engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

play: 1 CWE-407 defect (play-0001); basilisk: all 5 MOADs CLEAN

Browse source 
play-0001: CIopBios::FindIntrHandler() O(H) linear scan per IOP interrupt.
Called from HandleInterrupt() thousands of times per second. Fix: direct
index array m_intrHandlerIndex[LINES_MAX] keyed by interrupt line -> O(1).
Algorithmic ratio 32x (H=MAX_INTRHANDLER=32), timing 5.6x. 5/5 PASS.

Basilisk II: all 5 MOADs CLEAN. Video/newcpu lookuptab searches are cold
paths only; no god object, thread_local identity, credential logging, or
unsynchronized cache patterns found.
This commit is contained in:
russell@unturf.com 2026-03-31 19:51:16 -04:00
parent deacae0423
commit 265fad9edb
7 changed files with 330 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
defects/play/scan Normal file
View file

@ -0,0 +1,7 @@
Scanned 2026-03-31 for all 5 MOADs.
MOAD-0001 (CWE-407): 1 defect found — play-0001 (see defects/play-0001/).
FindIntrHandler() O(H) linear scan per IOP interrupt -> O(1) fix via index array.
MOAD-0002 (Intertangle): CPS2VM is a reasonable orchestrator class, not a god object coupling independent subsystems through shared mutable global state. CLEAN.
MOAD-0003 (Leaked Context): thread_local in BasicBlock.cpp is scoped to AOT_BUILD_CACHE build variant only, holds a JIT compiler instance for a thread — not request-scoped identity. CLEAN.
MOAD-0004 (CWE-312): Iop_Secrman.cpp logs AuthCard port/slot/cnum numbers, not actual cryptographic keys or passwords. CLEAN.
MOAD-0005 (Thundering Herd): no unsynchronized cache get+null+compute+put pattern found. CLEAN.