 2000;
+    const int S = 1000;
+
+    QList<void*> allObjects;
+    allObjects.reserve(N);
+    for (int i = 0; i < N; ++i)
+        allObjects.append(reinterpret_cast<void*>(static_cast<uintptr_t>(i + 1)));
+
+    // Select every other object
+    QList<void*> selected;
+    selected.reserve(S);
+    for (int i = 0; i < S; ++i)
+        selected.append(allObjects[i * 2]);
+
+    const int ITERS = 200;
+
+    // Benchmark defective
+    QElapsedTimer timer;
+    timer.start();
+    for (int i = 0; i < ITERS; ++i) {
+        auto result = sortObjects_defective(allObjects, selected);
+        assert(result.size() == S);
+    }
+    qint64 defective_us = timer.nsecsElapsed() / 1000;
+
+    // Benchmark fixed
+    timer.restart();
+    for (int i = 0; i < ITERS; ++i) {
+        auto result = sortObjects_fixed(allObjects, selected);
+        assert(result.size() == S);
+    }
+    qint64 fixed_us = timer.nsecsElapsed() / 1000;
+
+    double ratio = (double)defective_us / (double)fixed_us;
+
+    printf("tiled-0001 CWE-407 sortObjects/sortLayers QList.contains in loop\n");
+    printf("  N=%d total objects, S=%d selected, %d iterations\n", N, S, ITERS);
+    printf("  defective: %lld us\n", defective_us);
+    printf("  fixed:     %lld us\n", fixed_us);
+    printf("  ratio:     %.1fx\n", ratio);
+    printf("  %s\n", ratio >= 2.0 ? "PASS" : "FAIL");
+
+    return ratio >= 2.0 ? 0 : 1;
+}
diff --git a/defects/tiled-0002/patch/tiled-0002.patch b/defects/tiled-0002/patch/tiled-0002.patch
new file mode 100644
index 000000000..2602fcb48
--- /dev/null
+++ b/defects/tiled-0002/patch/tiled-0002.patch
@@ -0,0 +1,16 @@
+# UNDF: UNDF-2026-000000950
+--- a/src/tiled/mapobjectmodel.cpp
++++ b/src/tiled/mapobjectmodel.cpp
+@@ -493,6 +493,7 @@ void MapObjectModel::classChanged(const QList<Object *> &objects)
+     } else if (typeId == Object::TileType) {
++        const QSet<Object *> objectSet(objects.begin(), objects.end());
+         for (const Layer *layer : map()->objectGroups()) {
+             auto objectGroup = static_cast<const ObjectGroup*>(layer);
+             for (MapObject *mapObject : objectGroup->objects()) {
+                 if (mapObject->className().isEmpty())
+                     if (auto tile = mapObject->cell().tile())
+-                        if (objects.contains(tile))
++                        if (objectSet.contains(tile))
+                             affectedObjects.append(mapObject);
+             }
+         }
diff --git a/defects/tiled-0002/test/tiled-0002-test b/defects/tiled-0002/test/tiled-0002-test
new file mode 100755
index 0000000000000000000000000000000000000000..ef3088ebbfda79ae2aec6908edfbe3ef4f07768f
GIT binary patch
literal 31624
zcmeHw3wTu3wf~tUKv2vHikkWyZLmp|nBmoo5Y6NP`^W?$0iixRgk(Ze@*<gmU{L~-
zAg9A1wbuG?wO4Q3+kUN9duyo##e_FrAApZytr}5u#)zO*L<Hvk)_%;K3>oyc|NsB{
z?)P~#v(H|8?X}lld+oLMi?f%Pxu>MqY^j=jQnhO}8{RX=2tbj9vo`sHphzpw&cg3y
znq3=;cp8U^^db=;RXqDr28QVpP6blFELn15c#*_YA@M{Hg_JMZ!!ksQ3bjlTr+h=`
zRmKy;2@?dK3RQZnyb6)7C4}=v2)GKZ`A9aqZxQLc8wQ5+WWDQ@<RxDuF3Q&@^YzJm
zDzr;^s!++3WI}%hl3rq%k2HEzn3zxTkr<YWY?=zG40<XL_-g){@+xG$oi_?PiQ%&X
ztf^3ycLVZ~T)yff#i`Ad<t1x}d?_y#Dm}Zpp??0v@mDw0jA^KE^0$v^FPJ!H;`qF_
z=De|-1>(z&KhmkG(`RdFmL7ts=1l1jaYc{PM#*%-A6<KL(c$c}HxIsgAm#RG_nJ4~
z{q@;|Lwr*n!l8%g$tLG<dcPEZgd^m!g2M?$&mQmdjpA+a-<Of`>_L)70X}jN_&gLi
z82+!5&;eMp4?@S01pkF3@Qag_t0#ePL79W``B4)3JCndKPQw2qN$`&)DR*=dKL3=2
z&g)6wQ<BiXJqdh%5_nk>`VS?+|7H^WtAKCEU*hvY68zF6a!5%6ADaX|KMDOCfPZ-+
zGZgn2v&ua+-d68|`Zk}pbyj&vLvxdNR@M9lujcVAXl!oswE3!9eIAcM9USqd>CPKi
zRa;%9*IVPrU(nDzzp8=W%NA>%o2EO)-B8w0)zapznN{EDZJodgilk`?X^yc?ZQklO
zi7vC}-{5L(ty)@I<*Rb!*LbTM8k(!CeBQE(N>6(`FTjFP5Krdm?b9ngj)^Xjr@pyq
zMvD)>Wyt1mEb@7(+S<IRU3<l}>dJf%{;$^nUF>ab1D3~EwE&3DMa5M$oB~zH8OtT|
z)N>97R`ENnUP~n%7WN#@)>s8*H&r#%FKB|8z-h(e_T;SAG*m2ZL^(}W`1LGkZ}+r-
z!)D6wTk2VykEEKa3gWJ53E@!$;q0a*^-VRNncg;kqgQM3``VBjj8!l6RM#!^)K=9u
z0MOD}-{h+$2qID*JgL#!*x0<7^Z;+wElVW|On$XgipHw?CXw9c^~vPw_9{<pJ+XG1
zR}&dEWVyjNv81`xORixe#oK%})mL5_i!P`JO^P`vv0A{VmXvtL<>hNr-9~YVXKdcM
z@$uKZ_<Q_qY~F+zhGV>TgU>UO{{XpU?p#-~;c?`R6Bu*ng0vN!=R|i%fhS4BuMHk+
zs5T7$4bjr^X2ahQZMb%Zb|%93e>PwY$A2RL8;1Ng{I?2yjr@}xe-&3OJyS!TUjRlA
z(Y;5e&qMt2AKeT0G(!6i3G;oUez*pDf0Xf2_4Q|I;NU44_g_Hi!?YbTeh<%|roD(b
zJvQ*ZK&H_c=87MZ=N+QGAz`C(36QG29m7x6mdG^9|Kg(yk$#5uzJ&R5@5T^lsP?Ih
zFWvJf>I3;m2d>6zYMgXfj)(Wj@tA@?CgJHVR0`EdJSx7gS;Wa#6UXZ5v%r<_rnImH
z4gtlU!xs2AVo*&xYJrpQQctGj2WE4CU$<M}QdB%kmZT%vT2Vn;Ti|MJL#a6yIE`D>
zlW&2G@rg(&u)wJd^%Pm)N_LdSEO01B?5VK8&xk=aZLS55hKxP)EbtLAsHW9f;Bv~q
zQ(G)>-Gbk4foEFa9TvEC{IS{sKgWW<&H|_LpnC4Jz|U1cgb!Na=UL#twZPA}z#p@~
zvn=o@Ebt2~@E!~NLJNGS1+L~`l)T#lzr=$7_3Qsm3H(F9<QNNlkj{cbUiF~cb@ljC
zqPtmOYdVdnH7z<}|M&1a`W^i0mlkP+Uq=a%{n2Q&b{&tCk%{b$$H}lnHpk;+I3oWU
zkCVZO{Chl3hB0z?JWhrqvN9eggAr+s$H`Dc=Evh?AR;s4aWV{%;&_}4LS$?_PKF?I
zc|1;rHga}6P6i>85|8T?|M+CAzGMI*`{Qw%I7Rlx<75aTo8xgZ0FnQU$Eo8-{yiS2
z4j;KY9;c2TSs9O02amMI;?dDppfzgsOG`E09?{X$Zygw)k`TW(AwDr7o|h26A|ZZB
zLj1ghct%2eXhQrXRx_;p9!ZFQm=J$AA^t`}{FQ|G^9k|o3Gqz{@%0JuKP1HeBO(5a
zg!sL&c*Wdq57eK9CUj4xpztae21ntapt06f%-!%Co_6jlJZ%D{0i}SWd<+!i9*)j}
z+#iVC-{MJgMDA`U&plzcNV63Z<w-Jaib#80q<vCEX_v~h`vlGVMB2MNEmfxZMZRSs
z?Ny%k-U-fa_r)S@o=AI<r~Q{qI}4o{e3pu|T|DhknYKrimm|_P@U$OOTKAJ0&$akk
zUh!rigl|JaH<=JnJAx`fAny@;KEY{p0{9yOemf|IuP3-qaJGFC$G;2Y!eaqv!DZR@
zO*zOEK1W8|!^1BE5)xX%QFt_Zn;ZVKgv|^8UcOa?AL4JF+3BEN!>&vlO?3RznE7US
zF^GlxA+c_n$Ah7AQSckrp`;DR2Ne7>MEkpti}S(E{_tu*BDcYOgx|p1hKD)t=kC3R
zQ_2AeRQWGN=@62;9~LF_^W;J&!RG)TUQNYkiF!XT5+5OXTtkU>A~Ae6{rr?z{Qy7l
z{^goes~_rd-RPR_nl-y}BS>g$#Ro*Hh6P16nJMb+=wYGG?8Ahyqcgh)AwA42&7MmM
zkI6`do+~3kA5tLF3TEEV^M$)%omgOtjjj0NQxxI<J7rvljKqZFHKN;x7(GO{g_3v6
z$UKVNM-gCQjL#p!YNrATi^9W%fP!17U}Onoev4>{Qo`4ud~=`qI;-z_v3!0e>kW^t
z@A(9@a<{SSgKW~nyjps|2WhdOtOnfNuwZ83nC*@%UK__Q$6m*ga0XWxD~=X8YP%!T
zit|2(PekVl$yGZgLMCZpVu>mf{tXPc6v=M*F1_noC<9gXL8R8|%|osrB`|kTP3x$J
z1P?pDh(_JPd$_b%@O~~27JNASC=%VlHM|;bS#WvRUVZJO@FUYg<9BYL+Lk$9D|5W#
zcD|-}hM^7D2baCBm3QsBBin8E^q&vq=mZ&Jt0$dJYCo!X-Ulzt%+1WX-T%IU_A7V(
z&EMl%aa?d*3EF{(&Hq~#yd}Gi`ozj(sDt??Gke(+FML+{_OE}w)y_VPu-?zFW4*_Q
zvD{~vc~5o+$_Ot3DjIYR-ibAmRuA6Ys0^1H(nvw*VWF$GQD}rp$8h~%tn1+N;f8aY
z-ZdP4^J(6>Z~PntxqdKn3)@kY&a>_)%95d-hbvBC0;lP#N|BG5VVYWM#*VF!eU$Yc
zO<{qsjp<MIPzByDSWEwF?8O7jTnME(IE*>NdccjWZu7lx844ufm^ol9`=~o~TRQmC
zJAVq2EaW~2`nP0fx=j#%E6r_A&Mr3(xkIIAq?eo997n*U;oREYLFMZuf3G$FvKp_O
zqLg{Zodl+bL1)cZ8Pqg)A9KELnA@3N@*G>Sjby`Yz2O#O!udMWi~C7gR_vezBh;DK
zf*QG<hx|V&H&0OeWV(Zs(at}xho3u2eBaN-%ghoecWE{wVRn84gA%vdkeyE;{BU9C
zurBD!=MZNw6^gE}DuB9Db8!}+odrs#F)-9S{|-bJbY~X?ZGodv-^jxOn{6OAXcutQ
zKN3yqJo>83Fq{(2c-Lp(4js8bwPi2cv4uAein9MhZ@w{IA6bF1=#(rycT_eDHe{zW
z)0JguFKVbAE;|IFp}|_uVxe2m7`<<&p}zt5&2W&)Fmv3Yg=n=F*=m`<4$V3U0er@K
z_op#)R(25!HDsncdZ^)?{k*N*ddU~H=ADDJRk?Y*Jokh0+!Jo|t#apkXw?^t6<bM4
zZd)Y017(&wkC*Gk@5LKxM(E+u)KJWM!havzQJM`VNPMWN+ibDZOMx4vBa^yqYP-F^
zgvQqeTlBz6YWHAQ2hjEPFS6kHY!*t}t*_5q{Sy<g;?=i|2A%VmnP~*J+Kd&)IcDb#
z=xQbU`m}FNj{4p;f<GlFi7*qnp~-2GC(352b@t+pWuvvI-gOBI($_ygMD_JuRBsgD
zwG>QuzNW9f6S|~#{v6PbFY@)y{X{OXCDR=m|2ketmf=f|M5BheO=d20^mO+4Z|CDu
zSE$HVvbuDeW(0a{hI3!*hb;J12a)KC`i6vG{xlk0{Q#9{?vot2%||FbatwCbox7O@
zj=@M(!zPk(a-pIyP<q#e07P!YkA5j(YpzWlsP@Ku%K3dTUaGI}VZlFBn%n%yZ63Nl
zG>RJ-H&iSu974Hnh#?Cs=_}_TL!<^jwRy@uf*#Dq#tNc$0aDlsG#s@v2``g5OS6mg
zt|IPApvS?X)DQfJ19>)oGt|~j^QSp1SaFnvF51i0(zb=6sLq|}1k~Y!KRC=*^mBq-
z5YK)>ZB4z#IoIw-dRHBl8cOS7y?tqnG&uBwqv3No+Oq5dG1$36=CV`wRNUE7ZYG0c
z=xWD=NHlh^2)*eRw0fw;M!ln)JGe@Y*13^)M|XA(8#gVBnLFV+?aZ;0ZTRtt@76wX
zGW-hDAMIr@OT8ZgewYQ@>;lrudLtau+{Qx1QFhrjnA^aC<sdK&6$k6+kG6k67q4W6
zWc7Sa`uZTXHgoRO1LeHjU<a4#G88{)a<AT*L(srBj3Z7^iochw*g{ov9Aq1u+*%i`
zW#&GXdl<$%O)#<tjKFa3WP0fv@zVTvv%rbv`kkAgo%;F!sW;T(_f&pqL0IoRiuobE
z1ik?T7W{Ds67=;u_4T8ki5Io{$CPh1YQTF<u)@v)Md=VCIM^NIpto-r8xF_c8|Xvr
z!AoewE^-OX_6+z*nT!rJju&z_6+*TzhneFylhM470Ay7Ic%iXK)VJ(#AjjrkOio{<
z9`x0-U>Vn{%E7eiF3e;N^Y5o<)#8s)G3Tvz|9%4{4XROFK8i-=i1kqT6+~#r!Br^$
z{{XEaF9CIDde<{B6EyJX1Eb~Oc<pRVsL7d=M|KB)#YZR@KOHnSD$Q{_-`6|mp|h0-
zN4><I%;Z$UotB9)iQYL3DJ(cG%MF!sJNCqN&(I&;LL&^JUkS000ae>+74~EZ`@J-`
z?K2koO9!}PwxiN6=<CzjiqA>+^v+)NXehwbqyTQ`=X!uTojZ7K`J_=V=$#KD6{8{>
za~}5Zl1`R|9^<OlV>}&Kz0cjbA7QkU2CiNxH(xM%4-Eq~e-MT+vWz;d5+G`c7J)a~
z$@YYqbB7+dj>cNSS=7@i(bJ$m)YEpeZY3|MGfZ@>r}5Zk*84uk3Rc<;b1MtEqQ+%g
z-DaOF@Q&<iSD~vNfU><@tgkPHQxKhPk-q-VqO%>=1AYG>&bUFOfhu*j?Rw|^SYoj_
z5C7A0*a2U}HpQzPj_dk%W<C!?fZlc(z3qK#f&ROUz;X1qN71j~3S@tKMD@3>D%8HL
z^Ps+Z0@PCPd^{ayyW<30N;m9OnZEvnE3gf&Y)9txp%Ew0Mlh5wFw;$*@kn^%A>tnq
zW~OCJN7LD(ca?$)xkguLimiBc+7TnL9UkIjYySX0)5vqDWtXnz>@ZV$RnBB&Cv=i#
z9@N?B5u=pIhcuaLp75h_nkEJ+PxIcGFx=Ef!Zy>mC7i_zAuDTcuGJU!uuxIDV;6?0
zN6|ktePl64HN{!@%fVj({uut|;;#;W?QF+Nk`z6)<_~!fG)wH^R3eHITx1jm(_|I{
zn{96AX1(hn%>Q_gq5(Y(+oHbP4+pNa`Ik^vr2OSw@A$rNaI*z>G^pXY71A>XaYu!y
zyWvDt{BIdaT+t5?O2a|p<OdL0aY9TPs6_$~^HIM|?;0jOR$bWO@;uao`QR>h@bT;p
zut<G8RJa_QC#Os%J~s4kqa*Mc#m7wlHl`IXeyo45x0dO5Yzw<V%=HA#D)_9&(bG+Z
zV}{-aT2G@ZYrH(S`7vPk<V%>NCp-=rnfbQ_=*7ev)0?*OtWQvT0b@1tg;QkGfm;3Q
z(LZre!jR)vOM)zPZa?0E+X7sS(08MV-4F(!42Gw`F4Nn*@MQT`5gv;-M-LTt5ERFh
zfTDhP55t5{E<lXp3lMtOXXu-3#a5cH-+Zg<7T2w=@3}l%80=<O9w}^S33ufyF;!tf
z>B<kwUh-94Id|;J%)$~215=#Tz&vN|@4f*BW;ri9(ZJjU=vOl^7<O=X4g>Q_+`vSv
z1u6qm2+0g$U^;g}EZm_pYUJQgNW)Hb=yLE(b`lm9BNi4YfkPkY&E3QMtPbWBZ|>zK
zNN-L<Cvyb6x$vBkUYdQuR-qLb%sl4zUpl5rXowl$>vUtP|B8=teBamC|A{OIEV3T>
zoa^47sOB*<@0)KOPi>2jrz{p8qnW`Q;MI6Z{(Hq3XwUnM#*@z7`pTbUP!sug^5Wfb
zZ(*SY-z7&zoB7D-eT<AoVL*(zmu*kSWE&<QM~TFFV4Keus02(lVNN6YMAkCovp6AW
zY~QeCP1G?t1!M~`jEp?}fm#pypLks{zJ(u_o_903Ty_}%y94{B$Ccx9+hGhS(lU(|
zN5v3h0gN&rtEoN8X^dMB4&1@j)E;gOz;k9yx~SJzNJgBkI7U$aCN_kOwPUXltE*x5
z7`cZH^oMfjg<<Y8Fr)-IINa_1Yb`RdjDfkFcZ26s<ors<<e?DARV3#>^h-H&Km5r1
z<cEn1;fJeWYT$=I6@GX-`QcBI2rCUgJR%!|g7Ek-srHC$!`y)(HC2<GFjd|aD$T}J
zFYP_*?&Z!;Xr{NZgL3l;PXBulgvkMFEWVl##Uo4MAzV+vd}<qL4(HlLul+&J;hCI6
zTK^Ut(($D)8!7w<B@H%G*hRbyHd2V}fv%v{Ftd^7YjQTGi@fULYEZ*?LSOk)QmEhH
z$I9!|#A{@h$lu3;yyIax2-y!HMGI&1?4Rf>U&mZA@;-iCPgNjc15Gboo9H$20G~!e
z<!L=2@_QPC({jvlq;bElcYcId$HB<Ouq%$&BIKNtvHSSDl3m)yicsG=mE9K-xOkd#
zu>nx)=>D$D(Jql6(13PFQDz4?a6L)mpQq3STI5aWwWB9e4Q8zs5~NB|EE4a-kQ2c(
zkdC|lz&d1uYNSVgg{&-e)(bhB){XUSa-PrQ9pix45QOhOfQ9Tw@B^IR6OK#Z{7&Hf
zg>agX%y%r!EfF0Wsou}ByjR8Ew?%4W?^`0n@E-ZS1+X7Y6#1D2@CN{hA|^8Cp6@Yp
zKMTBbxMCKTH87eB6+Q&i=($^pv8WkeF93WGAQ&4wLxJ<C?_6x9-a+pedkv5F$@$0@
z84?|iKjCK-<ep?E=CdDO2Pc@yY}?tMlfF?PFk2ExkM`Aa`>660e;tK>By0XFXR|=z
z1@y|y1HKU~SU3@p@T+e_khH3?eMmXtwp)=`v*wR1L84ke;d=zk{6cI34|4|>U~vGm
z(sR(<K`bohVUb*4`)4X7usl=q4aewG?|cQRRKYXF8sA##Ggx16?CK^h!LWTRjZ}h@
zU<35d4Cp2cmS81g#`%225_sz<O?GmhXTcfitoLLp!_3OLM_>C6+V}d<Regr@C4Egk
zl|cs6ti(!dBgmy%iyX_7w_*&AVjX*Lb{ye@rO5Rt+0s72<tVoT<+5}Z*pG5gvRsTa
zc$tRtS-tBR7^XUPIY{N5$FLHC7q{7bl<g?Vr0TH1!u0h14&DwBNaP$YJ{o>g9nZwb
z%=c|kzojV0KsoOn<@KaGp0w2OE<199*&|#^v>x+-&JAg24>twp(CSTRE>(<+s}<yC
zg50}cyO(6t`#D7Q44YJ$sjq$T9g=D#jJ1$gXg77_-2E(cJ7n@9d~IqtZ@<8aJdQNs
zXVDYIs1h1cs%g{BtGMBIo7I_-p8<>SiY%{V!DbZPb3P07q44(^7Ua72E-#P`yotmT
z?!%f^XOC~PXc*y8Sa9K~`R=HKfc^C>a1iSX7_piQ(<7I2jx;Ml637}}d1`1V85DU?
zdivUpNb3I`^g8l?@J8W}WN0FcJdPjHZ@7gB4&(I5it&XOy)%SYT5Qp~0(hfsG8ViV
zEBrpJ;)(T^8%|ws@y)MYH`r=R`dg$p16NzdV`ly?7Nxg~^}E@9(df<0Jj7RApr?@<
z0BF6J+QQmD9Y^|~iEFPoU%@#4zVUo@C{J|M>&Ux)GdQfP$3LMv9d+15KXh&*G92un
z@<KnibbAOMnh>;8P`KlpXt>Yb#Ma_G0dEuVhY^I|1Uz0i*AJ2(b`s4aw3%p_FU@A=
zbCtqe<Xd(VOS5yZl^DFP>xjP*{lQ<yJO0!(2pqECd&h9v30QlnFbeKq32Y1u!<9&9
z!6n!<=@kk;=X|$wyIU`RzTEZ}^;WmJi^k`e%#nG74w}2&xjihmx8IQVD@N;0PJ0Oy
ztc24G%{iZ$dqB=GHxoq$qhsVg1Hwk{u~ZOt=k6)%I^w&JIX@yBte5v5nVN<TqOzSZ
z`0fy`n>#<^qIK!N=;7kUa&q{KH_+G^A!58L3}rECEcIKyTOS<f3Y@g*olm9^^oZWM
zkm?wkem+aBM8|;P%Y7y|J&mS;d@i`ZR&Us9vNYNtKoelzk_*Cu#<N5t#9#zwWn(7?
zLvN8ElVb>DH@gy9u+OC5CD!2<Vr>muRA+;qX`#~5WYpX`3!`^pRC17LlljcV&QI4t
zzi5zmsf1t~ghsUqO+JtJlXVbfFg@@&s__URI6u?7=Aar_j^S(PZq8Ftx&e0FX0JOJ
zt8iqPc5;r~n2xNO3v_p|21_E&&wL}Ng(mlv+dc_<UMIr}Xu0!%-gObjS(w>hhyEKA
z$lqd;fMm9CX^?eZO9wl-n47?zkPq$l5yM@7g)QlRjVc(LaONcx6lPrpeb!N4OixfO
zc9>GJvNMZz?y9jy2Q_HOw(BF$;l)t*zmx@MX9BGpy9bTHD8uqi89du8pykpc6xpRG
zP?9hnf1omH4~MJs<0LoqNWJTBu8imuv2z7_*LLDIur)v4Th;77GAGU_Zw=@!bWpgf
z!)R%qg?E9}l1#&fHNdyRZOFq+Z0dlwbW{q9V`qmU#XCr??s%VzDkKHeNhfFZk*Sa~
zwX~J1e94vKMU4|!usxk!`GZV%F1EBj$9n8_%=Y=ysIJELe9m<Cf*U<Fgavcxc-NID
zusvIZ=7i@}iv6**9k&Ysb3csD7hW?y?@lHCU0a0w-LDeu(1dApDkD@_cq!U%#%q@L
zE6H^1!s@f38#|$gwznd)G3Q!`2J!!<AIolPe;dlW@?&%X!+gbnmygi#5ngYp<?hf3
zq2(z+l3G5L@SPv&U5oHS+i?(577Mkb=TWD7kF=cSLJC$b@6*?`0-bi)&<j8EjWj}&
z!*1Jw@Y26g%W&vHy=x+Hq~4L9kozOOTbQYjoFw%MeJ}D$&SnwUY>XyIiEOA}WHf%r
zPw-B-8Y1GoDzcG-OHn*w{u25h`2w3_wd-Q?KPDT*+6+5*GemyNx6eAMxv1Ly@w^U^
zatuyL3M>CaaPuXj_jqdLBaj}bGrkGoVW?sEL|~!4#?f(zP+{-IXs>^J6>u6)0e+!?
zdkB6f;Ng`dmI2!5UmtEHO5YJVBH!SYeoQ%L6D68Sfs#{D`USxY3GNi|4FdlrB!@>6
zyg<Mo67U6te-_|;2w-mM&+ncm5IO_`<qv<b4;iJ4tP}8GK?B1t0Z!(A8DG*F*k_KD
zOfXidki=bc;6MyBs!rU%Lt_*Ch(C=5r$T*>7U`?9hM+3l%NJd=gZ^jE&28T`f>Sfg
zgUxnh(|&ar;i)Ik1bCLSjgQGU<H-({sXKOPfp_~uyyu614o1mAV9W;#UXkA4&O)Uc
zW|BSnYF;W%Jh;dkX;c{Y+c7JPn!Qvy+p&#GF<yMfjkyjHjh~C?eSerc)QVxvZaol0
z&&JqAly_x9c}CzQJo&Fde_Ch+PCmf6GV`zESj4jIENrirn+I5^Go40XhWP=l@nG8>
zd!dH&@9K!e2T8Ww4f8`I_YIcYPkXt}Pw9Mwv0^*TD4Ffma0OT~oFBUN;!oq-?$?Lz
zA1Aimmu08>?=44(kWMB}O3-FI+~`$U!<b_)H!;t_VFJB#19jq1DIE?#pDhnP&_U#}
z`8qw6okiX%#|Ta;4=ohqf0w?#Orvc*a{ESb3AV%2b{IjNGk~vugv|caYEK6u&Z6y9
zoLK4Y$41T;Z1TKG`-gn<hsTWIa=Qf*nu6sf?0@YGyq&PYb3)lS?DJf#_IcX$^*<q#
zz#C~IcR76NlT8}2S?~Nd0mQj1s*xY-fBa+#j$~QZ?6A0YR4%|`bcJyiR_dI)vEX#b
zQj-7PxP1+Lft{Wol0S*<^zhB5(t^Vnv7;b*39KNu5?hERN1?AjV|9pcsiFb~9Y0Bd
zTn+4OlsjM7yMBc}MWziWQlh?5Zu6q-@E>0$&_&tC4%7s~7Tdw)&cEwjUXD%8MI#<M
zU}pr&XwRK*J-coFIMShaK1(f|xZ!>?QFZqFaYBM}$o0Iy)&e7RJK`;Jc0_CLk$-zB
z=6|r-wfc{sSJsJk-T`)89VfAabs>TD^{==B+p&YSnO4qTCT6j6=Ee!3EOI8)CFt}4
zdgzGka6f3$LK^v)bi?eGTUu^XQd%j@qII=pAR*>2YIW@`vAXusfO8a=Q5m4^&Q5ou
z`-Yc;Hqihf0tM5u-Dao*v{YNI=1mp(F2twi|9sU=EWmZ=12y7;Nx&*oU+feGuL)`<
zR<@`*qBIvTjbc;~6^rVWW9GhcDo8|T;YTcVi8ZfozS{IQ*-l7XjW@8fp$s90mrs$A
z*hu}`^<)Qr<vckpJ2C=33u{W1lwBRI2w@so1GqXR`P-2Ye5mlw^I^Y7y$F|+i?&ur
zM}s197S6SWKiiAMVz3{6fqwpgpYCO(v7rey0`1dtfwmiHa{eP$NyI$t3}(J8&JJGQ
zO(SpQx|jB1LWQ|h^3RYfK8d1JV{7*lmidLt{M0a?hhvy2#@rZT#b($a8z!a(m{wqF
zgyFqGvz|RhZjT#hx9(bk{M|HOK~YzVq8>*Oz8XczcEqFuCoeIV;u8j%C!jN9seq;m
z<{svJ`HoF|NC)~T3FO_F!=OCu)34bFNu!Gv(c(wwzbKNsqZ<LjLxy?W=>6b2!*<-*
za~#u&{f6xWBllUO_Z`eCMqB|m<GUR5B;Um_fW9nR3OR>Xjpd=6@FRQBUeF38j>gz0
z-3Shad1?Iy1ORU}>SHopE1y77%Dypk8fGJ@WtgJOBH}pugvA?LxXImv8F{+cqLb?&
zS7I=QnqAy&7qZcD#tqG2C)u2Xk}>Xc^e9ae>m5WB|GYsiY~*4?0b@GnbIYH+nNybg
zZCm2@&iV54ja)c3S{%ClQS|7@7xDh%w)Gk2&`24Sz1t?ZFog;^NQFYXt;zs?xIWFX
zj1=asc4zB+v_6dtw&}|*GR!Z^aOwpejnRpbBFyH5cPc;^A<yIv*4oLB(p;dwMXc*!
z7@BFME~K+v6X<N$2vBpIID@11<DVi|QCfgQRW0C?UILd>iKnyDSbIyMjdf$i$qs6y
z&L5+f&>6Gw;*8ln*#z!bmaS_TSHtP}AqN9(YXpaLkGPR~mBl0CMB<lu#2=t)F&}vv
zk0|V;#Y_1H_`}I@4<!8I7t}icZ~Wn^d!Z1@3SE8{$_W+PND0?IkLKs?L;mAO;GnD%
zV+Y|sqVOMM2&Aw7s|%+e2Js*H&;v5KIb`D@7dMWu{SGu~n*)bu0K=A%#e?LK8O|pU
zLZf?{H@HG&v^f(Nj`ro&Lzd$a-z4_|(xtQmL8Pw(X`%o!1mlGaI5APWnrl&H6J{&Y
zKk=QAME?=DfAAz&f%r42iQC-43skESR54lbk>{vjii(PX1yrou`Le!p68RExD5^Yi
zBUX>H2eNlV`wOUwZf66XSlWi^5xmS?)%W3L)JgsT&Mu*OMrERT4m}(94+{l+Jk~VB
ze+4{zAA}Kplz#T(hfgBt-$`MGZ3{T~`uSP{UrXR?34ASquO;xc1iqHQ*An<z0{<H&
zK;KoN=W2gj>(%v5)eZg{@74I&nP=j7`Q@_(P5!GF`6ga{gO5IQbM>OeDqme*ovQ0s
z&)0zOF#R+6>hSrcc)sS^T6~eG?dJMh?UxnWD_g3XN}8MS<)0>B+cnqBZt~+>Ol3{J
z)}@NS%kWjAn(zDZ38)(TvSs$1C3W~Dl)bRf9{=>xHP=jSZC=vm@)hG-QB6(tO$+Q-
zTw$+m^?E_R+AHBXx%O)d?M=B~N~Nr+CLuo{Dz}!?(%kk{if^({F0}jV>f6R#dnzY_
ziR6?d3xm_(+~g|x`05+HHDmJg^T*mt=9G;YpZ^_ubpyVYR8m*fv;Z=@!A;Fp-Q48E
z7m?cR^-cCBd;tmx4b9ChAY!+dyDB_0imxv#nN?Xhy5=f-33E-KT2|_rWw^@(WOR+a
z9-rW<qVH3+(YG1!e09C4qEBSi;1gNREp2f<5TdCWb8V}))|1!JTvapE+fdc+B}t=o
z^F=BDR5>lp_-vH7Rg{(EwU4pS&mFWixFlsk>f>BB_Q{D_Ih_=;-rL48Pt*Rg)lO-2
zUJS@e-Amr=1N8S4GCUR1Awu|mPjWJ+=Of+;l2iC<jBrXC`mV3O+EZQC=9|0-f}c44
z+MLC_ujOm?O*P(jd$ZqXZ?3hsl0s@+AFsKl%BQuV?`zGdPE7P#lfSXpU%e3a!G0}N
zpvl|rn}Tjk3K2*0l6e@A?XvndVL5VgwR&HkB^I+5`C5gmvQnGkGTe%VW_+ov%Gca_
z^R3|1XQwZQA%DC-jq#zQ<W;w{XsyJ6rJJDB)Oc&X)xP@0-fQfm8yafte)J2wy|x|-
ze2twR3zT;p3C(lVwiD)P;L9$cwN%x&=GE4>w)w~;Hu)PGT70cqO-tUXhJ%~1ge0L}
z)EJUteOtNTN8ibVvcP1{C+@x4WumzHw#vGyR^H9xY4fRjc!_QszKurszUGqVmZe%f
z<eXrmW4%EVY{J*{+Dg6nc3U09*Tfr6b>4W`AzxLf#a={0k?q3NNzdXv3x9JrM5DAY
zAMTDua}XXyScI_s$!K&g!g~<<5UxkK4&h#ew1@N|Li#S`8Bax{?;yMaA-Tt5gcl+F
z9>M~Iw;`N`@Lq(sU~lvdO2-Co`qRiyd!?^n(FlAL{52XKfp``+xm$q058)FC=e`z=
zeuA(ar}JiE33e_HmOhE_w>b3N4t#pBO~D`AZ8J4nd#3He5yR4nSAt`ITAPcljVlPF
zbQo5$G%Xu{<MCI4Eo8#eGBT%RWL>YHxg@<qyY2$#x5s5)4k*um3&JNLBc73fc!;hK
ze~$s)LHXrF@?3+ztc_9nng%vzGBRBm>9aDBnbLkM(>QUFcC$*`inL3T<m)?4+VRt*
zWr4S3G{>JNt>QFk4W~(4og}RkJpKx452B49$Gf&5BXdoPD<f-Fsw=}DNK2_cV@pPs
zu{|TR_}Pqf<4mMLI>j03rCYW?%Lrpt>Kf<($?yZv$--XtBBFC+M&>OU=`%=%)XwzS
zZmV!}Eg1Ims`E7MLZu7Tj@0hAAg>+&3M%b75S)^cxi+ONBP*0zoMB&+R+^EsYDj5D
zeqiX-jCrXOQ_slApO%pW7K<~oiaA5>GgI0Dbq$0vEQi*B_G*y4=*?)f5Bg2C?@D1A
zS!;=QD6KdnXUz~-M*gayu8e}fu+of{)c-^Q1qP=E6iXSY6*i;*8Rb}0Tqws4(uYyb
zJvh-?f>6`}nPnZ2WfheZ7@GPQP#M7elrwJvWQwJ%>(3;5Md(l2*aQ3<(L+T;DWJE8
z+GbT6=mmyM&B#yrGqR#BN|Y#OoS8aG7J&8=;+b+LZzDPrHx_+^ft&_bhOA0klZx|I
zRMx{t%fT7vClCr5p{!&wT4zhWg@iP?DEQ~4k3t^`$Yx<XG3^J6Cc5+BG~F4yQ&Jz(
zlhd?=gd1|`hHc0O?X+qDkSQ>1)zCFVLTPJL?;<H_(Wq_2t`S4FoTa@nVl(g%FIY6>
z?mX=y+kLiQ=4mev8S>#6ZTrw6tMat_hY#65M(a4^<CJ4#w9OY#<R2Fdc|1>h^WujH
z7kSf~NoW2)Kk7S;>bs1n27l-T96c&d--fit>D!jp_&qW{LV#o64aepVe{#x1h$BP%
zQQwQ?HWH9@3CH0i{;2Opsy?mKKRp?3CWOaGckn2Y?ZZEHqelkXKAA3u&sv6zqx<lO
z><B&BbR6(VG)?2B#J?q7B<n|ZpB|VG{y^pUlP)W+;90UD#rI)}H(Z9Qe4M`IkHY&R
zD(VNha}YLbI43!>BG}mB@idw5u#CSe34bo*v3f|n|676ju6iQ9eCZsEWLP1?c`|H~
zVTTOY$?!oLJ|@E+8Sa*0p9~MnP<@;;6Pw2L*kzb6!y*}0$Z(zvTV&WF!*w!zP=<oq
zSN~PtD@~RoB~54|zFd2aJ!kfOf0NH|cZ|!!S8T^j^z-Q0JI0RB%O9WT$dw7nXc3(H
zVVd?)G!ciI-G-Dkvcc^V0lTS#;(rV96fILLA_P3D|CQjK;I~Nl<vbN*I0?Ta0e`!M
z|11GM9E=j3^$GBq623P9{!0n}Fadr@!q1Q$PVqSr{gCKikpS<I@ZtpcUJ2LoM1{D2
z!|M>pi|Bk$;xmz~6-xMjNI2PldZq$CnEYo-{Gu@ePyNz3mFTx5z!ylkvbPHVcED{I
z!Q{6Hh%8n!IsAN0*+Yd-_K)Z*`>o(KF1BgsY0ADTcryN9<M^YrbQ&BbJcHFY!tr6n
zrF~Rcq8y&3CEAB{Zm7=D)V&1?|3bj&vyX{SKH!6O$tfH^Q`;>KHu-vbrX`_sE8q{M
zT&UTlJeB!qNrK-6_{fwCv@D4)sB2n19L(8}bEa&^D`ditfNxhwmhh1z^tTf{Wu&J3
zpvv-W68txkz&}m`AHn%lRO2B7T=nHRRMV;f&(z>;6YAT-;c-1wd6p%i|I;M!-$^<J
z3G^QY+^&dP!c9r&>`nqd1o-8sf&Dr`gpY&qIt6BTFun35fiDL<6IM|5JH^tfB=`>`
zfp1Cze-Citv&bnZ^LYVYzlDLqV0=zZ0<Q<0=(M;59X@u(>yw0^g29JUaFMKSmiP}k
z1YnVbzm<f3Iz}5@o?`_f&5!803Gl)AY?SzY`2z285oliCzNhNdI^f$Sjy3ol;MDID
z{pnwll)Ezt{H-MLV}Mh=68XFsj&mf{tU_>uZpELg0KW|UsPBOzJAWA9gUP`QIMGj(
zb7vBKt+Kk+=g4cOFYM2+=l2Q>wgiSt2_`I>j`g^T<|W?N8MU*PG%w9-!SxIH2tF=S
zm^Oj0>lqb`%f?pu%GxbSj<Ng#hKknu#kd+_Jl&OG;O2wz)0=C&z;{gG$)*0r#-%q_
zHTb<{Wn~k^BA{bzRn6k6rfRRJzOkjDtYTW_1WyHJr4=coa=fRkEO|K`=S#{VRvZ5{
z5(QPh8GJ`$0HJCBM5P`1xSOCx)Vyrww92ube~mLoepO9PCDu2q7I@1R|7)}+V(S2x
zQJk)h1!9Mwx%JB$cYG5X{&Wm|6%BEWC1K5IH3VOY;)-jd!{LSQU>B$ucS{)8&%`|%
zP_W8zp3;^XvpiTTZmkj;{6EZs9hHU}jn<6C8#+;&&tF@cSFOeGEb;gnJ=Jt;3Egf{
z)9ew~k9ca(C~cl9f4f%Q4CcJpjUgTe!=U>r>OFi1#lzRVwc6IIMz5!ax(l*cVjf`P
z))3lkk*FTel$oybGEdp`Qo1B%s(VJU%k7ylWlCk)EYB=gvAYb=((g`pl^Z3Xg&T`J
zWlZK_r8CuS9YygADsU6Uz&l8a=pqYTR>7~^5LapxsXH-n&BZ`u4>tFRC|wyckf_Il
z>s=I|r@Qy%)H_Z%2O5_XXycL*QNFxH11!-+Au*ol8jb;1i407^jWCuQQNH4ZEs_I|
z^?H$kWIeR|B`zjG>GRv#V($a5Jc;ERFJ&(PvMy-V8e|`M^9^0RG7u}-?J<%~RPj6U
zt<wszRmSahKDJe6%FR~Vb%6z~_LdEhh+{nMwEF5Qn%nC6Wi{;;u*&&RBg;iBv0BhA
zCWGAxV`+QM<0aW7TnJO7u2+F)Np^ittU6zIQBMr<pRmajTfMY<T}C(8B)cpqPCwaA
zJ8_Kvxhr%O#BSxm<}33yVAG1c!vs&`e2sT`&f4HjS~~Wt+*1^1Z*VFO+!>^H-&{>K
zqyb;56_pO?g!Ou&SRumQ59;_!9mFnm|H1Ea^3=37d$6rt)8OS-2E`Oj^lJ2VdDl-Y
zL1<w78liy+H%&hsGhBAY40P3+`X(}6HCpMMJnUBI4W`pjbh;hLa{ExcEb7h4dY!2A
zK)dr#+{7frtL3#VZN$zWLSL&0>(m?H5^vG+nwovyJRAwhYiXqoP~TDuXuiK5_vO{s
zNDyu%8bkL?adhejT3*f4CKMq;>{0R*c_r0=hzDt{*w3d7@~x%8r{$54((>?{x1d?R
z;8ray&xetvhCR@xdSEwmlaS}FlkTmq2Gmpx#o$6FZ+o@3#fQ-<-3G>~3eP8KsCN`z
z)mRVmg5V-wj8)iR4UW695l&SOsQ<-))`M*L!}1P)vatR@j|$bgv49F(^-ke8@kdh}
zmA^pdSD~EN5GsGvJV3?iU-Me?C*A{@tq^6X<`)WVB;;4?cPg|iL>VULp946)9@MP(
zSL@*_ROMs($)802s{o}XYL$PVtiK9zH57lSjwEN5U#(l$14byZ{IVdm4zJeRfx;i6
zVSQ*mN^99FzgoXmVUa{u{3|>a-hp&l8&`3)KCZ&UGC%Q8vQzv^uojYVm0zvbt5D@v
z<*WRv{y&xZizPv|{;$F!Ntp7}o=0N-hX5m)DEhJadnSN*)Ox3gi8`ov3h&3CHNRcv
zQz75ewq%gWv0{FckpD5c=%zx2uSlr43Li_z-y`#@up^<tRX!DNNXW0&qg5DosFFpf
z@+s)k3HjB!nhMWSh%!v<Kigz})&6Q7K!rPF4I>C7mj7Hrezm@-!e?c<Do8B<wS@fl
zQHRE(LSI4#r9T2o(+=Q;M6CE9A=htJI7=bQFrhiL&j80i-BH~<wqC66eN8M+#Z{OJ
zg1RNYTA$u0`A~SW_?Z4HxQ_fJVrgb#>&EIHU%RXr^<R2aKGhDt2aM{Z^2gSr>DvVK
zBve@CS0SB?7?8h3WYgw}Q1x>Ojg_zBmn7s@>&$kUU-7B%6XW#JD&j@)uht*)Wq!q{
z%1^vnpFCN9z7>dfm0vDb$5K^(Yp8T5hJ=@S^F*vq3jR_==}+;a<bvg`81Ev7_${gv
e;j@Hbc~rRyMCL-(UBM_E(JEr!Nyv~8)&3jj5W{Bx

literal 0
HcmV?d00001

diff --git a/defects/tiled-0002/test/tiled-0002-test.cpp b/defects/tiled-0002/test/tiled-0002-test.cpp
new file mode 100644
index 000000000..b26ca1bde
--- /dev/null
+++ b/defects/tiled-0002/test/tiled-0002-test.cpp
@@ -0,0 +1,79 @@
+// tiled-0002-test.cpp
+// CWE-407 unit test: mapobjectmodel.cpp classChanged
+// QList<Object*>.contains(tile) inside nested loop over all map objects = O(MapObjects * ChangedTiles)
+// Fix: QSet lookup O(1) per item
+
+#include <QList>
+#include <QSet>
+#include <QElapsedTimer>
+#include <cstdio>
+#include <cassert>
+
+// Simulate: for each map object, check if its tile is in the changed-objects list
+static int classChanged_defective(const QList<void*> &allMapObjects,
+                                   const QList<void*> &objectTiles,
+                                   const QList<void*> &changedObjects) {
+    int count = 0;
+    for (int i = 0; i < allMapObjects.size(); ++i) {
+        if (changedObjects.contains(objectTiles[i]))  // O(N) per call
+            count++;
+    }
+    return count;
+}
+
+static int classChanged_fixed(const QList<void*> &allMapObjects,
+                               const QList<void*> &objectTiles,
+                               const QList<void*> &changedObjects) {
+    const QSet<void*> objectSet(changedObjects.begin(), changedObjects.end());
+    int count = 0;
+    for (int i = 0; i < allMapObjects.size(); ++i) {
+        if (objectSet.contains(objectTiles[i]))  // O(1) per call
+            count++;
+    }
+    return count;
+}
+
+int main() {
+    const int MAP_OBJECTS = 2000;
+    const int CHANGED_TILES = 500;
+
+    QList<void*> tiles;
+    for (int i = 0; i < CHANGED_TILES; ++i)
+        tiles.append(reinterpret_cast<void*>(static_cast<uintptr_t>(i + 1)));
+
+    QList<void*> allMapObjects;
+    QList<void*> objectTiles;
+    for (int i = 0; i < MAP_OBJECTS; ++i) {
+        allMapObjects.append(reinterpret_cast<void*>(static_cast<uintptr_t>(i + 10000)));
+        // Half the objects reference changed tiles
+        objectTiles.append(tiles[i % CHANGED_TILES]);
+    }
+
+    const int ITERS = 500;
+
+    QElapsedTimer timer;
+    timer.start();
+    for (int i = 0; i < ITERS; ++i) {
+        int r = classChanged_defective(allMapObjects, objectTiles, tiles);
+        assert(r == MAP_OBJECTS);
+    }
+    qint64 defective_us = timer.nsecsElapsed() / 1000;
+
+    timer.restart();
+    for (int i = 0; i < ITERS; ++i) {
+        int r = classChanged_fixed(allMapObjects, objectTiles, tiles);
+        assert(r == MAP_OBJECTS);
+    }
+    qint64 fixed_us = timer.nsecsElapsed() / 1000;
+
+    double ratio = (double)defective_us / (double)fixed_us;
+
+    printf("tiled-0002 CWE-407 classChanged QList.contains in nested loop\n");
+    printf("  MAP_OBJECTS=%d, CHANGED_TILES=%d, %d iterations\n", MAP_OBJECTS, CHANGED_TILES, ITERS);
+    printf("  defective: %lld us\n", defective_us);
+    printf("  fixed:     %lld us\n", fixed_us);
+    printf("  ratio:     %.1fx\n", ratio);
+    printf("  %s\n", ratio >= 2.0 ? "PASS" : "FAIL");
+
+    return ratio >= 2.0 ? 0 : 1;
+}
diff --git a/defects/tiled-0003/patch/tiled-0003.patch b/defects/tiled-0003/patch/tiled-0003.patch
new file mode 100644
index 000000000..0d18f7758
--- /dev/null
+++ b/defects/tiled-0003/patch/tiled-0003.patch
@@ -0,0 +1,30 @@
+# UNDF: UNDF-2026-000000951
+--- a/src/tiled/editpolygontool.cpp
++++ b/src/tiled/editpolygontool.cpp
+@@ -383,6 +383,8 @@ void EditPolygonTool::updateHandles()
+ {
+     const QList<MapObject*> &selection = mapDocument()->selectedObjects();
+
++    const QSet<MapObject*> selectionSet(selection.begin(), selection.end());
++
+     auto deleteHandle = [this](PointHandle *handle) {
+         if (mHoveredHandle == handle)
+             mHoveredHandle = nullptr;
+@@ -399,13 +401,13 @@ void EditPolygonTool::updateHandles()
+     QMutableHashIterator<MapObject*, QList<PointHandle*> > i(mHandles);
+     while (i.hasNext()) {
+         i.next();
+-        if (!selection.contains(i.key())) {
++        if (!selectionSet.contains(i.key())) {
+             for (PointHandle *handle : std::as_const(i.value()))
+                 deleteHandle(handle);
+
+             i.remove();
+         }
+     }
+-    if (mHoveredSegment && !selection.contains(mHoveredSegment.object))
++    if (mHoveredSegment && !selectionSet.contains(mHoveredSegment.object))
+         mHoveredSegment.clear();
+-    if (mClickedSegment && !selection.contains(mClickedSegment.object))
++    if (mClickedSegment && !selectionSet.contains(mClickedSegment.object))
+         mClickedSegment.clear();
diff --git a/defects/tiled-0003/test/tiled-0003-test b/defects/tiled-0003/test/tiled-0003-test
new file mode 100755
index 0000000000000000000000000000000000000000..a4a6cd73b13862de015c947d62845a1864081491
GIT binary patch
literal 40768
zcmeHwdtg+>_5WQGU=hrX3L4+5E;bQ~SqzvJ&}<%Xuk2zVAZTrukZedwUL?B^Ta|@P
zD7VWZU#*XCTl=-IU)!(!R@+*NpqLPzJ`k`fK6we=H6n<L5rqAH&di<Nn<b01{eHi{
zKYm=;J9o~^oH=vm%$YN1=H4tUbx-JLv7|}Hl_uRHS@7Ip=YT>3E<Gw9B&kp;kj};Z
zD#<1d05~1LLL)gj+}V#Oh|p@}qY9~9mQizZc$tw;ghUfv6jHgASB8-y!b~2ga{cMi
zh$n~Vsyv?vMS8rxSv*}z3Rj%V;UYAbBi`)1m!~I(GmUo7GD1;~*hS@Zqg--mGx#Y&
z!B64|{R#|x$zdMS=n`Raxf-Kfa#+HPNg|{==qlguuli@|D>KT~RC7GZ;kz6xiBQxx
z1?7k@XL^Zlo@&&W%zqKjHrg#hA!j$#)y^K1e?wi>$hz8wK<miXf-xh<<ma|D=8j?{
z5M4I>NTw!Eo-UzVItV7ZvtN+M1wKj}YNS*CHy<zQ+4{_v*-t+|^pizb&U_+v<eA4Q
z57A9!C=XqP&**X%r{^p1qdc4+ix`|>bZz%-t>;gD-`Akv`F$iE1MIv$;1f_`U-`o+
z@DN?LKJZ+WBL81gz|&IH`$dZUU8u7!I^Rr@|Bor)m#3irp%nQCr=auSQ{?YT0iTe9
z{`*qEXQzOVNP+(sDe@0Wk^g$+x8aw3?MRXTx)glSQ{>M|kzYxX|0d+WI++-Xd(~+k
zZ<VjvH>bA6?`xjsDXwd5@J*|jUFVa$-Z}M+4c-=iMYG@Q<yrgAc-Lg-6s4l2rrhVN
za^%gaYn)wCN6)46CGTC69XC!Xt*dBi@l{Q$t@kyLW(axGq@*;*sD>6_Ws8yBD4sXP
z)!bZhPf3Np!jV_ytEj7MtgP_+O3TW<t*xvAQ;vc}GD~lrT<&#@aq%*>jSaUq`Ef6m
z=J~zzea$U+_WCR40E=^8QAHKYM?^c3UeVIxYxb8-sw~g**7nhmo0@&5rZ`MQIGoLK
zGN(6G)YZ;u05d>O+5Fa21bOeOsw<mck9ry^aQDt>ZS^*R!bU3ZzsEa24@p%OWkg-W
z0?J1bgwq=q)HYOkr}|m~^**U7;BP@`5LP+YTUj&LTU}9G2S8JEZG*p>Ac*jm@uYfR
zeSPD6>TNt#Hr-=nfda2Iy1u@mwt*+N`20q4Wow1Ex|T@$zE9!>B@~(BA5+}e>?1`#
zhT<*$s>%@~;?X&kz)3L&C026y#NuM_jk$T!M7LU0>>ZVRV}9Z>H}RZ!8kIXbp2LwZ
zP4Rojup2TL&z$KhQoWAc8+neIGlAL+&UHfQ`(a*4$K8VYXMi*i|N2W-JX!D?B%LD-
zMm+J)g7iW7Hw3VO#u&07Zym-I%{Mmu%C5a<u!M4LfYC*mzi*_^Lj0M3dj!+X5NVkK
z^Iu#$NCM7Bjrh>oT3A9>=~qTPa0#Ukl>W<z|Cp6em!3tOE(@sl7-?jaT>B%MN&8Fd
z4cO2e0;EY>;`!60?-*%R{<Wv(BK;g`n*sCZJP4C!fb@<Lzi0bXXiq=sL!-Qy?}gp-
z#BjnQNxKa@OTcFtaBGkyqeVt&#CI;_ahiKUK>XTmf{VGB5_J>YFcn#u!zOrE9E&9N
znBbS0;F&=lfqE3CA_Le=aHFXlZs4K*rZVEnHo=9hLTPy>IN2fMDloyhy}?roO>iMo
zl%km6f_DTjGr=Jk@oT0Deoh=JNwZ9FbY%RhF~Nt#p_0^Of(z51l3Pu1*_1zMf}8E0
zr6#!9o>*amUtq%Xm<dkyow%Mb!G{ST!rz(T7n<Nto8T9j;HymVi%swj6Z{ere6tCD
zsR_Q#1ScEk>~)p{#DUM`D~>6lkF83$|67e1zU>|Uez9#zXuXvzYDtQX{-^=>;UD8J
zUs=fV*HA)qZ!8w8UP0w+NWnyRB;urqqU#cIQZ&&&C*q`FqQ6YUNs&e$OvFjiL>DLG
zq+p`Wi8v{i=<GzC6iRezB2J1VT9k;B0*Q`F#7S{PuTI2CF-Ol&#7Tif`z7L}IHE^R
z#@kDiW^`{NP6{NtBM~RX5nY#vlfsDpIT0sC5&dN%P6{IWU?NV6A-Xsoj}0FK?pMoK
zmhk?H4X?%;&m8}5Qv8mj_~fMcgrxW_N%1jB@!X{NwMp?SlHwO8#WRxP1Crt=>w356
zXj1%>r1*iP`1?umH<IF8lj0kb;%k%QE93F9nX8=;ZzVGNZ8rtu2YWD?>AyketU%hi
z5N)Kb<!N7)QJQ9?4Z<)$+An!pl%>@hX%jfkB|L2hOPgY(J;uv@kEg9?X`_v_053P0
zr~QqkU2LRX&eKNmv_G-56DK&G+d0k)dD?GT+8(6o%OK^e|G-mwCb1SyMXJ6YiL09+
zhiJiWG#M?|2>u5uG!}*QF}Nv_d+mkpNR@q-ehq})t$nD!gOI>^`g!yeZnLifmMUdL
z`tWQ#1QsaTF8wHB&*Jnh=C$r5?2`%Z=kV`wc-myZ#}NEEPR%6%fSSJ`S-*ndq>e!4
z&78^+Xrev<aJ@fKITOs$chRi~Fs`p$Gpgl79j-fE(_Pc1mn(}t-pnWra|#uWlkDhF
zB0sY~fh0Mn#6C;W?zY>M$ldk=WmAbg4`7KNh(+vybdp4wvXt=McB}TD66&&0+)B3s
zC|0@cVn|C^3iVjzB@4iEci3&ub8BvUp{IR|+?I}1SJ)EjiTTet><U>dES)7qksC>F
z?NyJq73JrjtA7S7LD4{os%=!mcVxQ5byUj^x&7auUe)jfs}gBKi7)lv!=$Agl-M>H
ztWefGbmGqHRVVc~)bQjiw<D@(o0U%8rZ_e$@>5-k)~R$xPmLk7P1V4aqL_MBhg<9L
zXq!-Mpeyv@LM3uphtjz(U9r4WB(F>#tBj9<9sUM+<zJQ(Uz~^K&<1pX(z!cbNecx5
zb33!;wizHt4Q;Zhi(&)|tWy?st-wR6Bc`l%F5g!`{}pYgk^>5R(m~!vMSDZ({A3_d
zDsstNrrH7zs-f6I`G>zkJ@U$s1~l@@hp763ZF1XhFsUF69b&25l+L{%<e?zTbpFzZ
zD0k7)^s!)+jp|z?Dpx}jtQI8)1z7c6Xu&}DpdK(Ow0j}=G*F2Q*`jprLDOGE%lnOs
z$!$yGEnQ3%xV3Dp1~Y7ly^x8)SAc~xL&uQw6FeRcWn1L-5AdX*50T}d-1Y{GmD*@N
zE>vn~_7GDPOPAu@>AzG7|KPB)sGEV>WB&g7f@9#U^E<Y{ex<gBXN~-zM+t4T>Mws4
zi>=M3!rCEy7b4yFD`CGqPYF-RRJQAibAnY~Oul_3JPo27dCne0L=WT;q|MGcFT9Ka
z6>S}B@<(X$&>ftCQ*6QK>_iAyo!(Dw|1qA318rZ6zGfUC<ORe7EmK)^uidIc)aABi
z$V^<xi*BLp7)^zMNRC*P#x<YcI9cI)?KXW6nn5)Ejul(RhGt5do+eC;rnWlh0ix;f
z@!m8ELO_???nfr_jY{rFoqbmK)s8KW9gd@J?T|<NSf2<>nhobg$I1UFw{2%6kXAsC
zHBl$!QHNUO<x@zNhVF%4@DE}=c^8^WqXv0~xcJ~-{s1xouVc$<s*zQr?}HUjJu^#b
zKPtC<i)aOFYLv(w7r6m$QbK!4=#-r8O85?|()m@IlJlb5c|=}*9KG+3*mbw_3whbA
zK&?h5SXAvYJE?~z!UCMoJ~?P2C*XlA@MvyO`waw$l-SFv<;MO6G)rJ?qqvQ9Uzt9?
z2UVb{d8Cqn(r>TvKup_*Le(gdbH9I^B&{ApJc*3H2hUK?OAzQ!eTk8HWe^F{|DMkI
zo>}KifyDRLIexEM-)uDW4U`J0oEOBXClx?SCa!ii^`UPbVOn<kM~ZWsyf}y+i)u6w
z&DtY@AfY%;8AX=u5L63^=ulX)oZLmkHArT31CxY%NfOE~Qo@Rrgo(+*NhJrG@Fe8m
zQ^om;+`baRL?YMzFsUEsn;2m9pn0JQ4q2ZkQByQRq(Np4K^TS{(Ib=%BNSq?!+*UY
zcFm}4s#OUc=;7i=qW7su>>kii3ZvvGlVM|^Y=tG;22s1(gi&rQg7ln%mC3R|sEnOv
zZ<3c^%)|`BF2p(F03x?`M1?_Nb!!KdoR6S)()0;mfNY{YoQZLSfp`C1#$Z}Y%>*_2
zLo`3eW&ce`qB~rL#)mpCQbN0X+}d6xXB|z6%hw={@vR-}3>9l3)?l}W+|fTlG4)+;
z;mb)ilA_oO%bwcbNW&>!c~Q#B7yd9hoNCuDJEVj*SfUk}4pDw-&(T=S^;{mB;vX_D
zPi}h-lb1U(E7Ps*VN;FvssghiTVMWpELQ5+p<q;I({Rniyhkd#ts`)|TiZtPOjl&8
zMGdX9kX$VtYVkPtHh-Xm*94JGVY7!5NQl_XlBK_*!X;ph#-?av7LBe)zm&);f$uM@
z7}POH+2Pivp;}C&`h`H@h6H63_9fj<Ope%J0VbFo^|m#iqe~`7(ywLf7srm^eG<C#
zkla=c<pJUiJ>L%T-vwQ%5ZSle$gpseQK4;9VOL<{Q7tdIFiz5FoD2tls6DD-N`&)Z
zCf$FPq8;uYYTyfXSlwfrdgQj7Nh4}qs<R{TkqdlqhrOBI*UMM75rI^lN(Kd)F$ZAA
zq{EDXiDKDY6dacqliRD9rbH>{+kw|yi;hua<aR3tWvCmo_DI&zWEpCHyVdnPCA%Y}
z#h*{8l3n_>pHV08N+>~+{#CDjS-$T#KV5HAzKmjE-KumRgTi@HA+G8}sRR_VLdq8N
zW{EwE@lOHovu=wFz1E|BuFJWo4Q$VIba*gy&sD>>*@8~+XA|1&Mwcq3jt@$~>nkOs
z%WeMwFlJ23rgYLYp1%W8rSm{~XzxPBvQ=I=^ui#SB^yX2n1%F65KMB1FY(X}at>PO
z2`ib*Cfx`M)o@dmCtPDABR13Rc;5}x0%DH<JM70JFxOt==Gv(-H8L-zTy+G=R5$6`
z$hf15wo&Q)Fx_oA<c>T*H7k~5yg%iY{kTmjw=Du3()bj~s@ti{p?RRh6VCCBy?cWs
zxBVxGRH&bwF9x=dTC*yPHj#;<F6yK}(R#?7Lqeuu(`{hPaBf?TR4K5GSZs~{06h!7
zsX3piq2oPrJ6W&M=WsLROM{8N-lB%TpV>Ve`G}81{6_<s7#a4F<;CE*QIMkh$?6Vu
zSQKYZ;Pq1N1oapA`8U+(GAzL-@eGt?3O<2HH;7O?G$<ZKObsuv!7lK(V(#yWTVIwV
zit`Qsj1p)n%nE-m0rQ~_Pk6L1J=y^k2o9@@K4wj3<9y0tu*vDO1@^eL!_a>o?PLj5
zA`H`D4I1mw4wYbv&y0_ONE4P2-|x}2Lxu_I)?)h45FtO1Yth$yC|nPja)l0B<hHjM
z*}^^$Dj<3r@hmq!-e`rA1+5x=3b*PN7_!m7fjf!x4!M0MihxVeH<7?NJOWG?<MniW
zwxVF1&yEggm*^L$Mh)MW*?kQkKTt2)b{g-YJ*MHV2gg}sf%8dj6z8$PTQL4&Q7=Y0
zG*xtlF$LTBO7~8%fVwA}R+0E^p}`y(Uvvv(D|t*GQRVBfNW#F@UQ=>j!ic!;r6clp
zJF6A>{tdbpm|UxfkI&N0(XpBgV;E7l0M`p(tfb#fm1)NS^SBI{qeGtnsG_}{1kD2!
zh#NMrqN{+BaJf)UA7&)IUM=4+tfq((`ae@>AXFm5euZb`%|Tv8F4~4F_I*MXf2a>;
z6w!L#1%ezMRKa_|a{1N3B0t!ngnukn_(S;$f1I*t{btnt?eDnmc74b7U6;4Z^;{VM
z(eY%BMb4ds%2tmD05#r*XE1LD0zG&T%k-b(7F`T-nP*b#ivAYQ(R|3R0Q`{JBIJR9
zj)SVU{ksaLt<VRD%chk&IviVo^E{M^4ZGmmlJvPr{vzYA0tC&!gaT)ee;8b!Tkpa%
zEc8LK-G;r|CG6J7_)jS@GWsJ5a!x{Ep{<~-d(srkMrHd+|4<<Kje)=#+s*ZZC{OeS
z$8SKg6c{mG361|AJu2FM{}3fSehDJ_#UG>DG|z18|2X27@1U$?E+1XMbWsomxxY3%
zkQwxkA#P}o2p;)5GK44Q)(GDKqsHH;g!w9RiV`k^>bMLGH(I8%mE`Q|6{_~`Da*-h
z5X6>~dsQsANH<`nz`S@MotBgemX>;;I~MykmXvI1iGGf@0YG|zI^9ga<7oGb3GQ?M
zi}F8Ae+_8)2KxW{Q4;;@0r<!0_vaJC1G(ILek<8h*MtYQcLYYSwxSQ#(vAG+(K|s-
zTwc3YdkG#H9ln`@@y}x%=rd6H>RBA#!r^~Fpx+93f_Y4TkvzF(KnPVW7WZI<K8EM#
zXdqn)PlUzZQz$RVf=gXly>Q-To9MsdT-S1^8lITx2{+o*wR@RYWuK%xzY2YeYoW5{
zY2!(KE+`7E=H3_N)6%h)JVb_xRlgK8@mUpX`AC_yyA@`N1OpmoE2~w0zQgq#=`N~F
z+0+I5Hl}q_?aHPNREzrB2V{K{(pB*)Fmbvg&FD6`Xu`Cr6!kqB?OmT5I*Cc~H^4tB
zG6V(#P2<{|WEH!yxXHpS=F#>mkv1!h4psY@OeZURdD?rb^WD`!0?Nf7S8G39ipRC&
zrBXKikic}Q+9ztx`$|r?Tl*BtX+<u6MP0O!O`(>z^bU}sIzMsCMPJbJm|GRMMSgZ;
z6I!J>VKoFE!76~67MO==j({`pdb_I4uz9pOFgFekl-r(#UIxn!VwF;7w|OFu2T?H@
zotQDRXw{LehR1p$bAznEVe*zTk4h1W!3@ZBN76T`VJq_zbdYX-A>quMm_;r;4NJ{#
z7+hU2zjm>OEV=erObsuznIMq~Fu~yO+Zoyi6HJE*c0GpqeyE2NLchu@OD>lTZ(fVM
z@?qi{>m-%x4nNF@A3J27+%}#7<nvr~oPdE1%AyU#ImbK7>Vz$<D>*%e*@cOm3`KbI
zwkdMSAyZ9(N8;l}2_1(^??;d)d1X5}>0tT&m53-QILzH-^blHv3<fpw%FVEl;EOwF
zX@m+aMFZ3@1ganSs$!MpalR+F{~D$RE$p&s+zxfaTcSHYB+zAcbrV_wW^+%Z$N8?@
z?qj*ByU02B2i6s(q)oxDeK1$M-Og^g?PcoOWZ&F72Y}Vt9e_bbC5-h&XnlbixexIs
zYhs#=UWvTMyhE$NKLKB98@xfAK#nVT5(~jg2_&z4!xh??iA7!JZIL0b6S0c+s+)Yz
zu=i<IhSeFQUeSiw^|`>QgooH^IRGoM6Ko{*(Xs(PV-!J6?Q{r&&s#36IV{CX)Ay*b
zZavPwH-DmppAS+E;L}x92XMP-F`jPMWBZ9?1j0fS%jR^uTZ>R;(N{}ZS4Hn+1|B6y
zuC;l%KO00lT&w9Z>cZebr|wq5e+?oIA2+K7Yn=UvA`Y#?YWowbjbc<0Rg30;M0xQ<
zpomVx&9$}+MV<{p8eFUCF}e>`LkkxqxZEWaVX5Qj^Q0u!tia9nTo8BW%OK4Z9Ri!r
z(Ge}D;$qT_%(X_V02ezKn@52yk?~g)Kvn<v15Dxzz-zI6@gz?y8I8mRNL=kD>4=Oz
zp3e%saueWQDs&DC=~1+8^}Qs-k<s&b$$pe$JaU+405<=-X7twlFa_ZseIXkSklS1k
zUj0H8qlF{sU$7;%iJbv~o%)&F2<IV$BU3)F43__dEIDVWoxGTUy0Xj)`QSihlgkF2
z81GnQy-CDj>*i8It!29-Ej{o^Ko4O+e3yoPWE!co581L2eU`06>N25tu^MqZKVyp5
zEf*h8p?GQ8lJkWp=cHSUdYp%#qF+_H`fyu5)hD7(kMo2_F2W=v6z}bkXL7mXJrQ_J
zfplYjNw*WdZf%y005*4coW0a>(4E$5>n`E)UC<?m_M<8CN^;0y3!puS67tH-r4N&`
zC|Y{=Na-_|+&IK8pJyd)p)NYXa<pBC{+lSTwBO(gejW3}g+euwcJKTk-IMlP%A};#
z*ouPpj+C(EYiE@_PDqU*SI`w$)b@_Nw3JfXLP!W6$B<q}1w&mB=J!>YShQpFx4oEX
z;zJeoEc`juoPKP(xFTh6=wLAk`d#qosLq|ux@nZkG(fZT*+4?$GHdDMG~l(J@=8XH
zF+`31Y}Z;GvXa)&NbGKd-HDOdVIGN}y0vwrOtP4tCzs(w4Ah}od2v02t2=~pzyp(G
z4I6V#0F_1QY+pdZSXG=Q_H4Pmmc|kYvhh8xz~NAiB>?->g{5tWf5xfysoZt}jTvmE
zB`eh>dk7VJSaHs@1(4p(tyDw1vXv{W)K_;?HjE8srs}&{l)A0ALcp%xLCnA~i$h)3
z=tWpV>aQa!xxz2U@O^=lgcw0x%BI3B#9=iQ+9;IIE93)8w-8Yx-@0mfK3j$qTIKVK
z=$D0GHhu;8DfrFAuLi$XWz%BnAiAoxACWRrv|^jSm#Ec>v!W`olcbI0I=UKMgks79
zP^g+hxPhRD-a;qpLr}_CD0N?>9{@?KheO_=RxaVWNH6IJcJW-@JBdA+oIRZY(g?qk
zwcS{6Gka6)lrp>Be~zNP&UQQQzj`(472sZiszE{CjllgQph>7K(htk`vTi)?(!Nl&
ztuR!lD&ZC=pH>*F+#3r^Kqa@#Iwf2TGwE2G3J;C8UCrrmJ2%J=EI|3y{diTE@~Wm$
zW3NP2#(Wt%X$fE@vjEEz1rFXl*ef|g&NSen^}h4<``5Axfgd#iJ>;6|bABW*+es{s
z3@yaUUyi&)k(^Dd5g<IIYG13JAK$84zE-z??Ut3js^w!f=Vc7~G|au%lH^{kI6w7Y
zPVSj3rG1P40?ft0wt*1nkH1em?erjVxDqb6s^I}JcbYE-17JN5g#!m$2dj`%*jtJ=
z37knQZ9f>8M#$~3vC$sv{m{lwnU$~V`R<Q0qCAsYcKK=>=S_@vamNj)ISn;qTsk_$
z%!gH337Q0)INoEhJqJ6z*hq4|vhcZYGt9=4y$j05@V7W$U$}-b#{v`g*nLmI!iXM+
z3>tiQTXw73fM{t9f@a}V+{39TaDa;Y-ZKjW=rQC;J4&1Ha9T}Qv{%X%?KoCZc~wvr
z%!NP`R5on(@U0M*dN4Im1M@>}n}~%0$>5Ir2hk?_@+)cH36FJ?&`|maq>~JI;E)Ly
zLlkCQ<aTa!%bu+s%N}B)TiZguKZph`-_iZrHg`^klGE9(iuMRx%ok1a1Vn@nxFASC
zr$QkDBgvSW^CA$dkTD>3=WH)UH$MhxARmG3={!0y-J-~)o1wsIR}p>nDO(!4<ezu2
z<st1;{PbOt5C}f$C2|Uqq0hGJ*}0SOjV_2bb^vG))6U>rYGY*bMM_#Zh7aUC=f&{k
zbn?nD*Ua8(xo*9tq|<JyjYN<(@G?1$mzg5K@PO@yg$eW)FV6-E*fIh|ROfp60UFir
z@Lc$LF}a_Q$fQWgaJY~^zyQEZ1IZtHkZ_YQWx}+Eu<{N$KsB(jO|6NHyO6bL1-dD0
z4Sj`X&~aeJ`K8=G1I>T|MpkK-n}#gNQ9+Jd>vZQ}Kb^KWH#3UdI6JUxCbE;c4u$`v
z|GY_&al1X1&-K{bnBuTvvU!~Q<@U>1p1GObHITD7L*9;a0-Wh$+(1L*<@*>z;S_HG
zb(}vqE=*05+sW^^`W<RuWb~6GC>Z|>2(|tc>Wj+>s)aR`hFOBy+m$c|AO=_?$md<a
zsv-Bwl}dPeCbD^8l++_fDdvk(==W)~v+6c_oW?(Q-u#j3B#q3(`5EFHJPLCAgG|sd
zDB|a6<o1n3ZD@U7!rLH5di28tovb$?yO2S?Yj_v~fE8gwAPwr!vL4$?dfGcAhqTa#
zg^fm~+vW3haPfW;tNTA<5*aZV)HVkX@_A|CGs&%)syu@#K?}4_5RF1UX!{XA$aLp?
zsAyl|+{CSl<*OH1%J#1mS$Wls5sGCS$$0w+Ou?H9(VdtPg<u~s_v1#+V74Plwh7aZ
z+o(k(zsn0ze)U^aYh-kH4h7>kUXT7ewA0jo#hH#R@WQLIx*2k4*%O@(Pw@)$f8e*>
zn7!lr?@M{{5exzB5~<j1W$tX&ZkoYpQjQGaQcm-eA>{)ozw=YMeI6cYNk&qxL|U1Y
zE1?fb%9R{&!7Syw<z>ytPPRBk;ivxd)W|s9ZP~A14613*7Eo;NjzJzn?nq9;m;y-d
z=E9&KYseL-in2p6<fn)B@L$KI+Jg2)hvP<mE;b1HLJ)!+UBkd7sGh{_SCIecajbNz
zSH$^$%;*qvH*8|v5d9r;3Vwm|Kt5|j)Pp&JxUl#y=n1HLwe#z==%+y4TW0*D_20gU
z{xZ%Fw0w*8*KHVf`mF>%#{2Qx9Ijsn__qMp&nLF@lD@!7{REZ3!ijo5hnKjFFn#d`
z;QKlJEe`({!QUgelf%EdmeqVd1V-OL@B$9s!{LXi=Klg*m{)nLXYmXjJOh>2mr+5(
z#rHc7f142c0Vj3;9Qh`DQ7yNBO+10&wc9{`2L3%ejO{-Cdkbvp^Z$~6Z!CyN<=<nq
zn*4j%l=_GKd*9>!y+<*!<Nm#uUhiF>8ajcQ{QrQnlOk@I<xodS4nEr5QvPWN-$6C!
zJ?7wxx}68PgO9nX6gc>HfffuhIQR}G)|qhdjp*gz``mEwolN22`#X(d?%=};+!OhE
z5RLJW(%YTx(RNLaT#r4|Z_!kd?TIW1dbA#REXDYNzi$BTaI*uVD4>StK|^m)!yXJx
zO#jc)Oki^PVa@(cF28$hXX^69_&0gs{Js2rrBrcZ#jK3A%57r^W^(!A^xi-1@_UG{
zZ@Is33C%An*@_$s(&tG}l@uJ4+uk=GLie!@*t#|?;jM<hZ`$Q-1y55ge9+lyXd@h1
zhvoKPV3@%@i&Kkqlqnllfd3*mEZpQJ8~qx3e$zmphnX?Nu5#ZlJP~qx8H&+~5cvMU
z|DU0AaqP$B`}+*;4cKQ)btj$6+qDBlou85Kk4l(*fA=T*{;ok@%qwj><fXp>uF^IL
z0nLxDU<^)zAq0|F?sA1T!SC0Fr6A5Hq3s$bY&bdCil6!ZXhwpQ&Z@Ui-Efk@TLu`6
z*0|#jE&=!x7IJ>OwcW1BG&>v$>xDz1A6%ZzADSEraQnejAuj+NaYOC8m7yjOPy_!^
z)XyBjqRW=D9*a&Ty+%G6h>7b3EZ8I$b2P9Ot;yxb+>_dyv?)M`Nw#b^Q_fr%AfNoO
zizj1BVF&*iTIfL63uO!~-I+%tX=%@WeG6>x0;Tr#NtnN|q^=}#&Az^wfD2#WyI0Vl
z9zV(sUH-dmn0~@wf>?mRz!PU)g~Tutg|ANr0EPBk19%G+x&npt6KJ3C^|kYo7gCNX
z$id#HApaiB4cBy4J3))2&v8gO^f4^<`<Y$Xz5>Fagy+M2--rXgAL^U2t*SyoGu3bg
zQxY$O;VSwjiw*(6_rKY+C$LIv7hrc_C+#7#qZ+UA7=()N6`W>gfXhuvJuw}1n}#LR
z6B7vbKcOd%q|g(OfJ3A(LUeFiUfEkuNK4s9g0f2NN-TxOP)ESPQaVqht0BlVmTgbz
zu$Vjd4^#$qyOx$h`gM=ygBkN3uzh`&FmJK9ZRoA=Ipj@6xBPSbo|tMU=8IGLJ=eSs
zv!8?^p$5Tk|6DV#al)~0os4a4cA^=J;A4qxm`_X{8+a7^!|eFc_Ct#Eq`dft7$H$Q
z+-&mi#JQ;Cd_nvp&KXV$#=PiS6iVbL{Wc6FGyV1-as3v>6ZG4gT)(XYyJ5|n^&1u?
zST5?1ze2hJk%W5`y6pQ2{5aa;irfKpwo#}vDE~Kl`A5%X8o!uf!oG;uvEZ|fp}Jl`
zBe}n%xBlW=7PU}A#<~V-?6Bc4<!TJO7w|4XjrB8;3KHbS6{NiUxFsnszELp@2|}MV
zUV=W2jJIA6tuXdwsEh-^rEj2H-d1GGqCSs|R(Q6bUx{o(DchIGkzj>szu2^2FmtKf
zF0<9#BpQ`CwpOTW$Dtp|(o$&Cpb)ElzB^d}mQy#l!_}}MXd1Ds?{4CJ!4#UQrp+aP
z_h|BW4*@o}_L<oEiO<?Nf!D-FV~-rVnrh^GhJEkS;f0BQ)OG5jlR-#?-1ZR0Z!u2&
z<&TT`F^m4#PT=6Zb{VJaXwxwOuBq^)sbQS9#`L@f`OW50@i&`CKR844=+tr8%RU-M
zHJkTCk5ea^l-_^ie&~`%Fs6hQ6lI~F$oR)dSTbIO0I>d{{lk9~<7^X{#_foa1Tu}Y
zr2WG@+AV<`WYdffzQ9z_uLDkU+h@^CY{Ti}xFJFLU}5CZ4q_XsVCTXjrL=vh^NrTm
zn-7`nh-=6)0qPR$%rMk1Y~eFK&=8DOqP0^O3o$Z=<66==tX<rWNZvn82tCFlJXFR`
z;wDz1@K#a7jEbvS#T4ZY16gR8$N9Rvcr1-l+E5hrk!fMxQQQvRvzKkCiEd||UBTf%
zET1tg%rs34!tMU63t9K%UyAN&+?*KWVGg%n4EPMd^#h<uKS8%Va9pehn7{NJ?17~u
zX(oGM=X*)^z+W-${uk|mUh~r}i7~IRa{{9X@ZU8qR`B%#IrD_bm^IIGaHgaHn&<7r
z=!E9MIoB8Yejhs=z^4AhJoZl-0W<=rAO0WN0dFuNU}iY+*<Wqu@s@wV2>1ybcc<C`
z%V|umNLW#+=KrqV^FQ=b21sS||D#|S*Gqfx)LSp58|NCt0>>}_ezu`617IEoE9bup
z@4i6)e9BjSZ}ieXeB!^2VK7bn{8)*hX|}S7zYyDd>GmM#G}bMA-fxClNICCA&3r);
zpbs*U$R>W;n~YEV>}&#GweX4ma-@ohfByN9pvZW67|;~0hblM-T>8s&yJ=%W<=@V;
z{pKQMyOgq>L=LX6gudY0E1zR~<@IvvnMEJdB3jYLaR+a&t(I0;x_s>mm-WIyI8-dR
zm!R$JM1lSyP7sJ)P1^mmQX`XhL6t=($a^j?d2J99v2CEur-xPX!({QJX6p0tGhZ6E
zZQv5yf(r18oSU78DYLRohsRNe;s3!o54cEh#)~}t*oNMduHrdTXSLFN<2dTk)?<^<
zt##pe!TxIPZ`97!LEMrLcfoDs&e;cFw<l+#$9Vu}47QpMckKfefZ~k7=Lz4><VYJk
z+~sy23Or2jbz;d2BIrP_R&LX8MHvNKv}}`GLx80NIiT6A4ZJ_pFuBz6jvLDp&SO@}
zm+5d74`A<s*5Q$iumXz5{ON~711yx)9fpGfyDzUJ-Gyxfmif>C(J7<X!4HXJ3LdMe
zYaj$@LpT6eFkTZ1mu9JStbS9m4a`6#pfi5n4x1{?LncM8hk3Uj+uj?ng?&gb1X8z_
zr$nYR=LGY2Jc*)o(2m?y=&dht(w4vEN^d-ZZk&m}*9x~l6?XV(f6>u_Gk2;p>egQJ
z$i;j5><Hrw2)tgRKVHEG4*KI2a>CsODm;<)6{y(b+>O3Km#jAq+f9xvOKU<SRc9>l
zFipa6e&YxeJL<wub7?I$#}=62ZtW9tsh+@#44i#2e+!P+*GrbbT(HIlKevB6KXPzA
zj>LiqmJM{yrR{IvG5jz%38;kc!)ulYi4bhZ`1|Xbom6wZEr4^eOZb5U^Rd|bdi3vh
z#E;4!(&r%(my93qrTalP8)EB#)+eBEB=fdnFBo<RmyK)Sgi2Vj*nK1mR@FABod<2I
zV}o0M>JZkVv`#l-I2-}1MnDv-+|{cv9CTM`|EY)iB)l(MGEyAqYc?+=H=*IZ4A{v4
zm`=b1&<SiMNo$2OI?-pYEAV4uJcLf*JYNklIewnc@b6)za0R5D&DY)pF|<;MzY3g~
zxr>%kJHo{_B~(l==;9>~w)p&n7VYjqSk8RJ7+`u^)v^u6v)KzScQSh*7^J>stk;HY
zqv6Zn)4m1D&p23pBOdwQTn?USV*^<*F6khiI9hGUk@;w~+}4GrFgZH)^vdS75Da=<
z7jo2osvP0q%7w@w-r9v{&Z-Xw!0oKE<4x87gjXtI?-J3ird`1wqgtH5CnabyM$P$6
z@BPZu2zdW6<nbQAzTyiK*b-U=;+=GCO851;@4faiNp7c-^mZ+|s?TMtc+kwtbwsp5
z?=id+8J&(n%k%?nAJM*wF}c(~PZL+;u)m&XoU?(a%Ft-1oU<vj>OW`M=XcP-W1R8l
zIq3uremGxKi1RgtIA2qU^EHJyUsH(lHHA1|6C`%fRjn;$!<m%#V&EdB7@Y~@9m3hh
za>Us&OJ77UL4h4L#Ew}h+0le$D(z|o$MwT9I1LTe_W^Z$-;=#;jZwTh?s#(??lqo2
zN{n8N?vJpg*K0gaOgWxkhkTjGm>=UgLQPeio8{1#OvEEWijU3j^w*om@@CUmepdLw
z6lf6~1K@6<PQFcx)4BL4K*>kudIFD`<q68na1YtQ$mrD&PtcVZvc0h44JmqkUdNdj
zCS1K<pXVG55SC}bP$n;Ktvk9F5+wSE*0uf7vLydeH(Ck%@m20W>ZEhA>;*)2E*5K7
za%7MbTfch^bt<0N$}h2+g%`=s*RRZeJk0IKt-b6=9IS&6L>~kc%&G3~bFDhA*Z4HA
zSD(!TmC;&ANP>SR|B)LT6GUU&knC7Z6#>H5rd#F3UKEYa#f`hY`Kt8UGQxTRppK)_
zX7;}Gi8R;q;1R}l$w+vcm|dXA&u>o5|LSY|Y0nsw%0POBZn6JpEH)`phy6Cg9*E8c
z1pNq{)o2jxz04pmGAFu=y-OS|L=MbhhMwxy7d=a?9cR~P!VT41FZrAGE~M(sU>)B+
z-Ow$IhYRST`(p#oF5O9ZppXg_ty>=gT;0DHS($qrDx&*Q{WUO0n9aA+oEaIv6DFrV
znCkfn5@~u}j)?G+T*5Oo4MC;@tB`36GO_bW><tbmtS&V0>~)p{XE|_|17|sKmIMDk
zaDcwUO4kj6mgXC38!GDpRlXbWv2*X3eB;aKa~c9S%=3@AVTzwVjC;ep8hj=>w?^=$
zvAP=H)NT28?RRWfjklFIRWuYgHsIU64gQv!Z=T)|z&Ddi8~n}pi2PUKyTVo93*b}D
zRknNYwPi1;!Ka&T<Hy?)pGdy>=84UX3tC+MB7D=ip`o^6j_ulOZPm>_AJA9&40v{q
z?UwPjhMaH2Qrb|JR2~pfTFP!}Y&nza8*Jmo+x#`PEhBF^l@d-wYD@+RedA!%<Ou%w
zYwLVfBlGg|ZnPE8C>@!fcats9RE3X4D-{h@b-otc6gR$eom<)1;KxUeTWqxrHtG;t
zExvtSK_7-T5ZP>sYjTOZw0!*Vs_Sj#rS8(=Y3l8hS!{S!B74g@yug|Fe+7NY8WdGD
zHnk+=fU~A*<Sos<YHw~`V@1_eUtLA3k2sCqCCisxXI@Wzh2JD+;-lDAwsFZ)Hkkyh
z*4Oe6;*YnZsSzKR_BHdioJJmuUOYtzxHydyvY1*7ddc%CXjm$^MTn%+$>r(kNDPX9
zl@Nx>=r$?aXB%mo4eI(B1&jgGRkbaAyl3Y~Ezko}BbpNLHmM;{UlgdE3teHm1>(@)
zYxPgSkS5_sWb%=!=vA!NpKHQf<|;3jCb(3$6xSPh5_-=@U-(A7iP1CCk58NDRyH+B
z%~XXk7|@3JP>^i4Dqpp)(qB8@ce8DHU0szefYD&HRo6mnZ?@58g0j(NKyw|{t(0>(
z@*9FLLFf5vE4`H!E&g%yK+>4}Te9af9R&(cBeYj>1P%Dud`pQBA3d)@I~o{|nks6W
zbE|8cTl}P38v=E8P5x%7swwwW4a9U|QWBR->P3Ud+7?g1PanpIltK5-CdT+AgMiwW
z@|ucfHeM5Hv#Gy*gtrBsNvHh&#^T1NxHcEkfj#-eBRz?z2n#Kjrj30U2{^JKt@?c|
zmI<d(!IQCA0XdHlmLXjAhggihCHr@TZ3qt|d;;N+|BA)vd|fueod`=1()TiEA<V?|
zbuU8t49TMi?}g)V=^taUY=kr6H0wcq$_rQxBHapy><WaN5z^nIQQ*)0oWe~g2gmHH
zmtrwGI%UNf3woI#`*px6d?yzB0AcH{SS%lh&I<N{K7=(N#$ta*NEbf*#4gMCr%IOA
zOv|N123qNy7QyK|-ZSA6x|VX349uj!jvw9xm7e$=JV(eUWn@ms$hu7)yucciZoR~L
z-HrCE0cGXyM%Y6<BY<%cUO#?^0jKj7;=*A7X&HXRQ*1e7^B^PBm0_Khfx?vbyVInt
zKTX>1)1-ZUnlyG)B?T?{pgR?vBoBS1m7uOVr1d-(i#>y9X--DwvVN|NtR-o#3|lC@
zU*$Pn8CmMajLf2!Gpy=hq<{lO8P<}njV~*dV@cXF^f}>q26&p#FaHW2;_27GqXW-8
zqUVl`%)2wJw-djs5T(C!;f5T3MshMCBlCfNN=DZ5w4w}KB)upjds%;1M&6PEu8e}v
zz><unv_GevlTn~%<he4kk)<djtB4Wr9-LNYK?*V_rML!j`J$>V-!F4B=^OY{Cr%e!
zDrC@&G&_Flv0XJM9e*e2A_zI71r?;G<tCz~uNn#8VYKT5jGJPFgll;};EGVYmZgKl
zCDg9afV97X>TGmOyd@I`-v!776XdqRB;V`t`(R5fW`ma|{ShE#I7{O=O9*EP;hdN;
zD{Tx&%bV02vwLvARzOj?xjqH_p?-J*P5w0wSjNt*AGY@056a-QlGOb`d|3ur7>7+A
z7xDRhL=t>1r9LmEK1Vy^eO{KftZ$4H2NOPe@oC)KvDhlmZ^G5L{H(B~-JPn_P@M3Q
zp8UgmvDkG)AH8b!&Gaqmo4(rymjNHWv%U;(nce_Cryos0BWrI7$@py<9hS6%{reQG
zNkAbH&TYUs6MAtIzPp|Ns=x{L*te`s%n0^Nn=1E-lZJ<6!_N->UGUpj>=2&QAHofV
zLIal!Sk^z1zC4XS$ce9<$1Il)hkOJr(SE<SN(Tnu`6mPWzi5^ATJebFAzOy@?>bj{
zf5<v;4sr3znbLpPFzL^h{%;JE4y5&ea+tIxeW&G@!=yi+OOf}^?f=X$DRLo4GIX=0
z|C%eMXROZ-{Ld?;mxt}KA^@`V`A9!|o#nt;4xHt{Sq_}#z*!EQ<-l1EoaMk-4xHt{
zSq_}#z*!EQIS0hwcNBlm5$kn!dDu!n@i!6aZ%Wc7((97q^fxf+8p4D4A74CI#P8$}
zc#Vf$;_pl{-zy+i15SQ#y2Rg`B%d%{BK?b#u||qNO@1C+!WGZ~KQ>)PAni2Ljcq%L
z{MU4mpMx&)N798i2zp&cG0D1+gN<TRw(&szWV+yfV;5d6VAoCqv4HDF#e(j`Mm`+9
zVwb2N?=`ba<ii;<);{o=fpET$#e0l`@XWC|+*0g1Y{Z{2(!Vm|q8&!I|F%H<o%Ljd
zdGO=XRcM4|MmWm|n~X4Mge#2j2_t;k2s?~$n-T6d!ox-={`ht#4#Lu9Gr~M0EHuJ0
zBb;S~O-2|r!WBlyv7Gtc8a#d8e(78S@waYowq;MB9cb_eY>pdq@po@WjtQ{nsQX9d
z=jP?-I&zGJ(_y6XmM(o7OU^^xZ9&R1qoZv`h6@n(mH%6S_meUu8)d*H#@$_b?h8&Y
zmJobgQvNqnz^?+Klz(PYek}!jj{)~5<)^=oO?Z;wl?Hr8QvPRBz`roye@MztpZz5K
z$?*FO_~xYi>r=pw8}JX3@{h;BB>c(n2Ml=3$bSfYr0d_wzuZUv{@TcY*v|8b`~NZE
zw&4Q8!)Fb+(BmTYRlqISS<4G@2+0#&?=bj9aXrhSpdAX8=oj;XfM)=1kuH>k-WKpw
z^p9luhf3CZkuwqY)!wlz|HW~=D{@a^@GL1=@7x7AJk?T7waCfCdcg74*D2Rx!225V
zkForj(qTiflP{gF$5Y^W3h-a_yHv6TSvGKrU+Yrje-rTY`duPr8TpOu(ov|1^HI9P
z&LP(t3Hy-WCNh~q+K=h0U0H;uA6jP2ucF8m48Mpa!n_plk`(ao0)92<T;bw4XupQ8
ze@~JBb(Wv!G2agZo=LmfK{Hg6PB3^vK1J#vOr(9a*A6(*({wG*$@V1ic#{EtLgjGU
zx1nos3Oo-3o{4c$5M<fnx1RuRi^mcVzfXZ@4d6tNZ4}ST_WAI5K4$N}=pT^+J_+zl
zXk{@@Ma@%F<gZNu|4|C~UjS$QIF@5(`+IoYXTYBx$>Fr`Nmmvo7|OrR!{fAXMOT>t
zfBIWI&h~5ZxB~FL+WT}0_znZl?oy72?c3pTIP9kL`@xD71B)k1BLF9Q@{D@t8SvXE
zzwvAi<{9~$@;Q|DOX=!Lk^c=Ne{y>>&~B>t>EXP*khdd{TU#IU>_C1S&)Vxwn|7oJ
zlI@3?fcHgzZ3_6}6!4z{PIM-Zi$5ChWcs%Qeje34i<4<|yR;kdt3YRFki#J!?D`t;
zzUaIdUDa2=6ad~=eyO~&+3(10l)T=G*|lDO#hgA5BYE$d>=-pg!HK=H=Gyr<)|XF5
zCe_L1-u%gpRX(+Ber;)K>8J{SX?<=}MYBIQPx|H}j?oNbNua*|o;xb)0=_;_OzK^2
z0Y5L;*qmH-egnuToo}lAOiK1e!Ks*flaOD6Glb^q`$95?pBZzEs;HV@(NO90*48)G
zm6lB^AMGt8rZMi7=X*;_O%#7aJ;dRZc=OG8Z#*sD<euw`{(=hs?d*i?KhmE>VBZCk
z`r?dO=*X+CZK&dWES);3e3aM3s&7I_q?{H(60gsMCyu;|s;Y8-V{^rv-jenWxHv8U
zT-m<*W(>~H`kMctk;X*ln~Nn&HlutLb;Iq=Dz7xTBa+&ljG-_39jC!a=OJ-OxUNcq
zT59p*>+!jjQWcI`&%x<oU$fU=@2#wBY`~#eueYkvJEyL3c14}H3Z2s8tq8PAm5mr@
zJ{-~}1=Lp#FIrRUWoKx;?9`@I-CR-c^Hz}(LJ?EUi=6&mS-su~Q(c}?Z|UR`uUGO;
zbl+a&a(i!|FrmD3ns=J3$XyC($(@s39<>;_CQhF2Eme#%O375H#Hxz2`SpdxGiSPr
zRIdZ8P^UD{@15^!Zov^~(!PaL{N6FS`4TZgs`u4bHr-P=(XAF0dq?Fu@{=-qaZH_%
z)}4aX>z(E)7Ido9Jl+Hkkw6@rMh7ZU*opcpT1cSECRLW_d21O365|t+8y3{_`e)Ac
z-bi%$>gyZl`{Fc>${mfCas=M$irTu~DW^;u$pVr}#8CBQM_%G^eStV^TUu6D?rm*t
zg%)*;an;o|R<h&cw>Qxt@=}9%Z)Ix*wV<L7$3J^h<gJ4G_TtoQvmb=dZfS`>16DcL
zTUj%=cRTWl6h2e2X|7~c>3l|A@A)vfVP`7&Kt)2)i^-78DiAlP9x}lwC26~>p`v$J
z5QlC`aHxzQ2M3L%qw;VZd8+Zk0-aWddaLx6_F||bpWasR*OWE3)H2q!mSK9zLq%RL
zcEpJ|>!|BNP;0BV39{NqjP>8+ou6kCWy$L!)=J*#4GW+#yi<KGfqF2%xEO-N%mF8x
z?#ppv*pbIaE<KmdH#+UE$&(y6PARRcXu``E(`xH|&5lt}I+ZO3$dvILv<_2u%|3d;
zptSxB`ik-wRIx+Mpr;J;G8M|7QttB;JBvrD5CD3AK?Q?K9r<{Rp~deNrbwxKwgU*J
zdCSMJa^FB)UxG2F7qPvWFq%n#x$(WzZ)(PgaY(Z{$3G#O1$e<FKAIF?9r~GO-O=9q
z*%H%)jE{ZGTYN~E2CO5mN+9%sr5LjDZcZV!4zxs!a#uqYiRU+pY`KG2?wnUtQN?sY
zLY5M}=lF+uFFw*w?WYn4jeOFkVm|7vOTASsjoupezKhfp@VCTA4_A^HR(R#8k73o+
zjC1$ZrzZ4PJFIdOs1N#>W>Rm5&Zw$wpvj?1Dw&asH(PT18oL<Kb+xlA4GlvRPMqKy
znbJ$qPn-?C)w9Ey=)38p9p*H!k>o9#e|l9d<+j{YkHh^4{mneA5l`&(mL@5;q0#Tl
z#p_(TP0fuEOaDD4(Ck2MUDe3iDg%URbtJ7}Saur!Qf}2f4XA>LcnyK27!z)<h!<(i
zc=v}27*9=gekqr%04W!bxpNwg2Ph>e*N-<rB)sO(P>bA+O!ejZY77ISrV7|Z4AoRt
zdVQ^xz9v8Bc$#+^R&HBx9O4<3SJc-6Jx4gtA14)4l?2nMz8+?au?YMZ0`fOo@Pk{H
zU0Lv-(j`K%&%>cSuXv{L8vJMpFUl7f<wclBnM{{hw+hf0JebSZ80AH17a5IEtcL|y
zO)4+^?jp2_j7FGTeg@$94nU)zU+iCrP}C2%0=tswuK*NF@Ob-o8uW`$HxN@BiO-_E
z*k`H*jEac*#eSIx#r_zwu#0e*FY>q0-jgUV_M1d_i;-E-FY<}-ex%c0mWYe}ED;_y
z$`k#>J3+qzmLdjRlo$JJA{6CC{i3{R|D#6vA_Jk=uM?rz-=p%hN10sy7l08@1pc^x
z%J5T({S;(jS91UV3{Z1<n^8`L!6b$o$?<A_n^gV@!<j8Yk)PL|aGweI(@Eu@Hp+|8
z{B8{45amSpY*Kl#k0iofh98g0(k06A7(QBq2Xp)5{%XT-eXhu8gvtEdV3ZgAFU>MC
z8X<it$$TZ({|XYReo<cR8;I~-b74Fu*Z)pZd1VeSAj0+idm|9?BcS_}$`7gMDI#nW
z8I3SW9HcJ+&%n<Z_VIlfu^*FMpNNYv4G3v#LzEZ$>mn5SjOyd^FW~ecBVw^AFZN?Z
zXfqf~<CiW`PV~c*fKi)7d9lAP!X7GQx<q*q()&^7@>0;qY=mN*3lyT9h+mOZ-e!~&
zp`cUbPma@9tq7-}KhG#H!sPmhR`Zo>)SqVt;#rg*nFJT*&7qK8bJkfw9@7m1@Qq_O
uR|<LrU*K+!)6PrqyQ1+h2!E~l67>ogsSD9|0i$s9!#s9VQh}tX^nU>;l=ZRz

literal 0
HcmV?d00001

diff --git a/defects/tiled-0003/test/tiled-0003-test.cpp b/defects/tiled-0003/test/tiled-0003-test.cpp
new file mode 100644
index 000000000..0de1280f3
--- /dev/null
+++ b/defects/tiled-0003/test/tiled-0003-test.cpp
@@ -0,0 +1,75 @@
+// tiled-0003-test.cpp
+// CWE-407 unit test: editpolygontool.cpp updateHandles
+// QList<MapObject*>.contains() inside QHash iteration = O(HandleEntries * SelectionSize)
+// Fix: QSet for O(1) lookup
+
+#include <QList>
+#include <QSet>
+#include <QHash>
+#include <QElapsedTimer>
+#include <cstdio>
+#include <cassert>
+
+// Simulate: iterate hash entries, check if key is in selection list
+static int updateHandles_defective(const QHash<void*, int> &handles,
+                                    const QList<void*> &selection) {
+    int removed = 0;
+    for (auto it = handles.begin(); it != handles.end(); ++it) {
+        if (!selection.contains(it.key()))  // O(N) per call
+            removed++;
+    }
+    return removed;
+}
+
+static int updateHandles_fixed(const QHash<void*, int> &handles,
+                                const QList<void*> &selection) {
+    const QSet<void*> selectionSet(selection.begin(), selection.end());
+    int removed = 0;
+    for (auto it = handles.begin(); it != handles.end(); ++it) {
+        if (!selectionSet.contains(it.key()))  // O(1) per call
+            removed++;
+    }
+    return removed;
+}
+
+int main() {
+    const int HANDLES = 1000;  // polygon objects with handles
+    const int SELECTION = 500; // selected objects
+
+    QHash<void*, int> handles;
+    QList<void*> selection;
+
+    for (int i = 0; i < HANDLES; ++i)
+        handles.insert(reinterpret_cast<void*>(static_cast<uintptr_t>(i + 1)), i);
+
+    for (int i = 0; i < SELECTION; ++i)
+        selection.append(reinterpret_cast<void*>(static_cast<uintptr_t>(i + 1)));
+
+    const int ITERS = 500;
+
+    QElapsedTimer timer;
+    timer.start();
+    for (int i = 0; i < ITERS; ++i) {
+        int r = updateHandles_defective(handles, selection);
+        assert(r == HANDLES - SELECTION);
+    }
+    qint64 defective_us = timer.nsecsElapsed() / 1000;
+
+    timer.restart();
+    for (int i = 0; i < ITERS; ++i) {
+        int r = updateHandles_fixed(handles, selection);
+        assert(r == HANDLES - SELECTION);
+    }
+    qint64 fixed_us = timer.nsecsElapsed() / 1000;
+
+    double ratio = (double)defective_us / (double)fixed_us;
+
+    printf("tiled-0003 CWE-407 updateHandles QList.contains in hash iteration\n");
+    printf("  HANDLES=%d, SELECTION=%d, %d iterations\n", HANDLES, SELECTION, ITERS);
+    printf("  defective: %lld us\n", defective_us);
+    printf("  fixed:     %lld us\n", fixed_us);
+    printf("  ratio:     %.1fx\n", ratio);
+    printf("  %s\n", ratio >= 2.0 ? "PASS" : "FAIL");
+
+    return ratio >= 2.0 ? 0 : 1;
+}