libvirt-0001/0002 + xen-0001: cpu_x86 g_strv_contains O(F×A) + x86FeatureFind O(C×F) + credit2 balance_load O(V²); 21+11 PASS; count 608→611

This commit is contained in:
russell@unturf.com 2026-03-27 23:02:58 -04:00
parent 87099aaaac
commit 47a312b0c7
26 changed files with 1308 additions and 4 deletions

View file

@ -3,7 +3,7 @@ ba0de5d1546aa2971492f74616f13f47 full-paper.pdf
3fda5736a004c621f52701c92a7ca7f5 undefect-cwe407-2026-03-24.pdf
f076f22e9e70a94f51884562aad6fdc5 undefect-cwe407-2026-03-25.pdf
5da33a4087fdca81f70cce84656afc7f undefect-cwe407-2026-03-26.pdf
d6fd8ceebdcd075f3e39b73e1bf7a3ad undefect-cwe407-2026-03-27.pdf
a8255781f9de29bfe9d53565ec9ec541 undefect-cwe407-2026-03-27.pdf
ff52abf9f47a7e6bb25e4519b1325090 undefect-minecraft-enterprise-java-2026-03-24.pdf
c7fe499eb004271b384a31ac01b38852 undefect-minecraft-enterprise-java-2026-03-25.pdf
818d29731df88333d29cfdd3eefeb3a2 undefect-minecraft-enterprise-java-2026-03-26.pdf

View file

@ -39,7 +39,7 @@ A single well-crafted implementation serves as the genetic blueprint.
4. **Harvest Stage:** Mature implementations compile into comprehensive documentation, ready for use
Code propagates according to its kind — clean architecture begets clean implementations,
elegant solutions inspire elegant variations. The process of generating 608 validated
elegant solutions inspire elegant variations. The process of generating 611 validated
defect patches across 240 ecosystems in a single research wave demonstrates how truth,
properly seeded, multiplies. Each tested patch validates the correctness of the original
diagnosis & extends light into new programming paradigms.
@ -159,7 +159,7 @@ the missing linkages, applied them, tested them, and benchmarked them across eve
confirmed site — compiler, routing, database, build tool, event streaming, web framework,
query optimizer, and browser runtime.
**608 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
**611 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
1 fixable-upstream (Erlang OTP). 1 fixable-pending (swipl-0003). 2 not-worth-fixing.
3 unpatched (Minecraft, Create mod). No language left behind.
@ -446,6 +446,9 @@ stacks, Spark schemas — this is the dominant build cost.
| vim-0001 | Vim | `src/insexpand.c``ins_compl_add()` walks entire completions linked list per candidate in batch add; O(N²) insert-mode completion dedup; fix: `HashSet` built once before batch (499×) | **PATCHED** |
| vim-0002 | Vim | `src/autocmd.c``au_find_group()` O(G) garray scan called per autocmd dict in `autocmd_add_or_delete` loop; O(L×G) total; fix: `hashtab_T` mapping group name → index (200×) | **PATCHED** |
| qemu-0001 | QEMU | `migration/savevm.c``find_se()` O(N) linear scan over `savevm_state.handlers` QTAILQ called per section in `qemu_loadvm_state_main`; O(N²) migration load; fix: `GHashTable` on (idstr, instance_id) (250×) | **PATCHED** |
| libvirt-0001 | libvirt | `src/cpu/cpu_x86.c:3219``virCPUx86UpdateLive()` `g_strv_contains(addedFeatures)` O(F×A) per VM start/migration; F≈500 features × A≈50 added; fix: `GHashTable` alongside `GStrv` (50×) | **PATCHED** |
| libvirt-0002 | libvirt | `src/cpu/cpu_x86.c:416``x86FeatureFind()` O(F) global feature scan called C times in `x86ModelFromCPU()`; O(C×F) ≈ 100×500 per VM start; fix: `GHashTable featureByName` in map (500×) | **PATCHED** |
| xen-0001 | Xen | `xen/common/sched/credit2.c:2835``balance_load()` cross-product VCPU swap-search O(V²) per scheduler tick; source has `/* FIXME: O(n^2)! */`; fix: sorted runqueue + O(V) pass (5000×) | **PATCHED** |
| perl5-0001 | Perl5 | `pad.c:1168``S_pad_findlex()` O(N) reverse pad-name scan per lexical reference; fix: `padname_string → offset` hash map in `PADNAMELIST` | **PATCHED** |
| nats-0001 | NATS | `server/jetstream_cluster.go` — JetStream peer dedup `slices.Contains` in O(N²) peer-set rebuild; fix: `map[string]struct{}` (50×) | **PATCHED** |
| spring-0003 | Spring Framework | `context/event/AbstractApplicationEventMulticaster.java``allListeners ArrayList.contains()` per listener add; O(L²) total (200×) | **PATCHED** |
@ -888,7 +891,7 @@ where D is the depth of the diamond chain. For a diamond of depth 10, that is 2^
1,024 redundant node visits per edge check. Large modpacks produce diamond dependency
chains with depths in this range.
**608 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 17 CLEAN (WireGuard-tools, Solana, git, JGit, Dask, OSRM, Buck2, DGL, Protocol Buffers, gRPC Python, Apache Beam, Apache Samza, PCL, MLflow, LibreSSL, Sidekiq, InfluxDB).**
**611 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 17 CLEAN (WireGuard-tools, Solana, git, JGit, Dask, OSRM, Buck2, DGL, Protocol Buffers, gRPC Python, Apache Beam, Apache Samza, PCL, MLflow, LibreSSL, Sidekiq, InfluxDB).**
---