diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index e128779ae..e6ee74765 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -613,5 +613,6 @@ "solang-0001": "UNDF-2026-000000613", "spring-0002": "UNDF-2026-000000614", "vertx-core-0001": "UNDF-2026-000000615", - "traefik-0004": "UNDF-2026-000000616" + "traefik-0004": "UNDF-2026-000000616", + "doris-0003": "UNDF-2026-000000001" } diff --git a/defects/allegro5/patch/allegro5-0001.patch b/defects/allegro5/patch/allegro5-0001.patch index 7c168f497..f4ed22644 100644 --- a/defects/allegro5/patch/allegro5-0001.patch +++ b/defects/allegro5/patch/allegro5-0001.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000011 +# UNDF: UNDF-2026-000000002 --- a/addons/audio/kcm_sample.c +++ b/addons/audio/kcm_sample.c @@ -38,6 +38,8 @@ typedef struct { diff --git a/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md b/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md index 9b643be57..20b3b49e1 100644 --- a/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md +++ b/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000043 +# UNDF: UNDF-2026-000000357 # bitcoin-0001: MiniMiner DeleteAncestorPackage O(A×E) std::find in Outer Loop ## Classification diff --git a/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch b/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch index 45ce9d627..a7a5ef46c 100644 --- a/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch +++ b/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000235 +# UNDF: UNDF-2026-000000015 --- a/src/broad_phase.h +++ b/src/broad_phase.h @@ -30,8 +30,9 @@ typedef struct b2BroadPhase diff --git a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md index 46a5de366..130aae243 100644 --- a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md +++ b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000001 +# UNDF: UNDF-2026-000000603 # bullet3-0001: btGhostObject::addOverlappingObjectInternal — O(N²) linear dedup ## CWE-407 — Algorithmic Complexity diff --git a/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md b/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md index 79f92d9ef..d0b1e01df 100644 --- a/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md +++ b/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000288 +# UNDF: UNDF-2026-000000604 # UNDF: (pending) # bullet3-0002: btSoftRigidCollisionAlgorithm::processCollision — O(C×D) per frame linear scan diff --git a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md index 3e4d05ade..0216c2b0b 100644 --- a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md +++ b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000044 +# UNDF: UNDF-2026-000000026 # ceph-0001 — `OSDMap::calc_pg_upmaps`: O(N×U) `std::find` on `underfull` vector inside OSD scan loop ## Status diff --git a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch index 94a5dc59f..37a84765d 100644 --- a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch +++ b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000044 +# UNDF: UNDF-2026-000000026 diff --git a/src/osd/OSDMap.cc b/src/osd/OSDMap.cc --- a/src/osd/OSDMap.cc +++ b/src/osd/OSDMap.cc diff --git a/defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc b/defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc new file mode 100644 index 000000000..92ae12f51 Binary files /dev/null and b/defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc differ diff --git a/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md b/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md index 244db0364..091bbaaef 100644 --- a/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md +++ b/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000289 +# UNDF: UNDF-2026-000000607 # UNDF: (pending) # doris-0002: PlanNode.addConjunct — ArrayList.contains() O(C²) dedup diff --git a/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md index cd55ff323..f9e31d0c8 100644 --- a/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md +++ b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000381 +# UNDF: UNDF-2026-000000001 # UNDF: (pending) # doris-0003: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup diff --git a/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md b/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md index acd54588b..426857d50 100644 --- a/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md +++ b/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000104 +# UNDF: UNDF-2026-000000382 # dragonfly-0001: GetMissingMigrations O(M²) std::find → O(M log M) set_difference ## Classification diff --git a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md index cc9469dc3..767c99508 100644 --- a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md +++ b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000107 +# UNDF: UNDF-2026-000000383 # druid-0001: ScanQuery columns List.contains in orderBy validation loop ## Severity diff --git a/defects/dry/patch/dry-0001-listview-hashset.patch b/defects/dry/patch/dry-0001-listview-hashset.patch index 32b20fe05..51801d56d 100644 --- a/defects/dry/patch/dry-0001-listview-hashset.patch +++ b/defects/dry/patch/dry-0001-listview-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000314 +# UNDF: UNDF-2026-000000054 --- a/Source/Dry/UI/ListView.h +++ b/Source/Dry/UI/ListView.h @@ -... ListView class members diff --git a/defects/dry/patch/dry-0002-object-unsub-hashset.patch b/defects/dry/patch/dry-0002-object-unsub-hashset.patch index 806094b57..fbdeb7a4d 100644 --- a/defects/dry/patch/dry-0002-object-unsub-hashset.patch +++ b/defects/dry/patch/dry-0002-object-unsub-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000316 +# UNDF: UNDF-2026-000000055 --- a/Source/Dry/Core/Object.cpp +++ b/Source/Dry/Core/Object.cpp @@ -269,12 +269,16 @@ void Object::UnsubscribeFromAllEventsExcept(const PODVector& exceptions, bool onlyUserData) diff --git a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md index 4dcea2d67..25d0f595b 100644 --- a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md +++ b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000108 +# UNDF: UNDF-2026-000000407 # graphhopper-0001: AlternativeRouteCH — IntArrayList.contains() O(P) inside edge loop ## File diff --git a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md index 63a4e7bcc..81eb4d2ff 100644 --- a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md +++ b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000109 +# UNDF: UNDF-2026-000000408 # graphhopper-0002: AlternativeRouteEdgeCH — IntArrayList.contains() O(P) inside edge loop ## File diff --git a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md index 617abb3cc..9c5713993 100644 --- a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md +++ b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000110 +# UNDF: UNDF-2026-000000430 # janusgraph-0001: MultiCondition extends ArrayList — O(C²) condition deduplication in query builder ## Severity diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class new file mode 100644 index 000000000..cc2f0b0d5 Binary files /dev/null and b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class differ diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class new file mode 100644 index 000000000..f07028dbe Binary files /dev/null and b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class differ diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class new file mode 100644 index 000000000..2a57c6d96 Binary files /dev/null and b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class differ diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class new file mode 100644 index 000000000..ab1fac46a Binary files /dev/null and b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class differ diff --git a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md index 2e8b92a4b..640e43e61 100644 --- a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md +++ b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000111 +# UNDF: UNDF-2026-000000447 # kylin-0001: JdbcJobScheduler — List.contains in stream filter → O(J²) ## Classification diff --git a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md index 8ff93d874..851492086 100644 --- a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md +++ b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000111 +# UNDF: UNDF-2026-000000447 # kylin-0001: NDataflowManager.updateDataflowDetailsLayouts — O(L²) ArrayList.contains in layout update loop ## CWE-407 — Algorithmic Complexity diff --git a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md index 3100c7e52..c7ace8665 100644 --- a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md +++ b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000318 +# UNDF: UNDF-2026-000000608 # kylin-0002: AclPermissionUtil.transformAuthorities — O(A²) ArrayList dedup loop ## CWE-407 — Algorithmic Complexity diff --git a/defects/micronaut/unit/unit/MicronautTest.class b/defects/micronaut/unit/unit/MicronautTest.class new file mode 100644 index 000000000..eb46eb576 Binary files /dev/null and b/defects/micronaut/unit/unit/MicronautTest.class differ diff --git a/defects/nmap/patch/nmap-0001.patch b/defects/nmap/patch/nmap-0001.patch index cbb15f47e..dabc6782f 100644 --- a/defects/nmap/patch/nmap-0001.patch +++ b/defects/nmap/patch/nmap-0001.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000105 +# UNDF: UNDF-2026-000000187 --- a/service_scan.h +++ b/service_scan.h @@ -280,8 +280,8 @@ class ServiceProbe { diff --git a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md index 3bb33e3c4..5726b17ee 100644 --- a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md +++ b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000330 +# UNDF: UNDF-2026-000000500 # pinot-0001: SegmentProcessorUtils sortOrder List.contains per field in schema loop ## Severity diff --git a/defects/quarkus/unit/unit/QuarkusTest.class b/defects/quarkus/unit/unit/QuarkusTest.class new file mode 100644 index 000000000..d9127a5ef Binary files /dev/null and b/defects/quarkus/unit/unit/QuarkusTest.class differ diff --git a/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md b/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md index 4afac81f2..97fc2303f 100644 --- a/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md +++ b/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000014 +# UNDF: UNDF-2026-000000314 # UNDF: (pending) # tinkerpop-0001: MutablePath.isSimple — missing O(P) override, falls back to O(P²) default diff --git a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch index 93ace7b4f..963ae5b14 100644 --- a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch +++ b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000014 +# UNDF: UNDF-2026-000000314 --- a/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java +++ b/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java @@ -203,13 +203,11 @@ public interface Path extends Cloneable, Iterable { diff --git a/defects/tor/patch/tor-0001-routerlist-digestset.patch b/defects/tor/patch/tor-0001-routerlist-digestset.patch index 05f0d18e3..e666c76c7 100644 --- a/defects/tor/patch/tor-0001-routerlist-digestset.patch +++ b/defects/tor/patch/tor-0001-routerlist-digestset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000106 +# UNDF: UNDF-2026-000000316 diff --git a/src/feature/nodelist/routerlist.c b/src/feature/nodelist/routerlist.c index 3f82d45..c1e8b9f 100644 --- a/src/feature/nodelist/routerlist.c diff --git a/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch b/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch index 784649ff0..af1b89687 100644 --- a/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch +++ b/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000187 +# UNDF: UNDF-2026-000000317 diff --git a/src/feature/nodelist/nodelist.c b/src/feature/nodelist/nodelist.c index abc1234..def5678 100644 --- a/src/feature/nodelist/nodelist.c diff --git a/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch b/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch index 0ef8b5c73..1e94d702c 100644 --- a/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch +++ b/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000231 +# UNDF: UNDF-2026-000000318 diff --git a/src/core/or/scheduler_kist.c b/src/core/or/scheduler_kist.c index abc1234..def5678 100644 --- a/src/core/or/scheduler_kist.c diff --git a/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md b/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md index 669fafbd0..f1c014215 100644 --- a/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md +++ b/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000616 # UNDF: (pending) # traefik-0004: CheckRecursion — O(D²) slices.Contains on growing stack diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md index a9bab812d..17fc67d26 100644 --- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md +++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000334 +# UNDF: UNDF-2026-000000330 # victoria-metrics-0001 — `streamaggr`: O(L×K) `slices.Contains` inside `Push()` hot loop ## Status diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch index beec4f4ab..1987cfaf9 100644 --- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch +++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000334 +# UNDF: UNDF-2026-000000330 diff --git a/lib/streamaggr/streamaggr.go b/lib/streamaggr/streamaggr.go --- a/lib/streamaggr/streamaggr.go +++ b/lib/streamaggr/streamaggr.go