From 79a77db4f8eca01514761f0bae18b2b217e40f7f Mon Sep 17 00:00:00 2001 From: "russell@unturf.com" Date: Mon, 30 Mar 2026 10:25:20 -0400 Subject: [PATCH] undf: assign 768-770; stamp minio patches --- UNDF-REGISTRY.json | 5 +- ...1-broad-phase-move-array-linear-scan.patch | 1 + defects/box2d/unit/unit/Box2dTest.class | Bin 0 -> 3694 bytes .../unit/ClickHouseJavaTest.class | Bin 0 -> 4147 bytes defects/consul/unit/ConsulTest.class | Bin 0 -> 6242 bytes defects/cpython/unit/CpythonTest.class | Bin 0 -> 5382 bytes defects/flink/unit/FlinkTest.class | Bin 0 -> 4514 bytes .../unit/FreeSWITCHTest$CodecPref.class | Bin 0 -> 1512 bytes defects/freeswitch/unit/FreeSWITCHTest.class | Bin 0 -> 4791 bytes ...Factor-SmallVector-is_contained-O-N2.patch | 39 ++++++++++++++ ...ting-getOutliningPenalty-Region-O-R2.patch | 46 ++++++++++++++++ ...01-heal-tracker-isHealed-linear-scan.patch | 1 + ...m-isBucketDecommissioned-linear-scan.patch | 1 + ...replication-set-equality-linear-scan.patch | 1 + defects/nats-server/unit/NatsServerTest.class | Bin 0 -> 5581 bytes defects/nomad/unit/NomadTest.class | Bin 0 -> 2963 bytes defects/opencv/unit/OpenCVTest$Point2f.class | Bin 0 -> 744 bytes defects/opencv/unit/OpenCVTest.class | Bin 0 -> 4049 bytes .../prometheus/unit/PrometheusTest$Rule.class | Bin 0 -> 1046 bytes defects/prometheus/unit/PrometheusTest.class | Bin 0 -> 6159 bytes defects/quarkus/unit/QuarkusTest.class | Bin 0 -> 6212 bytes defects/ruby/unit/RubyTest.class | Bin 0 -> 2892 bytes defects/rustc/patch/CLEAN.md | 51 ++++++++++++------ .../sdl-0001-gamepad-mapping-tail-walk.patch | 1 + defects/sdl/unit/unit/SdlTest.class | Bin 0 -> 3202 bytes defects/storm/unit/StormTest.class | Bin 0 -> 3588 bytes ...oadable-by-address-linear-membership.patch | 48 +++++++++++++++++ defects/tidb/unit/TidbTest.class | Bin 0 -> 4143 bytes 28 files changed, 176 insertions(+), 18 deletions(-) create mode 100644 defects/box2d/unit/unit/Box2dTest.class create mode 100644 defects/clickhouse-java/unit/ClickHouseJavaTest.class create mode 100644 defects/consul/unit/ConsulTest.class create mode 100644 defects/cpython/unit/CpythonTest.class create mode 100644 defects/flink/unit/FlinkTest.class create mode 100644 defects/freeswitch/unit/FreeSWITCHTest$CodecPref.class create mode 100644 defects/freeswitch/unit/FreeSWITCHTest.class create mode 100644 defects/llvm/patch/llvm-0001-dagcombiner-visitTokenFactor-SmallVector-is_contained-O-N2.patch create mode 100644 defects/llvm/patch/llvm-0002-hotcoldsplitting-getOutliningPenalty-Region-O-R2.patch create mode 100644 defects/nats-server/unit/NatsServerTest.class create mode 100644 defects/nomad/unit/NomadTest.class create mode 100644 defects/opencv/unit/OpenCVTest$Point2f.class create mode 100644 defects/opencv/unit/OpenCVTest.class create mode 100644 defects/prometheus/unit/PrometheusTest$Rule.class create mode 100644 defects/prometheus/unit/PrometheusTest.class create mode 100644 defects/quarkus/unit/QuarkusTest.class create mode 100644 defects/ruby/unit/RubyTest.class create mode 100644 defects/sdl/unit/unit/SdlTest.class create mode 100644 defects/storm/unit/StormTest.class create mode 100644 defects/swift/patch/swift-0001-loadable-by-address-linear-membership.patch create mode 100644 defects/tidb/unit/TidbTest.class diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index 67c8375dd..bd4460efd 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -765,5 +765,8 @@ "arrow-0002": "UNDF-2026-000000764", "duckdb-0003": "UNDF-2026-000000765", "duckdb-0004": "UNDF-2026-000000766", - "tidb-0003": "UNDF-2026-000000767" + "tidb-0003": "UNDF-2026-000000767", + "minio-0001": "UNDF-2026-000000768", + "minio-0002": "UNDF-2026-000000769", + "minio-0003": "UNDF-2026-000000770" } diff --git a/defects/box2d/patch/box2d-0001-broad-phase-move-array-linear-scan.patch b/defects/box2d/patch/box2d-0001-broad-phase-move-array-linear-scan.patch index 575ec00ea..bd6970017 100644 --- a/defects/box2d/patch/box2d-0001-broad-phase-move-array-linear-scan.patch +++ b/defects/box2d/patch/box2d-0001-broad-phase-move-array-linear-scan.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000015 # UNDF: (leave blank) Box2D v3 CWE-407: b2UnBufferMove — linear scan through moveArray to find proxy → O(N²) on bulk destroy diff --git a/defects/box2d/unit/unit/Box2dTest.class b/defects/box2d/unit/unit/Box2dTest.class new file mode 100644 index 0000000000000000000000000000000000000000..5be7c6d9ffaa12c76e7b6aaa281d68059eb74bdc GIT binary patch literal 3694 zcmb7HNpKX`8UA{07)ZjLzX~7m;uQHwn}(nnNm;V=g%)w;U3?fPAleB+Vc>RY6q0 ze((M3_kaKEH-CI||04ihxD|yDei;D;L4+ifo!2gCjaki@Y#bgtua7$tLhTtN<8(;y z$7@Gqge7cng>p_N+t_7U+WcU~cA}8skD>&MjCBguqf|oqim?I1(I<6Ff_y>C=JeqS z36=4I+QC&4Z6zp2g^UdfHXyy8>0HhckvVB0?3)Pb>Hgc2e0E%DdwOYdBxMBs6y^ z*e%?KEPckjpv$OTg2jceU$du%wAm=)@Ry(-du22zXhf5Qbt{Qeg1%>S^nGZJyjOcJ z#5JFru-+_!*)L(&8b;PoiQoWQWE@m*2#1TPk({?3eTFfaBBq!ZK*nr5VG*^YW9iyV zTNrH;IueP5I%du_r}s8BHSKFv$C^(Y-MNVg-5MesYBpo&nx)#~nxUG8I+n{$t7+YK zEOTC^Y7_}{$aq#kC%Tq+SL}z3niXEN#uKDq7#U--t#%}e9`wpMqM#4Ykx)6Zxv^Ws zbc&uNlnSrCp3`L3yh!Sh9Y=-QfP$k!r%iJE=Q zoK8@}n;zoK(wvN$sA;}w+))cBr}X3Ei8msY>Og^Q!-8q zospt4^qRS`EIA&F_ZDh-%hXHY1qCUbA^lv8*mUiMrO!ij_EQN|40T(Cki4kiCA`c? zcWSn+Tg=U{do#AiK-iYjnNa5d4;KEDF(#pErN6tD#E)2(X;n}ntw0B3+BBn0>piA1 zt~sL_XNqsOqZy99DzSXLQD~SF=T+v3k}sVDBVkOliURW}W?;xL70lw5BJez8gl59D zW;F8P@c#vkTeN&Y6_8+yWN4+RxAOai#mO&)I>RnXsNnfKCv@kd`^gb z{)zt2?-!Ks(;W&rzpCJi;*ekGknL^%4Suu)~kwLTRqX0Og2RERV>JO zO~KdjI{RRyoIP3ApL*=pjHRcStDAH*C&vwbEXcb+kC`SxO9$EK$8$4dx^+r0g&|OG ze3}QFJD2fw3BI!fRG85+?BvRLAt{%#BKyPb<2*Cm&rvjK=B#nOFC*-&UvB6I5hE+z zZJLhlSlaB6?o63!JB;s0Xc=2Ri`2fZfx%W)pPS`ZPEUJ%s&=Rcn&wo^VQcRrIQ8nJ z>8Mf|@ABAJ)w2SWmx>NFuf3%LoiN^$(7DRdaQyi1Zr7@lmU+>cT6Wv!`8_~i3CVjG zeiL+gUBb|sE{iRVo5n=OnqdZUHx|#-95dPf`>XDXXK=2zG=%R(@jkvU;|GFHA4u4_ zQqYWX!JO6`J*>TM?9;{_(;_k7D{PItpa*NeW~8&ay>rksr*pGytEpJ9QlxllepX*Y zys+#`?Y!DVkCx3QGmg$Lj51&ty5+J_w`KfDLd~k2)(Ta|Pb6&n-=aJmyu7f3-Q#1! zN@Z2z_~ToMJCEuNw*&VGtyNZNVf!Hfg3RD?xB+G4f#B=| z?xEU;-=gFWw#5P;;BcKM8Aumww8#{U$*%bwevB5#)X>{4L>5AH__Kw;<6Dp4QGd?h zd~W!C3|-_F#x|5Pu;<7Mh*RVT6%YkBDg7Q6vxM^x*sj|E+ceJ)_Fq0ON`;PmDYk@GCw z#B&A6EW=9lT%iI0>)rRw1mAVM0=a;5AxIS8+VLcctxT{DW&9>@B4%}X7A<^lCw3j= zRzG?%h$DEBL@_yg4Fh_$My`?eUu=) zTW;cH-PQ)dyG3*#42q%upj;WeTq$2R4@ZQ-WAd-zOZmlCG?@xi64#+*Dp*O1aST;O z7I89p2cx44q7c8JFPiFfhyL#Emv_)k@HWm~$5U0ojW~DpeN;SvmZ}Qg$2f2olfMyO z&IepCRkVIGxrpq2SO8OD&>}L~9s3VP7*}P4CQDqCYE_9anwzH8jjmPB@8jZXyCr$M zYdE^(Iud>CHNqHwQUE6j>M57%tr+2Nr%@K_1w79i*2_49OB`Qi8!T{k1?TWKK8tI- zsoZ5wf5HU*ib?zpQ}_q3Ev3AlY(ZAqiy7%K-`ioh*43#D|}k~Sz|NyZ!Xb;jVttcGF9~4 z!B?(B4%|Y({~^wujxNEvAbd(EKk4`uCqB0I+Z?Oeqc Nk8ob3AjAT zI(wh}|9kKM`~J(`^ZT3ceE{G9u7pqqp8~&z0D=PHQ^u^(mNBvuZNsCd%rQqGxHp|m zJNpEDvG`F1sz8maly}mZwt;kZ%1jNUZ6^c;z6cks(4b+Jz?x}e%IvYSV}^4q?M$*~ zJ4V*A1){OO_`u>u2`87%PISoysx*XA&8>`7O6rwp70l_1pNK%9LMqp2h@w_NO*>}J zaIBm_ZOmKPHLlMa@2Wr@>J_Zjunr9ZkwyE9Dgw%+VGo&e1WcSKL&auqP8H+1mu4d{xO;jeIqR z(1KP4Z5p;=`_f&`*p4~PwX;Un8c9!^uF?JFobaHAo!G^1D^DoV0)c6(?Fcz`Xq{RF0T75mnmh>3qg;%!B5*8=iq!UthdWPJKkfVL7j&sM4FBQ_(NbdgMSN z(W$508M-xNcQ>W<@$_7=8?%jRQ_q<;LB^Z1Aq-$p!H|Yw91*B?QMpd<%R1(S$v9JH zjZEGg9+wffB$ho52J;>~t|5UDCXh=2b@!IWvxooW3L(Ct)5?kPsD@)WPNEwP+ctAf znmKhaZ5yK*lj$N(C^#Wdw`lKyqSm2Y&dRBHl2JtXx;<&-Gbw%AaKNaAUk{mE>d3H%c9<=iGfh6!?sYQih+H^)> zTaPt8lQHMg&KXAHw57*}y0>rBCru;cOrB}hXN_E%iP!7pTD()m#|0W_ZA-f?-`jVT zHoM7>iciq%y(*rkPYN{0vUXg>r|1JxQ26+?K;UtSL&awV?sFGR6&5UQb`xV$Hn^V^ zTs|sZ7T9oTZiY!_rgYmQWM8+wW3E}Bu$%%ZA#A`a8a{{5GtS4Y979TA&;J$YZf1Ge zpyE}USV&hRlhGH$T(=3q9#5O85Wa-h6nt63S7b4-T8xUG4E57ujqh@YIrjEcWYK%<{8Z+Lvf0_kb=5}dz-Y!@Q-el~pAX4ykfwGf* zEX;eyGTx~fN?7^a7}G&+v}SopYnAphm>#w)$98hY%%JH^S}9w_w@In2xGh4(ce$ol zghf>lmqYkIexTro@~r)lK;t3_>FlgEWwsTpEgZkS#u!gW#^4*Jj`0)=+Z{Htsf=ki z4p`Pyex|FWD0#3;MwUz*IWuFfpkB&Ov5+iZqK7_CFyp%fw7zWC%()&kc~t&HplKPV zl}uIeGe*q4Rmo!k7lZWx?>m49*U3uCp2FJ%Z$5m#&ad@s1>3-us}S!>MSPWSDF&HV z<-x?hRQ($lQrMn-A4>8n$_Kr6$k*Y2JMt0(=(t;R3ZcK)H$43Kaf}>sa#<%4Bnc7d!=Z zjn}!fD$mp9a5oWdjBwp{CAjgs!z~dJ?w0=rck4aiK0x~#33n6WZYJC~;cg+^t%Tc5 zxGjX+M!4ISz}=)^(_P{6bo1cefM2=}uNJ-PwVi%ndmtK+?rn(%7Tp^txR)Zjx3=Cd zWkvr=**_N0+!64#D^aE45_YvnSF81^=j!`q&vSKoy}!P^#L<5}r*QrsIKMVvzH^7m zcaej3I(-ijchOtj7{opt#Y4zpKb~i_zsT>G(BpCtL-|eA-0AYV8&Le>BUI4s8|n7z z%m-B-r5N4JMyh zVF%n-bXSSIe8UN{W|iob_Pf= z8Vp`S{kn!|U;)PQLTesB7i188=#6#+z2OeEHh8{PJ#Xy^$^9k^`_%>)a7u2-6^a|~ zh*+LbT}gP_?^;?HT7d1DD1pgE=L#?*XBAf^@*G!=d@_*?L|#ZFgOL|q^>FZ)p`q(WwflWMi^@57y1z4k%-DqnkLv@*Kt5{}nv(aP5Ls&FV; z<)ZBf7rSOhMDBgAuxGTYz+i3IwLMT9aob>R_oJRDRW50yB{pO{Z_tv$NR@BrHit0_YM6CM1D!2ucVNk|@Cts2hRcL5J*+EZOXYo!v;Z zwjNk97Oh8B(0b5ntXeB*Awaz^w0G^L_OP~ATYFl2hz0t6Z)T5>z{fx2n0Yhr_kQpD z`~Hsin||@@T(ZFp#X&n{3Asas9n0%YHX%HB3dg}Owdq_5(Vz4d|i;#onc3oJ>QFO$j|>DJZP4p=B-?8|7k(hB6`Q(nBE?Qx!}|18fOLyN%FN z-RcS&q~jDp$Em1LQK?}%suYY#%Tj{-QAvFyqM*dtPcqtIMk3@rY({G<*9ul^gllG; zKx&oPtj14&&eAX&bBL-(?=~9DXontO9gcT#WX1JpT$?$IFj zn(adq&Qfu&>4vy1Jbdya+Mb%Afsl;s9}61lH=K4T$~)w@uELDo-0D+QVpLK zAyOJLLW$l;m`P)_QbR_#39-*<_`DFCFha}@CO-@5I#DC8)NmEHh_GSUl9h_eWERbqaEfp5C}Duq=kjvL@3{hPc>on}+K}tyIHSlMwde zOA4ywx7f!WVaGxEuE{2t}PsN^p+OFQ{lvR=6}xKF01&4PV9AXh>9#nr-18+cnF) zxL-kVNmFaX(iB@(U3o|#lXr1s$w44hed@|*%-+yr1<0x>BdJGGnoK^;+OWAi>ca#0 zx{3!yT0f*~zjeXXZ{#+J)j&Edm0@u-SjLdEW3Dc5KwSYAXH zG-f8V{km49(&HMwg*^;(nK7&;3p0J=B+T*a_3*^2^(+>6_{R@7_KRY3fSEw5hi&g@ z_2P-lcv@maJGxlJyXhbq@LoKnpxvfCqQ^RoPnLK;tJpIF;r2w`F zFpWlU#O&`eqCCT!@S=v7L|-)FxK*nOFKc*3$ebi(PL$S7_^yWU3DH6!IwH};hCk5o zLm@FyNSq)Aeyriul%|vgNs5K0pKAD-keDPir6i8A(TiU&CF)yRWZwDkI^Iz6OAWsg z6(uhnvkeg*ZtU7v7Q-y22OH~?89DACcqT<>+B zbAsW{DA&X|cYzaAlO1c$XPs z@&2=dY!<5;#f!hP{&AS9s0#v0pw9|$=I@LsaV!Sp={1VL`;1>>b1zS1BNUh$NJPV% z5=KBQv8n@|W?U%wKtV-QQf5)z?9BnI*APcoV1pS8G}kGCwmKyx{ci=cjxTK|ekhe} z&aylY{_DesIHckuk;DJvp^}cmaJ0|tHfGw)+5PQVdI!HJc%t8)S>GH%o1>+AG!!wc zsV%12o#?F{*$-vB8Md&kztbKFFoijv#S*RL7mJ3Jqp|D^`Blg3ulY2YcZK)t>3gB<5`y>*uVNY~ zgjclRR3Jn@;ys7=fdf$6_adid`abv+EU(^&d!n$e9K161OwgCPs3y zbV0Ujo~OzdP)k%tpiGP$0dI-7Bzq4gZAXrKo@WrA!K1GidUimoD#_l5Ko(XH9(`c& z=s?w@M3W`)&S1*}OeEe({1%&x#r$|{z{$`Nz$TIq=i4j!L3A~yVk^q=CZ((3J&ZgR zxhlpTMyWkGf`E!rg|EsFA?rho`4Cwg;J0$Cx3~en9QZ5axAhW$Ww{v5DiP?V0-G|c%FBa z8aj{Tn3YK!rLC@cZio78!KL)u6fttB_mp^QlFYj$^KTTocOX~b4@msq$Y6b%jE6Y{ zK9|5xBd_zw`h1*=(-~}MU_BPF$EuZvoD5Hj?IYl)k0g1jBw0%{{5vXRN9|ZPgA9x4 z^$Ug>p)*@D*|S4c{8j;+NhpgQc7zUgf{u>6=p(`JGKZbzu0@k4?nF`b%Cg5!Dw-k9qJ&E@+oI?+`U=EgJ3GYj> zLK08}_hI-LWy&E;NR3Jz%)h4&_7qGz5n1nu-%WVG+4BT)+g-etw!8dugY9nrykL8_ z|McJx7VycL;5#?pabmGOk)63>v6xsQC%EdI=|gC2;bqzKsv#yX|L;a{2g<5wrY3JNp&aK^#i-5h*pW2O(f8!oRM2*PIx${uMvN9X1Y4#eLdLDvU%hCC`kPWKA z>i|{Ugmq3hD@QOOQ;lhtOQYE&IYz%qM+u_`@*VUsVOCtA=g8yl3%0A`(d*wVj1h)h zA`H3gV;XXK(hyo3U>01#ucNzBB(0TC`&k}Rwtiultz|?C#`CGPs2UqE3!RMbE?O4G z71)St(Jk%EL)H;ol(J7OV{7Lacqz>j1}+%F)(kgD`U4LA+gauI;fo6WFh(Hr-;gB# z#$kX;sTGKlGLwm#gw!ny?GaVcxSWvmRJOGBGA3>uqO8=7(1s@(dLD2Fx=w5z6<8Aj@iZl@4K$Va6?Z%bp}}9!eJAVRHzNFyy!< z_24bm#LGQ+Y_;^-)}n}pT}ke*qPbi6A$K+M zaScz|tvs!+<>|B)mAH;>+{QY3JxkgRXyknvZe&HhnHhBpBkoqNz72PBd=GBtVY>qd zafjr!4B1Edi>HVE0m*gq06&EMBgk{RS#k0YBjI*23fTQSRBv;rek*@=ZT?B5`U8h* zS^mc1;7*K}Jo7>>MeTd<6ZXQBpNJPoyX^%Y6KmRq51vl@;JINw*vQ}1z{9~s_B^QN>@w(S$?64riIdL+X&7G0BrxA6xjL02$| zC=7<>3qv?KgzpUD`$PEA5Pl+p_vemH_5o<;-7~c5S=#g*6+I6PFYrKmkzeL7(c**j z`#VX$^Q;!CfpPw(J$P*g(G0@vdJMsIX%`_P+P^n>%|@2Cn7>%zT|Q*tkN6Ys)2Qt~ h6naly|01t{lh=R9>p$i7UpP!zALWj)%gjQ_{{h>pRipp_ literal 0 HcmV?d00001 diff --git a/defects/cpython/unit/CpythonTest.class b/defects/cpython/unit/CpythonTest.class new file mode 100644 index 0000000000000000000000000000000000000000..feeacc64bf3de03fc49aa1b9d62c4eacff311430 GIT binary patch literal 5382 zcmdT|dvH|M8ULN#yL^CUN9fs~7qnh^3Jz@{byfdCQ+1WbfR6u2Z8vXJb?-3<*s zD+M3;s;v*eC$XB=`a&%P5K*hPwbs_LGp+T}cBZw{TAg;LGZnlKQ3gm7vx0zMlW^{8^%f>BMM^eB$ClZY$ z=L)z>%T}xK35>Ii`jV0Es`>G_xxG1(NCu$7oll=Z4H~ip#`l<8t;Sfi!%VJ;B)j;O zNSe`PLO?HVDr+8Hr!^UmL^sz5k%L?nc^dLDP9S@94e4IM*Aa^*%}CUCkTKl}v%c&y z=|I;|i17kSB65{wN8BWbLmDPXr*5;eQ^h2KyixB<%tTkK#rP+}9mHfAgCUSLYQT?j zJQTqBn5v>g!&h-ZIzSt#q3N;#L%3XP_EBnmugxu(C4Pn$0tVq&|o5@&QE}vT5&R0`v zoN!-=Iu-RA=Ac0!e{{cT69Ki$Osuf_85&bhd@saB8s=d>@r~NU1!>U~%#P}9)RV083uPjGip0GFUuMVp38u{urgvA!94uUx4+dPeA}e3q>a;Ol5tahZm-xLhFE=!DQ_ zN%|J1mTtAzTxe~gwj$feQH5$)DyOc~uwKr~A7i;V(r z&btH&4N3Ho(>B(OYfdIhQc$lw2XW3x2k*QBRwVvWv0b3Z=C}>O{6xZv6RPNa>O z3(P))={0pma(k~8vn#jJ+hfHyTLz0}_xg14lw?j zw(D#LNA03!lk__pzANp=pKWh5RTjy6WQDv}mcpe=%a;1EM<8q%%O!V>Wep`YV;NjK z%HY{>1xMm&QiH)iT}(H9RB>i!Vu4No~u)M>Oou9IWx-QGqFe`Q6<{<4U^@7>#Qd zRm`fcHRQa6jo_k%6kj6?gFsGmBx)B|<+f19GS*=O4W9xFW*M3*=eb$||YnwQu zhi8zaNhS$LN`OG1HP#pJuog!o&vP?MK&50KhZe+Q$wV@4_Aa+rpgI#iJVU6qnep|) zhXVrs#%?o_STE%3^8)8BvWa7LI@&hoHW;(}4KvAFAf_9eV@ZQ{KjLmj?06V-$~w?t zY__SGvg-HY&^g`BwB0QqahK!8;Q)@{sEQXQ9ghi29aT;wx-GWVs&aNrs_=MUY<94y zQDA#AwVE zFQ7F=qgLF8)=H>&S)k;sJ)J956|V|><-eO!lg_>{g=BQujPgPN^6VFh(iNRp}UyVj^QLUhZGu4tsPD zW3AOaPORSPA@5;)g|Vtr0_Fl;-3Pr~4#_C(Z&PHr9)|m~DWl=mka)mUE>nVB2APiw z7-T6&rlAt$sKIp9vU!@vwLby+JhaSPmRZLb0@JuIsmN_SU*GYz-#~i#m zVPdyu2y-1PeuA;o#Eurv8$pw5$a)9y>SgmL6!>S5Bd&El) zy<}G^8^XDIZYan0HGr~0HDK1Np&UIo?JJ}m#EiZ0E8(m`_;==V7w_!M=Jhe@vLoaT zY0i$utheawrA8JxKjf@^#tNDY=yFEXV!J;`EaZX#F*tl;aQKr#b(Aj$$px^L^`U`$ znM-0{g!9Oba{k7d!}|g>Vj0I*VKFXaC)$A}xSsc2Y&Y*fGxo6E+>aHM;7SbA>Phw@ z&!82@(1thJ6n=m;_>}7Y2i6KVyR=+fAxf}Llw-ZP2phx#c4&(@wv69bVUt+Rj%x$D zL=+KmHMWTT*eagj`?H9O=MfVJ(JGE3VRLp13WnLoldm`N`i|0(F59>Hjr>y{MN@{CP@&)diKXrfVr744^pV4+V9y(bgYj zXV)5yRQ+)9^ec+g(_S%?x^jnudN3`m$rU=48KSi4eE>BfXCUo5lw~VzqO`Jg zFxK3?GlyFl4EYaZfdChfz~o3(*}yE5PbpyNw?Zzn$c4&qo}NdQ=j-_+3rnDK_5Ad@ zDWLKlpbiiysko1R(ci8s zMgAj9D-Pk><2&8t$sM^hTxuS};BCQ_-IKYFN3Qct#a^d~{vCfso&xNkqkQS8h;717 z$Bi_;iMx~ik<+tW!hQvKiR3!Y0{Aiy{Z|O^t1Ra~=Ar)@R^xTVdEbUNa3g+#`)KnZ z-om5!1)jj$IDlXB%ddES2Or^Ge2ib)2`+|mnkTtp7t&h=3+We#68T}wQxrFsqs~*< zuO;?b4B|5x-7OOPW4N{5?XfdZzzq0W2%huGTqw*6L3G}k7U$h-zsn3c1DSccv%I*b zP6;XQ%CIM-D3xqDJi2!Xx7Vu9!(Fw0CausP7{cAeG$;eP&*$Whn9AHqd)`NKSIFEk zmugWkjk)e|au_VY-jN)7ih@UQe?|`DXQyB;|LX?$4KevGPssPMj_TZk_jz)CKy`me z<$lDL_4oX_@DUUB2ZH`bzP*P(^Y5nw{Bh16FMF~!3HKoXIdJbL-0g V+1D5B>p?~cHot;&dW94U{Re_P_ox5> literal 0 HcmV?d00001 diff --git a/defects/flink/unit/FlinkTest.class b/defects/flink/unit/FlinkTest.class new file mode 100644 index 0000000000000000000000000000000000000000..4f17355a954ac4cb0626bdda7600b6fb94379f65 GIT binary patch literal 4514 zcmcIoTWl298UDt5ne}>%FR%t1Og908*Z9IMHh68Qv2n4n4b3`sY?{E>9@~T0JIn4Y zn5KkW+|ZJwO`1X=Kre0+=R(>ht-yeKQPqd2Qmaap(w9nYRrRT=l!rbfsK))y?AW_& z3`mvwGIQpf|NQ6s|MPwSIlI5TbMqGfn(#9(vfz;6RN#VJLjFsA)MBb>#3U4z2Rc&2ZFYY! z2g{HrBVR!Q3MCZYZ6ZM)RpVXS1pRT%elcT(0w0PbI3rf~ih18@NP{v~NhnAK&=xVZ z5iRD$N|Y#AjWq&Z#OzVS3C;4{CWh83_#FIP^SJ0gFf4$#*~l&Lwws_A4`ZE-^$N%mpF=w4=Xjaf7^5uvoh^rM}kg-oe8`_!h*03HK>(&JQHpKPuL|8So=9tE3 zCzGg0!&+N})4Gfy?eLH`Y?1om^mxQ(1=G07g@XZ-qZJ(rI>j1g5Ar*#PiRA49Kb;t zUsUiYLK#{Los65>IJY9AMvQKKJjuUyFCIgWj9vwgqiqgDN7VF;Ni!-8Q82lL6_Gk>H_w5E%kVCQbJx@`VTgRLLv!IDfkLbvCderh9ip{*b4+mhtnD9O%4=7!m|SOb7Edb zeOiFlib(}u#S0QjSj+Sw3ZO-c561K;>v4R6`s?mTeM<^~e!=~(Dfqf@R=kumi!mO& zm`=4i|DkTdvX=jiY973tp1C@IGIOo?rh-?**_3NiBaU3cgatt&A;pvAgXi?O*OQymm-{FS}q9=x1`q zc`}GIFI{G~MWBb6LPjDssI}@s;>#9FZM9GrdAi3i%(xj-qn(;LY7E6ac$3v~??jYU zRvWU*jNdf;1DZb`Hcn`kdg zR+9vk6l<$GNKR8}7t#xcZJ30zPmK(PwfOoD!x&3M?TxZ>X-Ai~pBWRoPe!#R%+vE@ zAF}D?&UVqPhQlG=fr32B+aeJy)*Mz@ed02H!o1uS(^61nd?;b<{Y_ailX2l8${@?C zdLEVt-r@K>&+k&cCB9u1*CBnthJ@Go6vIFXPhXy$oG46x2M51_V~)m(8;~V*Roy_Y zgo`-B#&QY2!pdtXu61tmIcHEhgNJTlql3MkdRMW_no;jAcH46TqLrE?Pi9FKKAH1w zpel<#-P3a)PtW~vdhW`at6Vh8f>puu1&k$&cPu~FVH?)-Xe{HgxB|$hu7r7cH-EFeDz`c8Gsvh}rBv_3eV&*yHuh#sD3kK-Kr@LlxdO}^jb&F-go5;HiAU*iZq;`{d) zz{e!S-|6KO-nz=5Ndb&XTcJx$7?awl3898Q!I7Gl6M%o5MrSoRr~-{Eg3C)IV4?YxdVlNc6i*4p`+^>n?nQYe}-v{C#e4Mho60^Z27af&FO z=DwZg&z)x}#^)>~d2q}kKdClov$qItgefucF{Akm!tzl!Fi4ADgRD;(TP zC(c-#nvb(A>@TqrzD#MnLL$FP+P_B1pJT~CPlCKo;hg8zT;z;Pw7kr(D|}wY6s7Yn zzE62h;WzjJKI40qw+}bol6-huD#bh2Ms7p)917FLvC`Ux&hMrT_o{ literal 0 HcmV?d00001 diff --git a/defects/freeswitch/unit/FreeSWITCHTest$CodecPref.class b/defects/freeswitch/unit/FreeSWITCHTest$CodecPref.class new file mode 100644 index 0000000000000000000000000000000000000000..b44e65c773b9a9bef8869cc5d6e8573bf1a627bc GIT binary patch literal 1512 zcmZ`(O;g)u5Pn`HTe1;gOq}2}5R#H$%MPSY>y(cIi5rSrAQUsnOnMUL#W=BLSCaD! zddi{GLoexx>BW~`I#auuPA7+++Ww@pQ~F3|lHqGK((b!o+I@ES{rkV)UIVy??I`-7 zXiyD=5Eh6%wVqouHOsEdJluII%bq}Zp=wvXMFAz1exySe5X(_S(XYWUFo3~hUM0_| z+7*G2+pJaTJ(XH}7qX|EPk(h<7C{Wd8sY{n#gVe~xVT+d-IlI5S!nFa@}?vA z1XSCqOM&?57&P?1naFyyW*R& z-lDI#Zs2`P3Pjx2j(b$z#ZMcb1V=`fe3<+zf^b8;!_ z$TI(Z9n&P`C~>)M-~&ILu`BniR?XY=s&(lDcE`Yn_=qv9jP5+QYV=^rG2AuqvG37; zzj_*`J*jCl~y>XujD zm#)BAYVEvnm`^_uh?W{Hrz}^he*BT+rqg~4h|mV7Xtm*b8om@5JZ?i|i!9zL)GXKa ze;9c?ZkQk*eO#3gDJPR$%*Q;SgfgH+FrWmDROK7O0|=}D;swtUO8zo`g~-IUE+Xq@ zR>^fRq%10VRn3RuiMgBRyxPW1s&Ad64z-~r^||mjnrI(>XO8`V0rM9Oy~0cz>R1OkGoikf<=Y4) z)DC9NM5u!WGa2q+>1P(xhtK$3!7#s9Sl~GNxjS)!bs5)qx{efAW*U=N!wo#+QoO(v zzNP$oE=C(Ben$p>Ad5e73#*J$M)Z)bx`vpBsD`2tf(+OBUzlXZ$KODCgU|*I4r#BQ zFhm~(Vk^*cbk5ZBX5bq2`oepGyTU+9?7~kZBB&@Fh-PTW?IF(wvc8_7I(&8cq~&eu zzhI3$%O-L0N2TB+n&I2U{g=q|l;bIPfDGALva<)6AiF?z;Q$G;OJtVVLdS1z{7xUVv97&d}7!{3HtxiSS4lv literal 0 HcmV?d00001 diff --git a/defects/freeswitch/unit/FreeSWITCHTest.class b/defects/freeswitch/unit/FreeSWITCHTest.class new file mode 100644 index 0000000000000000000000000000000000000000..68815395af53bc1966ed799388dca25111a35262 GIT binary patch literal 4791 zcmb7IYj6|S75=XE*tHNwmMvppOg06BWo&F5VuOtd#z11~R}f$n+7Mx_jX;)+cIB8f zY4dPNOVYgCB$OtNo7A1QX%dne1A(;ZD^1$;{Y*QZ>7P#ftJCRp(oBi_-CY^U!AYmG z=I-vFCj}xM6yrNIeS#%D1O=J>1{9tK+&|x?!&9NX7Jl zzO+8*fd>oaK1Bk7>aN^QVKW_14z-5%$QeE_is2VfhNI@dLER9jtnPY0m93#07N8UX z1!Z0=M!7&y&NgWlt&YZG@7d2r#eA$Nt7E#t{$<{X6i&s$C+qXMx3D;#cuC!NQwfU;tF4eZIDPLoaz`|?8 z-T9(gPV4O2(viP(jlFbzZk~dMS$I~kc1Dx2)UbakA7<7xqC^$zL&dNg~n z9vkTXq&{YLCh0(Db!Vv4&jqbsY($&D;^F9Fy(5(zh?@Oz^C0gGGnzCRsQ{;59#<9D z2*3}4cBx^D!1{TjfBCw3RC%x!+Z1f~;#yoci_Kzd_^4s(!vbnDnoRAA59=0RcX+S^ zA6C%iMK^lrpt(d6D30l|%t#_mEc#Y`&?0iR;$$9=f(Aw+B_}W<70)i zGVH}J?4}W^41E}|6~Yi6mg|xI@Hxf-7x@PUFalHo-kj(qM_=rp{J3r@c#)yu{trJN(`9?X@ zEg{_GMHB}FJO?uIL`|0Fg~V@q*JlXfUd=3deS5h5?Qxa zSH-kHAA3mSC6kOF$>^afy6$F-DL5*vy@lk-L1L!pLwZ`EY;Fo<<*l+x-Ri|{_&5{F zh~Hwdugr zA)oT%({h0#7m&az?h$CRS8COl_-6Aj)S^|@#9e2&woI{Y}XB!!rV|ozjIW zCIyyR3S+jy{L6acs!F=AdE2VsQ1LZ^<=e(aNNCmvBkP1sZQ9y3SC7?dLn+gCh0L*M zz4!*6BhLm?X`ZbD8~!hz*;Up)sa3o{BkgpGCK6h%5@-fN7=v*==D~}2Nx?V0n8Ilu ze>om>BsiZji|Ix@t;a4^gRmJjGkn25;|6Al>>IeQE1uMQGQ$V-^e$OrcouTrz~S!b zNcOof93M(@Wt#6c%t!KUfG?Hqjd}FTrq`xc1s4P=_Pu|nq2OC2Z+;$T*V5GCXgn!X zf1bCpW%{l_!M;wOO&bTuBCD73gj1RH0CP$xrNRmU{*y3Sr=y2X%+BxCX;&F;*@L_3oo^s3VtV0bs4_- z%vSIg`TW6CnK(8^T*(q!zyuV&a(NW;PGxVy_L<`}pDKA}!vj~%X^0o(M4aI$U&}T~ zm8}RB$f@6klYKLA(>W-S(_%l?+d-R;;^DRDOvY`|GLf#B-O#?=95 zqXp1CiIQ2oOSrV>9O@&bSbG{* zwb)@^GJ&pu>j^9iI(@MzG*wKXq%Pp93pxWXJ~oCYv69cV{9YJol;cxa7;v2>Kup5r z-*lD{Mc87)OLaN_tVAKv?q}K$FvKx>N~cE#`8R}7wrh{``AH-!pIi_33?1bbLcuH6 zx1QXsn!%Fy$oPxz70wCH&@XdmJF{>2(j~p9%9h0T9s}dF=&@`X9qm@c39_hW8lC-C znEye!rawz_ZO#_K!TS-eI)ZYfEfe{>^&%7}gXW`db}#=+ckc)39;NP^se9})-G$82 zS8d$|Z_|YVMt|lMcKY{BVK1*!_^7XOV}-AD8vDCz389BWZ;SI322NlFqjm;E1vr7= zIUI`AO(PL>ayUygIE^E(NKK~eJPIO?ifN3JMRjNJF-fw~@Dx7LU)-ZLxg1UIfZIKR z#SHp1?%Hcz?%q4@W(xe(mNmO=VY6E1K3=9CPi^o>)yHksW$tO*OWkt0tyjK$F#A%S z@8!cz%cyeCG(KxtVq=x-PT0u(Clzao{|U+cFG}uDNbWyvO;=y`L>y{w#Od?&MqIwq z-iX_`tT&?g8hcy3LGOj8g^s48Kv7`f1a1v_14V0^76lerUTpC>nu-I(E*62H&jxH? ziMUu6fvmK-I4f>0kyd@#wkEL1c4Jwwh00Y{VqM*3#mCD^j;ChPj2BVUT~?5)$~~p{ z%A+U2>U1dL|7t$)X?#5!CB|9q@;tH2l5P|8PH4Qpl?1$vHRpEz5!{E9xF65pL6Yks{0R@^pOn6XM@0c16U*7H?!gJM zA1B4f*A^JF@;knn1qvX zI$p#;&M&h^ovg1e6nHnYN5c2{P=FucHC~<6;lU4iSIXS}DW6`q#vfVZoA@=~$e(ud Q*UWFY`)~1k`~kuL0(D8Q*8l(j literal 0 HcmV?d00001 diff --git a/defects/llvm/patch/llvm-0001-dagcombiner-visitTokenFactor-SmallVector-is_contained-O-N2.patch b/defects/llvm/patch/llvm-0001-dagcombiner-visitTokenFactor-SmallVector-is_contained-O-N2.patch new file mode 100644 index 000000000..41d712029 --- /dev/null +++ b/defects/llvm/patch/llvm-0001-dagcombiner-visitTokenFactor-SmallVector-is_contained-O-N2.patch @@ -0,0 +1,39 @@ +# UNDF: UNDF-2026-000000152 +# UNDF: (leave blank) +# CWE-407: DAGCombiner::visitTokenFactor uses is_contained(TFs, ...) O(N²) +# +# In visitTokenFactor, the TFs worklist (SmallVector) deduplicates +# entries using llvm::is_contained(), which is O(N) per check. The outer loop +# iterates over TFs as it grows, yielding O(T²) where T is the number of +# inlined token factors (bounded by TokenFactorInlineLimit, default 2048). +# +# Meanwhile, the Ops dedup already uses SmallPtrSet (SeenOps). +# The fix is to add a SmallPtrSet for TFs membership checking, mirroring the +# existing SeenOps pattern. +# +# Severity: MEDIUM — up to 2048² = 4M linear scans during DAG combining, +# which runs on every function compiled. In practice bounded by +# TokenFactorInlineLimit but quadratic within that bound. +# +--- a/llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp ++++ b/llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp +@@ -2246,6 +2246,7 @@ + SmallVector TFs; // List of token factors to visit. + SmallVector Ops; // Ops for replacing token factor. + SmallPtrSet SeenOps; ++ SmallPtrSet SeenTFs; // O(1) dedup for TFs worklist + bool Changed = false; // If we should replace this token factor. + + // Start out with this token factor. + TFs.push_back(N); ++ SeenTFs.insert(N); + + // Iterate through token factors. The TFs grows when new token factors are + // encountered. +@@ -2280,7 +2282,7 @@ + case ISD::TokenFactor: +- if (Op.hasOneUse() && !is_contained(TFs, Op.getNode())) { ++ if (Op.hasOneUse() && SeenTFs.insert(Op.getNode()).second) { + // Queue up for processing. + TFs.push_back(Op.getNode()); + Changed = true; diff --git a/defects/llvm/patch/llvm-0002-hotcoldsplitting-getOutliningPenalty-Region-O-R2.patch b/defects/llvm/patch/llvm-0002-hotcoldsplitting-getOutliningPenalty-Region-O-R2.patch new file mode 100644 index 000000000..810683d52 --- /dev/null +++ b/defects/llvm/patch/llvm-0002-hotcoldsplitting-getOutliningPenalty-Region-O-R2.patch @@ -0,0 +1,46 @@ +# UNDF: (leave blank) +# CWE-407: HotColdSplitting getOutliningPenalty Region membership O(R²) +# +# In getOutliningPenalty, Region is an ArrayRef. Two nested +# loops call is_contained(Region, ...) for successor/predecessor membership: +# +# 1) Line 322: for BB in Region → for SuccBB in successors(BB) → +# is_contained(Region, SuccBB) → O(R² × S) +# +# 2) Line 340: for ExitBB → for PHI → for incoming → +# is_contained(Region, getIncomingBlock) → O(E × P × V × R) +# +# Fix: build a SmallPtrSet from Region once at function entry, +# then use O(1) set lookups instead of O(R) linear scans. +# +# Severity: MEDIUM — cold regions in large functions can have hundreds of +# blocks; HotColdSplitting runs as part of the default optimization pipeline. +# +--- a/llvm/lib/Transforms/IPO/HotColdSplitting.cpp ++++ b/llvm/lib/Transforms/IPO/HotColdSplitting.cpp +@@ -299,6 +299,9 @@ + static int getOutliningPenalty(ArrayRef Region, + unsigned NumInputs, unsigned NumOutputs) { + int Penalty = SplittingThreshold; ++ // Build a set for O(1) region membership tests (was O(R) linear scan). ++ SmallPtrSet RegionSet(Region.begin(), Region.end()); ++ + LLVM_DEBUG(dbgs() << "Applying penalty for splitting: " << Penalty << "\n"); + + // If the splitting threshold is set at or below zero, skip the usual +@@ -321,7 +324,7 @@ + + for (BasicBlock *SuccBB : successors(BB)) { +- if (!is_contained(Region, SuccBB)) { ++ if (!RegionSet.count(SuccBB)) { + NoBlocksReturn = false; + SuccsOutsideRegion.insert(SuccBB); + } +@@ -340,7 +343,7 @@ + int NumIncomingVals = 0; + for (unsigned i = 0; i < PN.getNumIncomingValues(); ++i) +- if (llvm::is_contained(Region, PN.getIncomingBlock(i))) { ++ if (RegionSet.count(PN.getIncomingBlock(i))) { + ++NumIncomingVals; + if (NumIncomingVals > 1) { + ++NumSplitExitPhis; diff --git a/defects/minio/patch/minio-0001-heal-tracker-isHealed-linear-scan.patch b/defects/minio/patch/minio-0001-heal-tracker-isHealed-linear-scan.patch index ed1993e35..f752eef2c 100644 --- a/defects/minio/patch/minio-0001-heal-tracker-isHealed-linear-scan.patch +++ b/defects/minio/patch/minio-0001-heal-tracker-isHealed-linear-scan.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000768 # UNDF: (leave blank) # minio-0001: healingTracker.isHealed() uses slices.Contains(HealedBuckets, bucket) → O(B×H) # diff --git a/defects/minio/patch/minio-0002-decom-isBucketDecommissioned-linear-scan.patch b/defects/minio/patch/minio-0002-decom-isBucketDecommissioned-linear-scan.patch index a09cc4380..556efe1cd 100644 --- a/defects/minio/patch/minio-0002-decom-isBucketDecommissioned-linear-scan.patch +++ b/defects/minio/patch/minio-0002-decom-isBucketDecommissioned-linear-scan.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000769 # UNDF: (leave blank) # minio-0002: isBucketDecommissioned() uses slices.Contains(DecommissionedBuckets, bucket) → O(P×D) # diff --git a/defects/minio/patch/minio-0003-site-replication-set-equality-linear-scan.patch b/defects/minio/patch/minio-0003-site-replication-set-equality-linear-scan.patch index f4dc85e55..b3de9e550 100644 --- a/defects/minio/patch/minio-0003-site-replication-set-equality-linear-scan.patch +++ b/defects/minio/patch/minio-0003-site-replication-set-equality-linear-scan.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000770 # UNDF: (leave blank) # minio-0003: isGroupDescEqual/isUserInfoEqual use slices.Contains in loop → O(M²) # diff --git a/defects/nats-server/unit/NatsServerTest.class b/defects/nats-server/unit/NatsServerTest.class new file mode 100644 index 0000000000000000000000000000000000000000..d937709dd43b3e5e3fc8b7d566bf05e3c75f97eb GIT binary patch literal 5581 zcmcgvd3Y4%8UIbP+1YG{YY9mf2(IKHcN7&gfk+4_F$c(EAl}37kSy7qi953)(OOaQ zC|9xW_Tk6PPWdmr{vd)GewtNph=YWn+TW-k-e$3F^rX21Eq_j|wh z_`SdHo!8z!@dAKuyzNI3ie-2dl)x)t{%&X?hF?J$6bW-}@st&dxA(_P3j1P~mQ*bxDWRgFu|K!m>&|zUVJ_y$n6F>~0ull< zMI^|hsyV1lQXkK}RO~2Mum}|rJi0wyp3$9WX{U^;0tdoYGNzCCQHjM0mS8De(XL6U zaZ|#g2FJAg?cyLGmMJ(*h!(5SsEpGkEXWzSNi|2qn&n3bH6mWM5`wNGI|MyOJkF5C z482oCsvaw3G$?2k`sU=+Pz3`OF?36f>86Zk2@7+p-N~dnC4%Wk6I#VFZFIY#w{a-I zjGdw2OstepnNY{H9z&0)*7le+%8_ZQx@Ei8>&D%7&Iv-N4`rD3yG{j+8Wl96IybcCXiJgjqTdC)ks;Ic@?u5CCXwE2|f7pYi&`vGHiqfJ!(B`V_n(D44wS+ODMN2V?n2g;D#t_e-&B5`MX=w@8B@w{G z9dlzw`xe%?MISUZL1^i$$SvLBaEK_edW>X}7U-I3h7)Q$?#DQ;k&#qjLS)L0bD;_b zc3dcoQ&9m&xKR>V>BoeEJ(!eGswKuPyH?3#8Ai&IA?Inr&TJG%ZH_a3H)X|jZBL%~z8T_!+8#k7HGJCQDvW1 za4$Y5!7u2`DP~r7LvMz%a>4Tx3HK}bJRTrd>Z)#RizPJsKDfw-2U+*)HxBk}3T<6m z7Y&I!#}tE5*5(wo7L`#ZG zEMr>!e5bd&ZQowfG5mN8hh;o2R6J1t*bPRCwJl(@A-|HG=}v*gFDp2LuaH1($gwQe z%u<)9rqn{@c6!$dd-yMaVth?h`ct;~1*f|(_Td}(d0MaOk~f(&KDbocj% z1hV{i8Q+!hih}P6JkQIqWlx;cN}r>e8B1!>EO~}4)k+D5?lGcF$h>~i`d})tQ%i0W z^vi;zL}YA09e3YL!?6)wm8m4x?sIdJMdq5BOxe}x%>9348iyn_%u+J58b+@Z>@oxr z@{yFKGX{1|gf(I}c>b`FN=CE`Vj?ID3oqa{5oZE?yLK9|4^5M6HqC@|)EdHLvvoXUAgys>R}$T0$d+6_Vz8@rEC7;w>3}6wv>ZgxVZ1V)}$JrnNgxJ5AFCYJ^Sd zl!OQKYt9vPT-&7T(YR*T_8Z1nYTQk+a~Ii-W&TXT#%)vMTK=LN?ELsUy>(|kF}Nyv zcu|E(Xq~LBUR~FcHmWtYiGP()H^ZmdOqKC>3CliQl&s_Uh0|HIMWhXBewFA@I4WbS zz>fhwzt6X7{!08UX*ve!86k)t@F|vodAwQJu2BI+rE~b}STSu>E8Hrw-Rh!CV4t-NRak={om-4vEajzNjY~MYgT4O*V|G85;}O*0G1TD+ zcKT0Y1)fF&UghpK_}_(3#@zQ%Eu)fyAzbJbb@+`CXp?&&m3>`aACzN=DBrZaE z<4J^un~!06hewQ44^x3?t&%yOrg}qp9hhQnZ?_;Tqdi!r~6a9Cb7o$9f*$lW2 zt8~~y{VPtQX?V#ovv%3(74F?0{Ozk}|tNRqw495uJJrm?=MIp_(Nq_L?bjlQ6V z56-N@j7oM0B^2A4Csq^m zcpN`$GhM}VgyKLXtE?ti;!2$*oGFmf9I25&;wX$Si4V{N*&~3Zm>vR{2#pm+qbq z6`L4$9T9Rt)CGLeG>5Y~SW5TU6MfLV8Lsuw;ZK09k96uw)vh$|TkR=cWt@es-zT#E>MgIJ4WtnXXx0MAI(#<}9W}8o2?XU3e zuki0T&QqSnNZ^3)c@zx`gATH)s_mZ=N|fUfBaKJH!(Pf}U*syPdo+9$U)pX1ZE2NK zj;|hg7z+ifEUr>c;K>XFjRd}45Z&FpJb@dCh`o&Sjil$Bd2`%CD!!H1=WV<LgVP{rt84{Ehwm9sbO9 NKiB?(zu_MU{txn2f)W4# literal 0 HcmV?d00001 diff --git a/defects/nomad/unit/NomadTest.class b/defects/nomad/unit/NomadTest.class new file mode 100644 index 0000000000000000000000000000000000000000..f46234dc15c4f8b6180f720074392e1f461bdac6 GIT binary patch literal 2963 zcmb7GSx_8B82)+>W_K7iKv=?pBohP45+Niikg$Lu5DWxJ%pyoU;;`F+3A;1v%q)WU z5wCdPiAPzL7t1PNv@Ao2*RxN)Yx%0>qvcadjepPXh9N<#+=uSo?*IGyKfeF(`Tp;f zZvgb;eHlLZB?J@%QN~btN?Xv{Gnz5meq`npPdN-_J-VSgeGLA1%Var12uqL^ltW>N zxZ-(7&$N%~HVKDPrr~J1VKYSIqt_}+v>Y!-L@3z6P_c?laz{cH!^YLEe#_F9giaZi z*eI;4VF<*BTP7vcGE}Wf9@6YNQXnIWjn(8-OhG*w7&c|Kc|KqoDb1PEojF?Bj%GNn zWy38V+meo@8?y=FTBCx^!Y{v;P76yLtHBVHaU-@#Xj0IO?Q3F`T(TXWCASUDFemgZ zccU~SRK*pvU?&~v4!1PNv>0mR#cSPw4Hx(6;#Rat*rlKyyBVriT`P$&NOPJ!&KD`d zlm!Z6D{fYB3vQ*D818mWNw+6=2??ER&2>GMu^0O!bSp@phao&}X0`ML7wM}nrSBNe zWwaE}athc9JENz_v*uz#uckY3eGprY3+;UhZo__tx^>lMwH!l}R~e;mU0o6mkPp zs7L#gNmcFdZBDDl#GtwnrIlf;6pg|{C6?%BZ}YA_Cl{Ly8IzcjaF>E<953omEAhf{YI+utaOCaERhA*F{c3p!9|MM@QY{2a&LC91zV-VR~Q=kVvgP)o>uJ~=jnV-?dw%L7F*R>(^1)mGQ1|^b-W?r zO~HV-sH3d*3EfyQ=Xra<0c!m81Po~@>cLA4XT8)b3Kq;hq#5Z9x0^;yb3UJ2CpDe~ zt^rOg<@h?{-dL_Bv>X1SiUEp9lHP~}gEDLw+#1Me)aEE#?^4UX&ZqTEm2i$>^M8v{ z@fG~SR;me~TR%a1-00P(af$vn(#&WM?z{l@87&wdqEQ?JHT0s!^5=W!y|;EhhRNa#r3GhBI;2>QN;4L(e@iNzLLoDQ&$ulyvi^@QyX_&bBq zVEuX2#RAdb3VDPA;B=7Wer*V(i<*|PwX4kE8HxoiVh2NaI2OK$n;6bvvsmq6_zoT2 zGF`Zgu5&0m9U}bCgsLs$U15PP_jgv5(2-c=Dwa^&vB$W8TuN&X@C7P?o3Vx8r&&ZOSj*hoGz=4 zxU*DOxs3ahUxH87Rn}ns><6e8n(Hc8kS*vHN%y%)e+*k_y%hm^@j_@q6@B^CV>`BC z2Yq_P(Lvufee{12Z5YQcWUvPd^gZ%0ZpCAC`XM^;3A%_Fd+`OjDYglGMfCX*z4(QY zzY#5dM?aJ4f!~Aywhe=9h~^P`%V#h|IzSy+xk982GA1D;Awo2~jO~9xp}*`h>aUPR z;nJZi(h(rhRAF%C)BfkHDYU68IBSemqWh1&F>+AdIK*bdjvBGz;P@%gBik z+g~ETS`-m_d4ORWN9aTNut$dfgc5PcilvEw>PTbj_8mX9`oos6;kHsivC_eE5FMi6P*v_B?10@}%g&9~3^S!YMI)i-?#f`nt3*tww8Q6O=S5{Um zRAm|aU}6sQI<8q*K#id~m2v%$lZrkHPsV&A7&O~;ovs92x3GvM%AImQ5j~<_uw7^S zAMBQi8(7h?YT+hsG0dg;B=-FL3K4^P#G@mIx_x*Bon3It>E@aPs_TTWsDm4ltx*#zu1^39}z2laX*eNmrfDZBw?( zVC>QiUxZPtV}pvPc?PQ+1Y*+hc@zoiK+gw_+ce<+vyE+5s!tHxv$( mOrqXDP&4{^{}RiR`f9_gBw(j<4w~uO!UI}Osxr{RCXBz0+KQzB literal 0 HcmV?d00001 diff --git a/defects/opencv/unit/OpenCVTest.class b/defects/opencv/unit/OpenCVTest.class new file mode 100644 index 0000000000000000000000000000000000000000..04af4fabcbdfb6858a1313d2ecb5f435b4cbba2d GIT binary patch literal 4049 zcmbtXZE##w8Gg=w-MhOtG);4pZkp6BG&D(RlBVqvHcd-D8VGEf(hVu03ccOENw?YT z4ZC+k3M!%@ND%=)fR-@aah%aX|2Y29U#J6EsL#3kk%Sig z;ZA$cJ@0wX`@ZLWp7%XBZ+`g7>i~N2jR0J5EAVLW!Y5F9+?X-i(ne;YZTRSMGhqw( zcBe8adyjy-sd-d^DzMH`%G;@QTTeD?oQS1zb^rBr_D^?=!luK zHy^N48M|ZLw|D83{GAS9Evgi((@+gv;Id`ULxz2f?sBP&wAJ6-AAp8hX?(qaw`pLY zc{GSRY*0|Ip#d99o1KVcFx+e;lLC5EY}snzJYCJV%DrI?n{YYJ=Tdi>&d~_{lc||h(xi85-;9}wn-f!J#?FO@o8mutsX3f9$H}4q_F+K5bsDb6 zV2MDho$zGS(q)>UufmNnq%sp-&7&%A6zKlHegO<&zk*>62XK=>V40qrOc|4Ad^(-V zkPz$2xh<25i5)^*!w7B`@E6XNnxSrWk!8!8gUvTclj)U26QajQUYyt{E{ zG8~>VX7}f(x*K=!y1avWLm?Nq@&x+W~(T(G)&_Tfm#VgpOr}%_Mw!0 zjBh#HAgN@St4gfs-P02WWS!X>^0FWJ%scW%I;Y}Jf$ib&K+j+-TFi6U$RuTg!_!$S znNOI>a56PMZe~f^Fsn0_FuCo7z?MEMn_95WM>(eQzucs$%x)FOs<;#jka zy9q*1EEXQw7axf`Isu;TGa5eYG(&SXWvloct2sVAw6CZoBih%`PSVF35?B)>>qv;B zW_HAI@TiE}Mq+Zvm@dx!@zg}du=81JHGL=i6wrfw9K+8wT`7xTLETfq+ zWY4W>S_x;l{uG=fyDqV$;7bCo!z}DT+{$MY=0HkPYRz&;t+J5`1o!hI7&7HCiDhN4 zW!X79YfKNB_Ax8TynjVta|teUcADuYJ`VfCd%DBBTHC{h9gcU4H9mYTfUn~*1&>S4 zJi&d-y)u=Vu_n#7Lf{1&4HyaA$`aNmR+6`z)n`6hT zP{!)c!XI;Y*VirJimk6g8>^qMzrPxnO)jGHk+Y~-Ldb9M_x;kI09Pjkk`WLaK{+saEdy;3M zI@3rXLmxiepqdVi2C>0&Wa>b+x1t^~;&(NO>M;3Hg`M z=0YU6Ne_CC+-LN*gy>63v`xC^Nam!o=jVKUMmIh0oL%B@kl#x{8^2cCnX~PvLI*Zr z2QKHm--2CyMzEWG{vbMGaz2SD?qNfE1bgrd_TmM8_MJm7-lFXH-1|0ryv+4hs28Ba zC$lX)@(Fx^T9-JF23Nm$4|V5J!{O%l30MJ&c|yS(t_a1WghHdCe_jkl2@{_uqUZ`S zd8>#?$X9|!AvCHx;@ADUvViM!|9q`_yfaW6SPhMwMuHNWU@4mgXhJ?cxQHD^ocv7M z;-zp3`3PNE&+)ecwOzDAU>wMIzKm-kflUFUR|?DEIpUxc&q*ggom2R1U4hRilL(fU zg8js2nD`tZJ~xrS2bt|S(HKELlNQ4$j^Yq6tXo(IBlse2#Zx$p=WrWd#qIbtj^M9+ z|2y}-gM@=otHfv{lrlyom^LoMwB{vP(OgvpQlY2PVt_i0A9hQ$|s3A?L$Uq-(i zZ{Vo>I56g}>=+*NR3?YVyle4`;W6J@@sHt{r+e%EZLdc>?ub|S>YfG6ZPUH2vb+`% ziz>R$n~tac0gle+H}WB>-~?w<29;dfUi_f&R7JPk4cZ<$`D z7p3%~Hq2LLGo5~SB%lW>0}JTV1M{{1{=guWCFEQS{%dgKISM#_NGkB8Yvp9k8;x7CM zcjGMeU*m1^2CLvrvivt}E`KCj|AGhbH=M-3@E|_q7e+N65>5OBX~n~$508iuJSr@X zc|0aQi^s)%{0ev&r^MqpEuP1d;uX%%;c4+JUW$Lhv*I0&?_t5^#kX7)__nJG-*MI9 zIoC#f&vhlf@7jhJT)XfC*EM+2skJQDUEuN94ft?7^V;SA+I{z z-K#$B9Eh%BNIkS&TWv7Ji>2KOn3ynNrEvjihS_JH90;{9Mt)oPs_=Z|2!@#5V_*#n zQ^**YPGbgHhM5!UhO5M$@EFW}?(f%SkAf1#MyZjdqUO@bVV+@O!26;u-7Z%zY(*&7 zSKL)TLyn-$6SkJ}Yk)VU5=6p-K5M0y43jOz zyZvoG3k|VDxHf^2dj3(>4P$JnOeYT{p3=|lqPU}XxKao=T z%HzXrl2i746E_$Pt!I&yGAWcSlu$}}p>Wc_?HAK`V40t{iZMLLobK zD^|(yN>ELqj1i01G)DD=5i>R~)zV!pT8|$xoO#HDB4eC_d=yB?AC_*8rK!-Bj-9WY z>KcV;k%D3z!S{7KKL*MhE1E|e5tb2|CIuAl;y61)U5wK*a%C@QxhFd^ntI1ke?Lq@fN8q6GF zhPl8SGxU^ZBvTT`k67Di&r`u{%#kry!STY$;$c6sBJ{jVOE1%V4Iw*E!F-&+SS2_i zp(Lv{Co>q7@CfXQ$h5`6i9Cc*r=VUa@G`2aw0K4r7|-yd1PuyK76I|-=Vi2bS_m&v zuviFtD155U^`$sPWW`bm$Bu#R7zt9$Y;IC;Dw-v@wVs|h<9Bq{XcNZHOrpbxB@;DE z>;W+;#WDr0ST3QUBiYSZ>W!TZ?P*3r!oo2&wj%fu>c+6jj}?f>SgGK2tYRgMOkieX zRPSVs#Ww1T^d3FITIz`DX$i-bH;)uGb3L51J+Tf~GztA@C}_hPdeEMU#iNahje07r zo5>lpJuvMx7mQLMmY=EMEMZ$wXRKF`=9=NdIXG8_rl1`iBbXtwIc@0O%>Jav{(z-5 zmaJKxiY1JQk(C`5reHlbWb9{{)RB1vj$TU8JT}B7>6x zxU>QTnJn&0lBrEvDr(|hnv1*OqHvbd4n;yJ*rcErOj9M5Ni53dfrP_XkBXWV_6rnz zMy&R7^%4;}KQ6+>GA>bYDK5*hu34@vn$g8zb!)w>jq;|ZiY70vkg#M$UD@1dFxZ~b z5*=Mjv<~t|T^T1V{Le}Dr0dG2&*y}h8uoiF-$^yGWL;VHtj^xDgdd;9=VV-^U<0n2f-mxJRT;33g1j`T6(B@!TH`2jw&FJW=@M0fRv7xy+xN>o1WyF;AGs4d( z__j$0dT-3|;=6<_(%Q1vmRi!#*t~cV$zowL${Z|cjwSSEneKKywNf*)a$LmFIyR6f z>~~)zwl1L=nG~frjb@GoWA=gi!w6+;xg6pUfgf9_K3vZ>u78q_Gq!?Hyh}xsgj;ew zBnY2YWzOcGUfX{VfdA>f0vJ~}3tSLnF74RqD~{bSkp;*2B;#e)KHJM$Hk90PS}NFmbys{68w>5Ce@)Yi3$E3b>6NPY$G9W8PDD=y2xl!P2tJOq>(mK zT2Bj4=E-Qf5K9X@_@!uYzf$m1yi$l)ym(8(v|v!wMkuKF_OJ@|sMSV-^>x8H)iZ;d z5nNFxdGQ+wm08K|SlTSbU}rKFl9G%BW=A-jenu=@ zxw%Kr760TPtt~%(Z7#*xnip#Ec!bx0Fd_M)AAiE1W&A}j>HCEKFi0%xt#)K}euA>? z{||$WT5cj+*Ua$8xx_Zrm`LcUg>fyN7UyG^xcc!hW8OAo{6j+7VJ?mpKp7uOIO^j? zc`C4?jj7CGhuzq@89Z#~&+>f=pAw($%H5D2idUGS$gXPJY@p{Sj{MFpaC`aRLa^xT$R9r5qi@ zYiAiw#Iab(=NgnF%9$j;XV}u8qx59B55g~_R2sxo86`6Eqyw0-A0-Ef#`C7`7pReU z8{6IY=&qmhm-`yB4!NoZaGZnzR7nWAg?+OmY)88o)k<_e6!NH^0W1*XypXKQ12~bQ zUe#-h&J`n5v?SyU`n3ktSGfx(ZN~)q%aseo%8~&Sl0JC)hMw&kx+(aeX`YD7Y$*Jl zOB0VL2(_rjJYG5H^VW0%uRbAkBFuyM0$jig>qP|QQk-PEe>B{KnBbzh{8fXZ*8HX090Gg{t;5PJp z-_YGv!})TQnYPR5TPu#ka}i2Rrc*FljLrNrl;_$5BG_ha5LHb3Bc z-f?Wtx`>SMtlHN=pG1&{jh&QhY*2Mq_2V?Hp>OEToIs9e)`4Mj5UU{8GF#7Nrk-Wm zqQJpiWw2%+Uj^2r}uGxo3qg0+U6>p-P-0ZjJCFUitub}n_MJ)(Aw;&bJbS~)Sj$$I|We$ z+&l2F>I!(OYh_V!0eLqPA+NL67w`q-9hj(k_oAdN;Mw&%Fq9M_VkWz4y&^~=cYLbPN_1(W7}<&L&+<;5poVPSgcMb=t75(wS)~&i zr;f`OkLn-54hM-Tpyr9$k;UOTi-*Y9k5EOPWlp}DZ|_hlMz%Qx z>NvIFF+57p2Jj7%LEq48*`@iy65&aKT5xD7NA}V}HD4_pwUpYZdzXW3UrKm|O}o`` z;)n3>-h;<2tZTi_`o6)p0^aS&6CwO212AQ~h{)N+-x9&-$J2c%5U=0iE7SaG(Z;M! zv5)Bt);j;|1cj{k8uVZmYkm&WXl83$&Hm7fO}K=WwFT$ndJ^aDxDXGJJYVGVC4PCG zB>E06!@FGbKCZ&wv4y>Ht27l?OBJ|Anu%+rIlSqwz;)7ETrXXW8>G8=i@ygqN&~!@ z@56TK1KcDX#LbQx-0BG9Hpl6>-Eju)aI9gR&cdCJcHHGyk9!;m-0Rqg`y8~uaU~vf zY{A23A>NOYAu_rwEhQC{G6i+Y#nd&-|P4V-oSgDf7AT^HU7%46Zxft6#h4c RHbi3jz~f_J{)zoi{{?%(W6S^m literal 0 HcmV?d00001 diff --git a/defects/quarkus/unit/QuarkusTest.class b/defects/quarkus/unit/QuarkusTest.class new file mode 100644 index 0000000000000000000000000000000000000000..409f5e800923909cc19b472e6348314e77f09675 GIT binary patch literal 6212 zcmd5=X?RrC8GcV@xszl<7BfKDj7uaT34s8yWD+CweF~`idNiOm)0aeQLENkx4PA(*4py4E^W2j(~TDCd(NFn?vTU>p8BK7^US^X zEZ_Og_rBlzoqM18c+VpM8n8bL8E|NDdf|dwAa9etMXw6$kW>P9vIyDVXlX3>+)ni^SLK;e??qH_5K!yf_{waLp~UeRYR)yea9q z-3%SiMu`_EVJ7Va%t%}hMPdTJQfrrXPo&S;DDz^L9PH48K@AlGlScO19Ex-s!4-O} ztJPp+%VlJ%P^MvyK+ec8)v2LcVmD8qD7lsbrqK+C317&J_$6u!QqZc-)AdNu>~WC+ z@^4la=3}8WQp*sQt}I(G8|u8M2T|8#Oc^ZM)l|lyEJlNdC0;aQY09YDUF+6Z-00!% zBYMPK7wWO1xH1dNajJ$DUNm8)K=#^%9_>!V))|rzxj`eC=naPgdfc!ma=d*LvdM4f ziE5A*o4r^i%}uZwU^p`A-D)q^U@Ze{Cb)vnihszgS`#I_t?{U#_xL?%6=>RQxl%c2 z&YZc$oko0#nTP}>FQNgXmn@Cd76*+EMzOwR_S}x1SaCg-F?crS*4>Mxqx{nl6qr1c5Dl@I5tW2l7LA(G0*>hLq7z+YW{=)&G@22j z)E0_&@h%qEBXLFVwB00q$wB~|B%iv+Nr3epkSO_S@n6%>+A70fdeMu`~rL8O|*9;e0PHz=hmJ)aVWC0Rq3&4q9WE9&I%?CyYqI@Y|3}Yq#?xxos%}B~ohp zWq7}0hP%NNFR++&>*jTD~E^xxA z^s~HEvSFnoC15$O^x_-1ifS}sVtJ@fV08N0<}*S4WlbJjBhX^QYaX*~3*9id`$(q| zY&8>1z~!N^am28>7Z)l{qW}(cc(5ZK#CZxt2gJp`O6J#pw<&zKuJ%V!9<2s}j2z8JjV!cyO1%a$C6O z7n9Vn)zMHVD@?O#b|-p|RHr<+Cp|FpRbV8b_j&Ohc>p*u&YiBcgi-3^hOu-}PPpHT z2jqm~(XTK#gIC5hyufDoXHsI~@!nW%RmwOGn?1R1yq<+O@TP{JOG$r= zc{x(3Ly;|Jw^3!mZk6TbdVuE@)~Fkju~j5X4zzZ~97L{$Yz_I92RP{mYU(~t;5j$xSRad+MgG!%d4(W2CQW-=C>E3W)PpLbvkNXKG&3;D0S4heeS6{QB+yv zoHhWz3Y&~nzgz4&^j^Prd>O=rT^$3(qK~@!n53>UbKf=fVFJo;?=x zJ+gr)FJUkn`Lu*&Y(O(k#agW3*|rHfubnszCSi@E1?OWm`gz^X5m%uVH(?#?@MrN9 zug~yh;uV~M{Wuf9!&wTLdB{9Oj=O~riY)U<-~aHP`~apNfa@SMCvOWrMy^xc97LPb z0r{%$B+(xw)~wm1@w?8Sx27&{#$otH|3C1He>(VW83Vr!49nTXPbYo>;uj=-2J!14 zex1axgZLT5ubb$EiC+&#hS_8Ce>3rm62BPnixR&C@jHk3^%1|V#IKL|olE@ABYxY6 z-}#>oemuA*)nFUdK#GdrQEv%UOJ!1^X7NS|R9~&L$XW2kg7XHjt=3guqjIE1Ws-OK6(b7uLvo650{@dw zU(TSaj_1?WG<^+yx|Tj&N1v{zPdn(-jpO_DIDO(_)AC8YZRwOK$k$%&<+TKkki zT(nBwOyv#rs=R%wt7{M!kLcB;3ZH8aBf^rPL`urj2TIJSVKaR$PuCvC2(|9YBDXc9 z$SLon-YPA7)23y3dM9!#C}x*gV)n-|#7vIKt0-~~;p>*1eIy5slC!IiE*-A5%h~lK za&|*nI&5PJ1a4tE+{)PP{@D@%&oF)48?94&5qX-g7uE3cB#vmN#2EtQYdSY^oP z+==OxK38?EdzQqCMcX2t0&Kr6AFO))EUi4pPm9m91irvvJjaUtl5(~Pjzj#2=T@#h zL64shbau)=SyQdb{UgSaZ+=JR&Tt-#Z~G7rAl;;3=@oGjZV6+Y)4d@Gd(mBUYp=T0WYTT}Oe zLX%33NkvYdtoXfZR;${|2Pzd5w{K}nqdw09L%3bFjbi$)qhtDbh5PO_rf(vzfnQTQ z_cI*7;R)uqYLSNx*nywWR0iwRv%D6Qy06jrbL#g6_4}gweOdj!N~*~ZoC0s-9R{%IzbULYZU6uP literal 0 HcmV?d00001 diff --git a/defects/ruby/unit/RubyTest.class b/defects/ruby/unit/RubyTest.class new file mode 100644 index 0000000000000000000000000000000000000000..f4ff3a5f522c9fc26a9f75bb64b0206d8b632904 GIT binary patch literal 2892 zcmaJ@O;j7#75*NY(ToORWY8$W7<-5r;FB`Y}!S$@Nbf~+w8mS>7vV?uG&TG9y`5nMi_`W1s++bFsW!HcG4y2A{CWY?So znW5ENRCCR8?}+2*+f!!MRUjdtpb=pSO<^2DGsEFsXL-vtRt<+i+SJQ6V`haRmdtle zy|NBV*D#M}OSUe1&&`Tu-HMwW2k2KqLgYSJUj5yjDgsSOt7`>=^6f;R5ebg<6hqT4Oq%5O zWEfpM0l8>fu5Mb@5Y8ecp*xHo^zLK2uw8YH3SqNr9Gjn+Y4=`p2t>hk484+-(Z_Hh zm&<8RZF##polf@+X(fBfw2I|g$yln`rCQmjF6pjTt!)^NR$QZ?TD7QK8tqbW4(BBd zgptAEP6hXepxSKkfMx4D^b!KoTFvs}Utnlh%qz&^qJ&%+!+3)-e47x>8oW5K)!|J0 zXf7KoBq4K?>L4cb`L0R6b0myWzO8lt+6i;ZD9O0YkkPd1T%y0E6>^DlCCYNgOD>Tq zY1#^3$Y(Uo(OuKdC3^Z+wi1?t3A`!c3Kw5~M>w96r)+DL;w2~d>Wv$-3f{t$glWF# z>b{y>wrk5}!mTDR@7?8_Y2P_q3*-BEo6d*F8VUO1UQO0XTRcFf2i7-uDM|;Dek9B> z#COldNVRG>l%_TAIJVP5E8YoX0XK;3ioR})*;Y|^=S_EwdR14q+$zlw+52GE(I~i% zoBX8z;5#MWIYDzWmKd^{_NHUM=dNkV{&Z>}-PJvu97w17(&?@t&0||j8e1DwTJ6rj zmbPL$+Dvl#OrfhQVFfSAUK(ftLy;r(PU}HvWDsdVO}jQyC~#q{g<lrj5;ycb`uWYJ9%xZ5t=K2xE4M3e`MiTE^8{W!Z3Mb+2?y1y?VwPwN}r zSi%OKu*F4^hESoS!7re_)p@CM2Bl!voT4#dasf2$sJn;Pgfud0+iul$^o?o5U9(G7 z8SgQi8u$1xO1>tw;haXy&|#d;G14(hX{)xYF&Wzo?Jw67XWFXAbbWrSIfx%A_y9ka zaEFukA;ZaCEtuA(y>9gSQ2okJ=tb9d$m^$j)mLBWBfO$pCAu0;PTBT)Z6mu!k@cMS zSoUq4-QF+`SiYCF9pSv{VoWcW3#Myi8NzwXGMurpPExK)_=q9#N=^qsm2j8p|Nobg zg8aPbKF-ox#(zYT9=&GtEz_ujTE?ws9)kUzIt&&1@@de8FY`-``m~ghG!P=|ou`l% z9wIay8187lk7%mn5tPS>G+_R2fPMb$KSHB{jHrr7?qjxH6>nvNfs7Q$$f}%rj2Odx zoa$8c(UdAb#*qg65seRUObz}TAt57uj?i71ocvjpK0|X#4et6D$^6^S-w}ca591`A zBA}HpM$rrvN2t~4d3zo0^q3q)A0>C5ETfeC1X&kw0yl9IOJp;U#BF+lHfik#NWmgc zosgeHk#LwjgZdnTz+O3IvpSF(D4+VM9Yb*fsCLEL`-K& z6<(t6uJ=!JmITV=uc1L9kO`_mqUnuxHFzr{#RNqk6uMQ(+jY7DoU_l+o~m0o!#lH{ zpCI}9Q%u;UWE2rf*3!&`MNDNDvz*o{Be|z`)Mrt<70e$jmANL+|S3QnZjFVrp|tyBWWGIk6)ba=pPc=gg{S5 zY!ieYqD$n87#fuP&ZWUnOu82f-Lo$=au8$kS7=xWs3I{)kv;WL#27I;PLX0Eua)AB zk1$zyfSGw!j6{Ef6zPwYs2%OR zcbtNXJm|ZE7c@>meW!6Tid*EZg?o#OPq6HJ;)@NUi61jx!gC~BV3O)Jg=rM::contains` (O(1) range check, not linear scan) +- **Defining opaque types**: `ty::List` with O(N) contains, but N is always small (opaque types in a function body) + +Every hot-path membership test uses a hash-based, bit-set, or interval-set data structure. diff --git a/defects/sdl/patch/sdl-0001-gamepad-mapping-tail-walk.patch b/defects/sdl/patch/sdl-0001-gamepad-mapping-tail-walk.patch index 627397041..349851144 100644 --- a/defects/sdl/patch/sdl-0001-gamepad-mapping-tail-walk.patch +++ b/defects/sdl/patch/sdl-0001-gamepad-mapping-tail-walk.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000751 # UNDF: (leave blank) SDL CWE-407: SDL_PrivateAddMappingForGUID — O(M) tail walk when inserting each mapping → O(M²) bulk load diff --git a/defects/sdl/unit/unit/SdlTest.class b/defects/sdl/unit/unit/SdlTest.class new file mode 100644 index 0000000000000000000000000000000000000000..7ab3bd811ebd282032159cdbb0ac711e50690ab2 GIT binary patch literal 3202 zcmb7GTTmO<8UBuLD=ljqFv8dddr83-1_QQZFbFx^LX9n3cI4v7#EBQQfXqs(N-KkV zNqV7e>hvhBr%jXujLEcT`5?wRwBKxiaa$T=4U z{IRYX6=6gas2b{^ZHZT$oYgm0Dj5&T0)d5`Wl<|OJ3ZYsqhP;4gKN~4x@44>(x#(g zAN(pB(5T>`h9*R}q+Hk21;<=8O9IM$!>X961%c++bXRgaxT-|F4u{a9;IM`xI4ZDj z+Y`MoWFwmuh{kF(Jy`Ls+Yz+kn1bUPbhK|laowjMlpQlqZM#AnQBOH%_gydL3QpQ7 znMOVy#uo(6ClU$0oV8B(_xGO}))$SuSv0bG-Y6Dxg++a?VlC^I%{Pvbv-A~%OKPa- z#0do_HN?;*aL|o;r+FeTN@rH#x#;PgmgBMz-RMzpT0<}T1hfik)R)d$H_b9*K2QxI zN#|+HUSV07zspkTjE1vPqgG_fC_7=iC~!{KuO>PNvbtWT)*E)Qoaj7rmdgc7c*_f1 zl?*3mCpvr2EUb1GR19EH!39~yA%XqdMM~O*MdFKHuC1JW8CMafQ?C=F8hJZThPfFcHAZU7TTRgH9u?oSjuED0Qp3xbVx%2Lxonn*tx%rK zl??_$_K4e|(P=gde+n)Ov}^+$+Y*1dRI*Erlt^m0ifaOg^2V|`VHf5N=T^>H;;if# z1&96d9I$G`0zxjHy|$OL>Dl82Z0b zx4bBPYtKeOQ(BPEW=We*HD1X9@sAB zgvHu3+^kv7mCWqtl}$T_Q{e^=zuV0JgqVSG*C;?~ilPmN6{hjnwc$P?Sly3N}sTh{AT{i1%pe^oaeHuo7Os7GJ49bJU+ zra-5z&&t%?sX52I_7*i7VSHn^yHxDz?;myPizR!-S^C_0-1B*!eiFi)OP>k4`2cIGjA6ba-}>`#N0SML#xDa?ho&}Z#;9WT?ax~Q}G>qSHbrrmEIQU*e+5w1IjwI?r5lYAhf>uX;gU+p>_1M`nVSj zCf3p3IuP!ThI^@3FZJYnAiTc$4^E=N)LKxiZ+_7J3%d5X!ObAbc{4E_;>Sq~zc3Cn z)T5lW@p+8@_^y_dBPK;HYdkCJi!gr z{|3!I5IP~di2hoG=!BctLE60l6+_T?Yeq3bTnWbg5@U{|ALDL>P4I6Lu8i=I8{rWz zA|8&_Lj9R`_OX(QM`&$);W0YGAFCOEeKwT|G>CtuGQkG_-%^=S!@;*x8KvQ5ed@}o zWcMct|HZb}5AjNOTkk+18rZ<8!Jr)a2bJdF!)E27Jrt1!&ndr!FXNY6_32EYnb^*! zGr?xX9YZaV4GgCr=uSKkK;ll%B1;4=q_%?;U>OQ~jKHqYm S-^BO1uX67pet;k0@P7eQ008g+ literal 0 HcmV?d00001 diff --git a/defects/storm/unit/StormTest.class b/defects/storm/unit/StormTest.class new file mode 100644 index 0000000000000000000000000000000000000000..5b92eb29233b252c0a3c554f02b1804b5bf1b8b7 GIT binary patch literal 3588 zcmcInS#TUz6+LgZo*DIMBv~U%HgU#_63N!)5F~p>wj;|jk}S!~C{h$BI4w;}>S(5W z($ixkvt&U)Fc2VY&cbE_28yBzsEQ@K*uJRZhabLyKPam5Nfl+vHs|$>q?RpA@sXc? z%iMSGJ@=k_-B??nPOY6wS zuiQ#kp%!%twyCH`V$)goK-h3}TXQU1pkdS5p~^lLY)7MlCKWrdQ=o1`{hEk?GOrcK z^hG*AC{N2152@INhXn$ryIsGg+Y^Aag53h!HuMq9z5xlP3Q6o$u}>-p&FRi5eM!M1 zYvFNK44IBTr`r-;i;7n4XBcKI)6opGD3E9=N5N}N`qhRO1?>XW8%9Trq9g5fs_2sT z!n8M`-eM#})JoZ1;L?F6ddw5e6-aQH*vihuB5(g`G-4c-TO5a0g z&yvW~twYk_xQZt+A&`84g;`@!&kA&T4aoZND74IKcu*?n1T`V@6p}vmgmq-~zkwadADd}i!!gstH3?gS1jtbB+!6uTXr1; zJ|-*R@O&^jUM z_*oUN%9bB<$a}W{WX{64Os@2ej3lK_c8h*1%jm{O3{xK~<)?LfTyx_c%Q)K10@+tt zM>58osW~N^(yw^wE9;}z6U0hSOdq|6)c;e4wziV-sIK5U%7PPk+3N(0W~;OBw-3>Q z#TmWeHV*|~UE`n2iuGR@<2>&J*;&0@ThEn1G-H+Q8U3Uod0xHVt2!jbSPRE3%PBgx zRv6Wtc`I8C<4vA1W!_TVJzZU4ye-f?uvlR4(zBJ?OFC9^T2B^p)<<qDi`IhPS@x{lxKC;`EO+w#innwsf@OaOH8Y#ji~B|_YoS!A zB;5@`1)?W`n+}dI74$8{y+JC!QPSSRuc+wPa=8p&4ZPsgA$D-PKc}${dAS7L%Ui(@ z8I=35ZRN6p9|`Pwuqc~I86S4Dw0v$K2(r@osN(nYTtCE7a18Fh4)JqN1irwp{26?N zgyl`dgHrUD92Ji9H=#^jM`WyR6;Xjz)Ci;kO@UQ32)uy-Is1UXZ;?y|n}Vy@Bj?Sj z(1E7VDjxMw=HytP{~iv7GV+Id%W;ER-~h5t4Z3ThQ>|2GD2@%U@5k}vTnFS+*#2r>O%K)UHo z4}l!w_b`E^2qaA)M+xNEgMoaRN7)|BKzyeWA!Z1p*8lf(O?~f8q?nlA(X|Bmy90^9 z&a2qnmI$oi$SV36-}cH}#(Fs*uHF4hMLZSocLx)}9aquN6i5W!1FlezLjSml{0yP zkwhdBx{A7WspSX{y~kf06ul=RrKB ziN&eL_zheFuHzHGk=kE+7q7?yDO2(_?B#p_0i0w}3?YtTKHN|7Ej+>}=O}Y~iupXt zW_1oTKD`Ap!p1|vT4ZVeD@D48E$ISW9FpU*T{f^`B`JVYB=I|%X0V->K3Z(;9kRLS`*G`h1Y z&i35FE)n1)aR>2$JGl)z;Kx^}CBV{uoy7VYzFw)9Hjc6#s4Mu4jKt?Ektnx{YWVrv xBEL&~319N)@Z%f&#fNX=3dd^BzC}H6xZk(%eeTt9FUeEygd+F>t}z--{{d largeLoadableArgs; ++ llvm::SmallPtrSet largeLoadableArgsSet; + // All modified function signature function arguments + SmallVector funcSigArgs; ++ llvm::SmallPtrSet funcSigArgsSet; + // All args for which we did a load + llvm::MapVector argsToLoadedValueMap; + // All applies for which we did an alloc +@@ -583,7 +585,9 @@ struct StructLoweringState { + llvm::MapVector allocToApplyRetMap; + // All call sites with SILArgument that needs to be re-written + // Calls are removed from the set when rewritten. + SmallVector applies; ++ llvm::SmallPtrSet appliesSet; + + // ... (other vectors that use std::find for dedup also need sets) + diff --git a/defects/tidb/unit/TidbTest.class b/defects/tidb/unit/TidbTest.class new file mode 100644 index 0000000000000000000000000000000000000000..f9cc4082f64582f902318c590d6572d89ac81ba6 GIT binary patch literal 4143 zcmb7HTXz%J75X<)sgKDJ$UaGaA`rW7<{2nsery zefBxu-rxS_=&$z{UjxvGcY^T1D?*UqgP&o;Ipu=Vo>TOx_G6Rh)U?Im@6~k8I>6v< zX&o04VAyCI6)i2--d89n7l$;{3POZ8gb*YVl@cC8nBk!nJ8r@d&@8o}SVn=Nrloag zWqQyVkB3l&h=`36su5*~+;74lPAle!I!pfOM5p+QS_yTiXApFIxVr4yg(EJaaTUCz zRnYV)e&QwxkKj={UE0tsMbk}&XiMpEZU=m;5H?A8j2nBEOh&{OhN_h#9#+ihq)MUK zjIBJL+ZgH{M|QCKja-gGsu_B`bv%StG>O>GP`ToPRtFGc@Z>uJ*vZ?@06KWPD}Y_R z?FwKwZ+8dLjlCism#_~#Wn?QkArOAWEQP(f<@7pmT;bQKevM97RISayS=MhFxx)w!5|N-RWN5?+FS0e6xoiu)`s3 zR?Sqj7T_!Q6kg@C0A6BWf``vmv>j}N~DQLsCJG^NMekkc1Ag`_8WRyu_iQY zntGQpEDyPflNR;xfo_t_J5grt?&kErYED!GjqdF?-42x?wnjyo9Gg z;t>y1zLiC+N|v2XO%(5i!fNe6d`p zc60`HOPx|}65-db z8Cf^^F+YV*i}(yb=B2V|+Q%F+^eM_f%Mo|D_#nA^&UTmO_0c2qzp}dko@c0*Wzt#A zaHe*4W@q_Em+=J=U*sEoX%$-%Mv)4MCo|#Rsx%z;AFL+6(_aK$e3d8hYxkKt@d)4> zl<;QSkJs0?B)ott6vC`gm{BN)`~I&Gx{D+N0mr#QeOtnJ_=hTNku>$YY1@nMO8DOL z+^AZxx7E{X06!qOeM3X?*g$eDDRasXB!c)Mek9_@5`MxzHQ^Pd=+BYJ&?hRRnp#24 zEDJ}{Qmi6P2>nKeq7@#}bakXSGpQEFxDb(&lSTUcu#$J)E0WrjPHPG@r>|AW-urds zKzxmAu506@$kuwUr0W{dDQDR_74nOR&uQA7mV|2dnq0z`97qi>1sksam7tj$FPL`u%c&js<~yzFwPhA zPPW`Ub>(!`!m*2absckeYD)L5xVr!y7yU{um!zvxoIx7Yb+upRNM zz;6)bfSbNdtw`;}ZHTEkR17=q$o2&U8G3|zVF4Q$UPL$V)iAt)h92LJdfx&b_MqDz z^}mR48-JBOn79Ecw%lKOJN7cU_Sla;*QH$fK#|aXp zpOIA~gnOtH5wibR-9?9p2KH|R?vS&e+b&-sM|3rzcaGvsQa+C2>}_mL?U+OJG7JY! zkKo|(@zdFOx_HmQcQ^-gm&XE%%rH(zX_iOprFw_4YA3_GSXJg-+Cr zQEWqsE{|uh-3GG_!V;PI%WzuDohsmcv=Op9Yk`r1QmP0T+e}#%2-x2Puc9I4jqFIK zgh*R5<%_f@Q~pS2G9^a3lJnSe)K@Z~Ie~_0WN7=2dBlhLvv1@TB(9<>=687^2fotU z1swL^DynbeXeu_3;YEB1n8S(JORL)c_o_B~)k)W?+E|<8wvxMz5VyF$(-Gws(wvfR zRoa_&J9d+`#z{RwgWjo8jvQ48-9O$g=qadrTE>WK;TSt$j~(@8uC zQ{YlnGU8S2y3Qih__pa3XRv%*cKHU z8gtWbOMxu^X&d;jBN`*b@d^Iyo4CZM-mStr-NHPKy*_WZ7!{+!b%aY+mqeQX7fsdp z)V(4%sql7(qM>CIauF(Jw^Z4c> z)dp7O?m5aDs00Q2oyv=`3JLm|H$Wwjzz$NS-8hW>RNKd>J%M4I#R%Qoj^P~j^HlFe zjNuuYxrA}L`JAB5PvQzr;Tld8_s`&$)ZV03xA7F-!X*BIG~PpoRX}BrV2brZV<*WQ z=SB}gOC%@)V?+v4xjU%6Ys&|_gQoZ4p{Dj8BqmTNat~p_?%c)mf|rW;7qnMNIlG9L zTqMKuxH^w(Jj&m9K$kR>Uvz*O(i@#PXV4GnJc0jJnSTVDF9)h3y|-}vDn#K11n*5G zRybdlVSa8OJkmkBMdR1>;vqHWW-<-`p8ULGKYwdKZ`sdz`?-iel2wo_-lPKgGwS~X Dq16*v literal 0 HcmV?d00001