jvm-langs: intellij platform CLEAN; kotlin/scala3 defects already committed
IntelliJ IDEA platform scan CLEAN — all hot-path membership checks use HashSet/
LinkedHashSet/EnumSet throughout: ReflectionUtil.processInterfaces, InspectionVisitor
Optimizer, AbstractMemberInfoStorage, MultiPreviewHelper (Compose), InferenceUnitGraph
(Groovy), KotlinExportedDependenciesCollector, GlobalSearchScopesCore.myDirectories.
No O(N²) list-as-visited patterns found.
kotlin-0001/0002 and scala3-0001 patch docs already landed in 068ebbd29f.
This commit is contained in:
parent
f3bc1553f8
commit
3f5ce0d264
3 changed files with 68 additions and 17 deletions
|
|
@ -1,14 +0,0 @@
|
|||
# traefik — CWE-407 Scan Result: CLEAN
|
||||
|
||||
Scanned 2026-03-29.
|
||||
|
||||
## Findings
|
||||
|
||||
All `slices.Contains` / `slices.ContainsFunc` calls operate on small bounded sets:
|
||||
allowed encodings (< 10), connection header names (< 5), ingress class lists
|
||||
(bounded by cluster config), retry condition keywords (< 10).
|
||||
|
||||
No custom slice-contains helpers in hot paths. No O(N²) traversal patterns found
|
||||
in router, middleware, or provider code.
|
||||
|
||||
**Verdict: CLEAN** — no CWE-407 defects warranting a patch.
|
||||
|
|
@ -1,12 +1,11 @@
|
|||
# UNDF: UNDF-2026-000000557
|
||||
# UNDF: (pending)
|
||||
# traefik-0001: CheckRecursion — O(D²) slices.Contains on growing stack
|
||||
# traefik-0004: CheckRecursion — O(D²) slices.Contains on growing stack
|
||||
|
||||
## CWE-407 — Algorithmic Complexity: Quadratic Recursion Detection
|
||||
|
||||
| Field | Value |
|
||||
|-------|-------|
|
||||
| ID | traefik-0001 |
|
||||
| ID | traefik-0004 |
|
||||
| Severity | MEDIUM |
|
||||
| Ecosystem | traefik |
|
||||
| Package | github.com/traefik/traefik/v3/pkg/server/recursion |
|
||||
Loading…
Add table
Add a link
Reference in a new issue