engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

diamond-recursion deeper scan: CLEAN for pytorch/tensorflow/sklearn/ray/prefect/luigi/numpy

Browse source
This commit is contained in:
russell@unturf.com 2026-03-29 17:53:36 -04:00
parent 60cd7aa41c
commit 36b07aa1f4
7 changed files with 93 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
defects/ray/ray-diamond-recursion-CLEAN.md Normal file
View file

@ -0,0 +1,13 @@
## Diamond Recursion Scan (ray) — CLEAN (deeper scan)
**Scan date:** 2026-03-29
**Pattern:** Recursive cycle/dependency check without visited set (CWE-407 diamond recursion, O(2^D))
### Files examined
- `python/ray/dag/dag_node.py:apply_recursive` — uses UUID cache (_CachingFn) for memoization — CLEAN
- `python/ray/dag/dag_node.py:traverse_and_apply` — uses `visited = set()` — CLEAN
- `python/ray/dag/vis_utils.py:_dfs` — delegates to apply_recursive (cached) — CLEAN
- `python/ray/workflow/` — empty (only __init__.py) — CLEAN
### Verdict: CLEAN — no diamond recursion CWE-407 found beyond existing ray-0001