From 780d7fde870d6a7032ee33a779ea6efc3a03fdd4 Mon Sep 17 00:00:00 2001
From: "russell@unturf.com" <russell@unturf.com>
Date: Mon, 30 Mar 2026 09:26:18 -0400
Subject: [PATCH] undf: assign UNDF-2026-000000751..752, stamp patches
 (bullet3-0001, three-0001)

---
 UNDF-REGISTRY.json                               |   4 +++-
 ...3-0001-ghost-object-overlapping-hashmap.patch |   1 +
 defects/bullet3/unit/Bullet3Test.class           | Bin 0 -> 4405 bytes
 ...ee-0001-node-builder-array-includes-set.patch |   1 +
 defects/three.js/unit/ThreeJsTest.class          | Bin 0 -> 4206 bytes
 5 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 defects/bullet3/unit/Bullet3Test.class
 create mode 100644 defects/three.js/unit/ThreeJsTest.class

diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json
index ea3770328..15119882a 100644
--- a/UNDF-REGISTRY.json
+++ b/UNDF-REGISTRY.json
@@ -748,5 +748,7 @@
   "libgdx-0006": "UNDF-2026-000000747",
   "nomad-0005": "UNDF-2026-000000748",
   "consul-0002": "UNDF-2026-000000749",
-  "nats-server-0002": "UNDF-2026-000000750"
+  "nats-server-0002": "UNDF-2026-000000750",
+  "sdl-0001": "UNDF-2026-000000751",
+  "three.js-0001": "UNDF-2026-000000752"
 }
diff --git a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashmap.patch b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashmap.patch
index e42cd5b23..2a2f88f6d 100644
--- a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashmap.patch
+++ b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashmap.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000603
 # UNDF: (leave blank)
 --- a/src/BulletCollision/CollisionDispatch/btGhostObject.h
 +++ b/src/BulletCollision/CollisionDispatch/btGhostObject.h
diff --git a/defects/bullet3/unit/Bullet3Test.class b/defects/bullet3/unit/Bullet3Test.class
new file mode 100644
index 0000000000000000000000000000000000000000..5813aabf720fe276cd93ba4dc3062178394541a3
GIT binary patch
literal 4405
zcmb7IZFCe@8Gi2W?9S|FNFZbv7DyRBQu0XxHA%^mln@9cgh0C?G1Q8a>?9f3%q+XJ
zF{!rHN^Of;wW3lEO0Cw2qSmUA5NWk)J*R&?{_q@s=<%Pw{ZkHYeDB@aWb)B^%*mOL
zJMYJHpZmP;y~%qY-gyf^JKhb$2fqwSMF2sDwP*DSy*{N|qxC0-&KkoGLvX)onNAyn
zzp|>o2ns?n!YYcOG87B*oMWcyd(12uE2d*)bjQvxL@TR$7C(2n<MARCqeRA973)yS
zP`c8DK_1hyy~ZTPqnxL?N12KUq70HHhRX`EJxJp+HWm<x;U3!>4Pyf~so0Dy451Va
z^y{gdA>wxPZx5*03XL*O@bMEP4C^bqUEB*n2(yCiDt2HedFsg|L!>f4H*bE9RKbHP
zcA=7xX3Zz_iMsf3wTc?llKZGZ(~4Afd6VR+7HM{?s7C|YWx3t1%C1%NtQ_JQ_NsV@
zX9#ADaeKljLL-`FG^==+!(Ow<^Km`RP&8~?j&54nW5!e%Eg<&xb1qsL)(KNFvo6aq
zMh&r;O8~p$gt!rps5pRjLY&SK;)houW+mQLC*Oz;PSPQU2UiKQiVMfxsp1HyTQMz1
ztSyJs#i=+X<5*!bLZL_X>{!BZ!sy0vF85xBn43s^@32!TQoLzfaW3?ecvQw?DiX`+
zqYy;0aXzP~vNBGQVix&2JUMKnd4w<q@JShioYK=v$|~VxOl$Oi&oOToFQqd5l!_<t
zX@(8s`Z=S+wuW_Qz;wpwDeLH#lV#}k66Sh(SpUcoFR89k7=8E*r$=9=a`$^xzl`C+
zqy=y7nT$Tg%Rh`E-b<*6@)BBLofH>_0e=`K&dNBaB873%;K3X*?mX0I@YWHb!a6Zw
zWKw!MO$?n$nU<lG^vb+z#M8vPt4{Mswu&^)6O?6+)I7!*cC2vA6CywnARa{lai{Y3
zX6h+z#7w1l+?<LDe3qd^&t{E`bC|C*EjpPteq2leZ6)bd{R*Zii#|dfP|Fx~gqCOd
zoQltL5;o?`b>+;t(bFm}@F_-D8u3{MNF4mfr{Ig!N((7?`D@06VP#9f@Eljqml&!l
zyShE_3MIUX1VVTLFUq*2;>-BTQt?h@9fLsoZC>k<d^pptKS`Q)NFatj9#`-Z!@;5a
z($+OJH0;q%wkHyr*4tW<)U^Dvp0U$e@ye&M@IpI>X}4DF-ZL^;K_&Ecd_%^|yoA2F
z1jQjcH<Y5@8mT<wMV}vzhw&|ZTgG=(T)`^^p)SQp^_%91NvZo+shr0>G`X$W&9gL2
zJa|CR50ug_`d!ZR_g0`<C@T}Ms`x(NWJ??pysLfAkAff261S&Pn#-ET4YGnZKAYE7
z{D_yMEI_9$+FUy9BoR>3Lp9Qy8y_+<eY&7zO~TQK&yl>{_fWzdwR9(!A?rd{6&1kM
zy5BQTzFEfGcu_E%UM}-h4D+sqVp?I~iChqx8$7(wBdMSU|G!Kh0os#np-B-(<Fvi;
zV~BS-J>SC#JC_+YI!!L6wVqbAoA+}*WZO>G$>{0hhBIa-vkHF0u%)xTt4Cuk8tu<n
zEoqL77@6Ig-paJ0R;J)KL#?ndt)wxj(I%TEq77?!O4A+9B(t=Wp=*|oNJf%-%rb1_
z9xa+NnWpW>NNS=Cw6<1l?_{kuYC9S$31Tjc-{P)}x46vSX4tv7>zLMrea@)Q&n>?{
zbn3&Df%?uBufAQw{Ctk;Rx)K|clOx!xm-HFl0?tQ634!&w6Ti0m*%BaBaRYohz>oK
zO3)!OPA##^vW!eeinm$XN#9|pSTU#7pvw3o!vi00N)?`;7q(Fw^@%c7s2S2Bm#)+F
zUQTyL_dxY+uwT*x!;k68KLhLOJVjd+IdaqUkZ2reuAYU=&|5c)H4LwyoF3LQ{0<v#
zA=WHKrLC8*BH+I{J^zpDturW}#Wo)Xq?_dG6TzdDABf=rY@$QrW>jMfomR?mgGN>O
z??aYRy!9Sg|3vuwlwi;%;lg;Gyt)4wUz@*4ib#Z}g5fo6uZ~EwsPef$IEYY0YMVyr
zqQs`>|5kpDgQ_mC&O1oSg7GZs{21^I?^z0WJEaE^=)-obrPFT}-Rn_7kawXMm88Qe
z7rOKT0*vjrhd{ssopxsz`V;UIhd@J(CV2UTkLV*%;x!Lz2K#2w#_{A$mQhzK{OeJI
z212q2yRlc~_JftUDQ^;7+AZCbcgcanx80NnIX^8eQcU`@phJ)+C7S{<=@t%00@ty(
zIua;Q!xuDIEj~qq0y3wnMm)!eZ2^><bIRNdN0+i!jWDHeBE-#z(ji>KK3eb=e%8h@
z?8hM5=)Cj@E$;!BMc;iyWwhMKLFSnfokfT}u0z`uK+_z$2T8U)z5Jnu9$KV2j_QOD
zSFvdheS@`iGw6>=bh(4af!jFqHrKdUhMfq}(Rn?Nk{r8eO^*o_MPMJGQN~I7#m~q^
zqJrpi;ryH!r5!BKux}isR;rt4*0KM@=P)#Q8_6E`etZrFy^r>WcwKCI?(#Kku89(!
zv4Pq;ezyjqQdn=6rsw}vQ(KyufkT#|=3uB<i7LYWl)oulBMPpiC|2Z_Tor#>tT{Cw
zB&tRgu6n5{JdNP={9mF$iXEg(ipZqUn=(CrgECEuOobffHQeG!j*0G14MdePJR@xX
zNw&|Dt-nc$D79{-9jlEfUWJ6}q9Gv;S6qbiU95=}aX~595#=ipQKF$((H&gOufj!z
zO7e}UbSWCVWbaen#Pg+JmG8ng=-)&YkQgMkC}LtTAf%QU3~nS~UrXG=<$;X^?&_6m
zDCJ={DtB;g`NF<Lr2#5U36D}gc?@Or$IBL+qH^u0f*Bw&o+81WMkkeS56;ktPH#ha
znGWYyFoIWU><0DAH>ml|kucwZh4<+BuT)ikhl773hkKY{VLBeiFv)7+u)TPS#ql&d
zf(vYz?xXkuOXFE~fo9D6+7T4b(+MuXWGLddks850Z2b@=l0<!@ls**KQqOxI(fhQ7
z_pps_B*J|X)x!HIrKWNpJ${cEL-++j%=hM6y7P{$&fq#H^R-*};bJ#0rpf`Hr|S#!
p4~rK)G5pBa!<+aOS(K5*9g6d7alIw3Gt@6YHO%mP`~iPL?7wq#SKI&q

literal 0
HcmV?d00001

diff --git a/defects/three.js/patch/three-0001-node-builder-array-includes-set.patch b/defects/three.js/patch/three-0001-node-builder-array-includes-set.patch
index a9fbb03d9..346042e7a 100644
--- a/defects/three.js/patch/three-0001-node-builder-array-includes-set.patch
+++ b/defects/three.js/patch/three-0001-node-builder-array-includes-set.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000752
 # UNDF: (leave blank)
 --- a/src/nodes/core/NodeBuilder.js
 +++ b/src/nodes/core/NodeBuilder.js
diff --git a/defects/three.js/unit/ThreeJsTest.class b/defects/three.js/unit/ThreeJsTest.class
new file mode 100644
index 0000000000000000000000000000000000000000..0d8e991b2f3359eae4e387101c22e6a79d722cb6
GIT binary patch
literal 4206
zcmb7HS#uQE75=VfG(9tFZ6gpG+2Cf8(FS4*1TA1mfRPXadt^YE7+O+GY8Xw6nI0h$
zhs2JP*mzCs#6X<&!75iJl}f4t0xHQ{9#VNoDwVe+KOj|kOQkA2pnRvhM;amFvJrLr
z^j*&Ko$s96^T&txeg~i%KaHaVAq`<2rHCk0T{LIRwzQd<Xge`-(HeCXBAs@|b`L0o
z8k<g)A&QuWxQ;UD3Kib=ylbc12J9R+M@OBEYucHd!rI1xN0oInofQQYIx6LK$Q&Ef
zP_0n2q^3KYHLr@UII0km-D`BLMJ-j^u9Y=iC#z7~*yQW>EcXTT9c8FPQbWCtC-9^~
zVo7UZi-I<3<_4`<y2^0qO&vDqcnXF>IO9#PDd;W&ftoi-*qar~mz1U~SLQ1;Jgrc@
zG=J30O>!-c283j25^S3lk^vx|)4fhQO?Yi5)6sM)j#g~buw6$Rb|{n$O=c~tKR09v
zq}3yNJ3W?~G{>y$c~jsaV8yBgt&XOCQL;<NZqZO#d?shPF?<1gHSE*zMeJXe<<!-j
zYfTXiCr?{zeOPU$?PS)@xG6VlnNuB6bSQMY;?%YsJ9g|en72V^%rcC@u7)wg@SHmD
zOy|5enp>2aFWc#A*uHaowjmQo7Y=ARsN)%Q7ZCGM?#sB=gvG>aGiEw(ofwxC_XRmF
z-q8_9FAixqEIN)9_~-2ya557DOn>n)ndF(H=+n?IXO1lk{*aR&Nn1kIL&c~3X`VZd
zK@BH#oWyelk}ija)iEtV(c#Wwx)V5?mS0?@0#-#h@(im{{%LrjV9AT>@a(8HEi6fJ
z@wARJ7*<#}WnQv+oy@4|p0?ddN;%iexL(aI3nXwOjv>4#Bs}*>RR-&RS-+&?JT5Q?
zx%`M<%xfC^3Q1TjaiUU%CgIwsjxi9tnsGbL3Or<`UGu!18M9_3f16h@w5Vc>7(1b3
zQnXYSYaxZAxTw%u#5sT6C~z(?w8*r_vMvFI)8g-xjtm@DaKPR|Ej2vGQxAW?2?iy4
zSw|K`xvZdpMiurv=DY`4%5pnaAptAC0eKxW(gq{e<-D2BMKP;z@JM&xK)W$x=h*GW
z3>wH8WA^yCl{H2z_ljj@{Ax4IjJImoQ`2c{%3{+MmQcx;iDeONC%aQAA@a*QzAE|G
zJiew`jIH>Zj;~A8FL&8!yq+V~9mT7pSa&*Ycxtv^%o(ztGei~JWG^e9HU{jBHJG0o
zv9d#^S48D0*Brfc+?)>HV<~$gW4ie)ckh1`qt2C}99R`7g{`0IY*W9&xzDt-h=<J1
z=WyiM=T$E>Usb<28(%DKGAca9J5!ooamQG!PHs*)`Ru55#FlPV<)zBM9=6N1!>Jy}
zadU3goIY;3lg=1<@Lh!_pG<{r?KNY=nw{poLv9`DGIq_j8WWCds3<;AX!N%Sh4v}C
zD<k-R93SF_hMUroZYgZ>u0OA2?97aF$!hbx_q)^)bCmZs@2wjFgvA?ukB^ejX)Cv7
zz;Q0+r;Di&z)(b(z=D5p=<2k!%JyO)3q`zAMX#Aor&wvc-}Jsr#>)1l&0NmPY51W+
z!-|+zb5+BS6*heOR@S&57dEo&O1w@VV_)JY7sqe#eLbIw&(h{QP`{#}@ES*11~%|3
zh^>nUWosv&qN1j`<u0@m+(Ma1<s~>R2TQzz6$nw@j5xL+fv53JzJ;I?_?EZj+tkQU
zjX>j{5k`#jnfs_3zJtU-th@OxY82YT$?#pQQ@DwgNb5OO8rmD7Ia$?`TCi$}B&$&)
zZgwZ5$<mJz3-680Au_k{_qCB*sA@@;`cBG@xrI-RUwEEKl+AQg#wc1SwX!vCM<e|^
zO%KmuCoJrOjXg;7D@Fn_5P67%hG<wr-9xO`P@*Vpet?qyp_*e5<?GbQh8;wClurTW
ziI&#8*eJNwG*c4XWM<1U{1Su&=%72D#IFnWI9R~2KG6OKwew>u(Edvv(0C+O!0<jA
zh~?Jfv7P|SQUSoja)(HQR%Bz`>}gF#0)N)Fh$s$ubK=q5!k;!i3RDjb_wp7#M9&Um
z8;%g7XX)orzV%@c$M75mJa6j}TA=Htgv$HBNdN<OFNcV?co4)N7=)xE9qSIlXb-RO
z{^X+fp}ktbglICl$OK9fTg+oZEE(~bpao3OZlOFGE`&L^@be-XY+_u%^YkUfUl&7U
z?I|>o1ZVg+fni+4*`@T?Fcb#0BK;Lhv0bM=ep>{weazTI{|Sk$VYuZE8r#E#C`*GV
zBjTBtqb89g4$X@rEClyRQ=TjpS+X>@@YfaYzeIEAq2mI7w3uYa2zfh-ets$)rz^tV
z^^%nJi1<li7@Pb^fY#-{^KSNiFX<t**03j-)#^VT1%idTo~-{F*0tP635lkBmtHGT
za|{1!nMX@Ehn@Sv#`W6pb!UI%*VvP2*M7^rq564rriR1DJbF^YrL|%28L5lR<Jr`0
z44kfutikg)K0@L?hKB1R_m~FU!P(!7;g(Q+Y5Fd{6yl889&JfR=P|M`<~_&vmDR?s
z*Ot*-xtOz;nX8Qj_R0c#<%{;pi|v))!=)vA>_+XCg)CJCHPv1n&@Pco1nGK8BuQ6I
zvNBmSk94vsSuMi!+`>QPShA7{_k=16x8ahA5?|tqgeLA@y^XIdHPCDPQ3!UOFuRV9
zDQv|wJJV%$q8!@cvgq>6ugjdyus2`f$JNVtkK+wo!%z5G^$A|VZ}2Mq!sp-ExBtnu
z{BOLD|KbfS;5u*IH`QjmrJC`!+KqSAUc9RY@t!(^_tgb_;4$SGw1=o*Ym2G}!t@uy
zVN%CIOr|LNBdBi^%9qV~jAD6^TCDd6XxNB18BUnj$q-xpTX;LD3b~EsiqYqBO+a`h
y0Kvb0{9EKhw#^%?$eTqvLU@O#O7Jd&1}Z3hk9xl2jql?JoQw1QBm9V9B>xX*A?{fK

literal 0
HcmV?d00001