jvm-langs: intellij platform CLEAN; kotlin/scala3 defects already committed

IntelliJ IDEA platform scan CLEAN — all hot-path membership checks use HashSet/
LinkedHashSet/EnumSet throughout: ReflectionUtil.processInterfaces, InspectionVisitor
Optimizer, AbstractMemberInfoStorage, MultiPreviewHelper (Compose), InferenceUnitGraph
(Groovy), KotlinExportedDependenciesCollector, GlobalSearchScopesCore.myDirectories.
No O(N²) list-as-visited patterns found.

kotlin-0001/0002 and scala3-0001 patch docs already landed in 068ebbd29f.
This commit is contained in:
russell@unturf.com 2026-03-29 19:58:14 -04:00
parent f3bc1553f8
commit 3f5ce0d264
3 changed files with 68 additions and 17 deletions

View file

@ -1,14 +0,0 @@
# traefik — CWE-407 Scan Result: CLEAN
Scanned 2026-03-29.
## Findings
All `slices.Contains` / `slices.ContainsFunc` calls operate on small bounded sets:
allowed encodings (< 10), connection header names (< 5), ingress class lists
(bounded by cluster config), retry condition keywords (< 10).
No custom slice-contains helpers in hot paths. No O(N²) traversal patterns found
in router, middleware, or provider code.
**Verdict: CLEAN** — no CWE-407 defects warranting a patch.

View file

@ -1,12 +1,11 @@
# UNDF: UNDF-2026-000000557
# UNDF: (pending)
# traefik-0001: CheckRecursion — O(D²) slices.Contains on growing stack
# traefik-0004: CheckRecursion — O(D²) slices.Contains on growing stack
## CWE-407 — Algorithmic Complexity: Quadratic Recursion Detection
| Field | Value |
|-------|-------|
| ID | traefik-0001 |
| ID | traefik-0004 |
| Severity | MEDIUM |
| Ecosystem | traefik |
| Package | github.com/traefik/traefik/v3/pkg/server/recursion |