From 7f92eba7ed819f05021303b5d60133d84bf6e322 Mon Sep 17 00:00:00 2001 From: "russell@unturf.com" Date: Sun, 29 Mar 2026 20:01:56 -0400 Subject: [PATCH] undf: repair registry collision; 616 assigned (602-616 new); stamp all agent-added patches --- UNDF-REGISTRY.json | 3 ++- defects/allegro5/patch/allegro5-0001.patch | 2 +- ...01-mini-miner-delete-ancestor-linear-scan.md | 2 +- .../box2d-0001-broad-phase-index-map.patch | 2 +- ...et3-0001-ghost-object-overlapping-hashset.md | 2 +- ...0002-soft-body-collision-disabled-hashset.md | 2 +- .../patch/ceph-0001-osdmap-underfull-set.md | 2 +- .../patch/ceph-0001-osdmap-underfull-set.patch | 2 +- .../test_crystal_0001.cpython-312.pyc | Bin 0 -> 12803 bytes ...ris-0002-plannode-conjuncts-linkedhashset.md | 2 +- ...3-equivalence-class-list-contains-hashset.md | 2 +- ...dragonfly-0001-missing-migrations-hashset.md | 2 +- ...uid-0001-scan-query-columns-list-contains.md | 2 +- .../dry/patch/dry-0001-listview-hashset.patch | 2 +- .../patch/dry-0002-object-unsub-hashset.patch | 2 +- ...-0001-alternative-route-ch-nodes-contains.md | 2 +- ...-alternative-route-edge-ch-nodes-contains.md | 2 +- ...ph-0001-multicondition-arraylist-contains.md | 2 +- ...SearchDiamondTest$GracePeriodGraphNode.class | Bin 0 -> 573 bytes ...aGraphGraceSearchDiamondTest$GraphNode.class | Bin 0 -> 1196 bytes ...aceSearchDiamondTest$TopologyException.class | Bin 0 -> 403 bytes .../unit/KafkaGraphGraceSearchDiamondTest.class | Bin 0 -> 5859 bytes ...lin-0001-job-scheduler-jobinfoids-hashset.md | 2 +- ...ataflow-layout-update-quadratic-list-scan.md | 2 +- ...permission-util-authority-dedup-quadratic.md | 2 +- defects/micronaut/unit/unit/MicronautTest.class | Bin 0 -> 9466 bytes defects/nmap/patch/nmap-0001.patch | 2 +- ...-processor-utils-sort-order-list-contains.md | 2 +- defects/quarkus/unit/unit/QuarkusTest.class | Bin 0 -> 10116 bytes ...nkerpop-0001-mutablepath-issimple-hashset.md | 2 +- .../tinkerpop-0001-path-issimple-hashset.patch | 2 +- .../patch/tor-0001-routerlist-digestset.patch | 2 +- .../tor-0002-nodelist-family-id-strmap.patch | 2 +- .../patch/tor-0003-kist-readd-heap-idx-o1.patch | 2 +- ...-0004-checkcursion-stack-contains-hashset.md | 1 + ...-metrics-0001-streamaggr-label-filter-map.md | 2 +- ...trics-0001-streamaggr-label-filter-map.patch | 2 +- 37 files changed, 31 insertions(+), 29 deletions(-) create mode 100644 defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc create mode 100644 defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class create mode 100644 defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class create mode 100644 defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class create mode 100644 defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class create mode 100644 defects/micronaut/unit/unit/MicronautTest.class create mode 100644 defects/quarkus/unit/unit/QuarkusTest.class diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index e128779ae..e6ee74765 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -613,5 +613,6 @@ "solang-0001": "UNDF-2026-000000613", "spring-0002": "UNDF-2026-000000614", "vertx-core-0001": "UNDF-2026-000000615", - "traefik-0004": "UNDF-2026-000000616" + "traefik-0004": "UNDF-2026-000000616", + "doris-0003": "UNDF-2026-000000001" } diff --git a/defects/allegro5/patch/allegro5-0001.patch b/defects/allegro5/patch/allegro5-0001.patch index 7c168f497..f4ed22644 100644 --- a/defects/allegro5/patch/allegro5-0001.patch +++ b/defects/allegro5/patch/allegro5-0001.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000011 +# UNDF: UNDF-2026-000000002 --- a/addons/audio/kcm_sample.c +++ b/addons/audio/kcm_sample.c @@ -38,6 +38,8 @@ typedef struct { diff --git a/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md b/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md index 9b643be57..20b3b49e1 100644 --- a/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md +++ b/defects/bitcoin/patch/bitcoin-0001-mini-miner-delete-ancestor-linear-scan.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000043 +# UNDF: UNDF-2026-000000357 # bitcoin-0001: MiniMiner DeleteAncestorPackage O(A×E) std::find in Outer Loop ## Classification diff --git a/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch b/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch index 45ce9d627..a7a5ef46c 100644 --- a/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch +++ b/defects/box2d/patch/box2d-0001-broad-phase-index-map.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000235 +# UNDF: UNDF-2026-000000015 --- a/src/broad_phase.h +++ b/src/broad_phase.h @@ -30,8 +30,9 @@ typedef struct b2BroadPhase diff --git a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md index 46a5de366..130aae243 100644 --- a/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md +++ b/defects/bullet3/patch/bullet3-0001-ghost-object-overlapping-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000001 +# UNDF: UNDF-2026-000000603 # bullet3-0001: btGhostObject::addOverlappingObjectInternal — O(N²) linear dedup ## CWE-407 — Algorithmic Complexity diff --git a/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md b/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md index 79f92d9ef..d0b1e01df 100644 --- a/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md +++ b/defects/bullet3/patch/bullet3-0002-soft-body-collision-disabled-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000288 +# UNDF: UNDF-2026-000000604 # UNDF: (pending) # bullet3-0002: btSoftRigidCollisionAlgorithm::processCollision — O(C×D) per frame linear scan diff --git a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md index 3e4d05ade..0216c2b0b 100644 --- a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md +++ b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000044 +# UNDF: UNDF-2026-000000026 # ceph-0001 — `OSDMap::calc_pg_upmaps`: O(N×U) `std::find` on `underfull` vector inside OSD scan loop ## Status diff --git a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch index 94a5dc59f..37a84765d 100644 --- a/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch +++ b/defects/ceph/patch/ceph-0001-osdmap-underfull-set.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000044 +# UNDF: UNDF-2026-000000026 diff --git a/src/osd/OSDMap.cc b/src/osd/OSDMap.cc --- a/src/osd/OSDMap.cc +++ b/src/osd/OSDMap.cc diff --git a/defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc b/defects/crystal/unit/__pycache__/test_crystal_0001.cpython-312.pyc new file mode 100644 index 0000000000000000000000000000000000000000..92ae12f5166c990525729072d70268e7da8e2c41 GIT binary patch literal 12803 zcmcgyYit`=cAiVlkRyo_B~eeyl1H`_iH@yTZ11igYV@$3hpi-bl5X52EX5f~v?-FA zA#I7F7K-b(RGcErX1nHMvsi8sVC81p`bP^aumzeeTA)QyfU@M8oz)LxH(1pFEGcca z`PFmoJUA3-+1a8Ufk!iUX6~K2=eyr|&A(JvS2D1@^5cIFMmrhiS9oA-tiH2VNf_n^ zBQh753PvQNEkrI5u|;IBkqey2U1KgdLM0%WCF39?G80_n0bry0?8 zjS;Iqv1vVDsHSZ-(B?MVYG_+6wAGnyZrWB4Z633&mbNuOTcg=lC)JBhmwFjSZnQBH zxyT!@Qur@<#O7(+C-6qN5oX>tZ`;R6wk}3?6YcHn@OJiVaKF!(0p>O4z4MC`~EC3%x^cj(Y_$=%0;*MPW7~#zT@2ll_+^S@DM|D_@=oDq8nSa5f(D!$?AG zMiR!ffnb2yXfPznJ&F+Z%ThRY(7YK2nhpkpU|4u@J~k5xSH>a&bQ_$Sr#(n>(MT9> z2>L_9WGHea9u@rX2-tZj7?%9DOniKMr%* zk8|nMTYNZ=ebMP4uNoJaf z=}KmpB$*?MjW9vRP`pS!vY&_NPIR5uCs^>Cvuo&MJ}L>}h$!`W?J67g&q}IOn{7p9 zQIB2%|AT>;*CxAQRM~t$L68x8YSpa&lH}96lWU=+4t|ONVv%{^VCow4p2qdshV;wd zzK}V$S}SZgS(oDh!*UK8mt_E7$k@ym3_}aPph#L_Z=8AKAj2%!ljNfLy2dT=;&$VO z36r#mwmJC2yF`1U8v75}j>A#R9486=ByFGQ$Ao#WpJnD*FPAuZPKt(t0SZJNgn+%v z@laTj{gVLRQpop)0eC?r7?VU{I_{T6Z=Vc|K0fRO;Kt#PMy0T*wv}|?i-)8B zSYSpHy(~;W=s|VJk`fQaR9CszX-_LQ;T@&b{1#L!sCWKjj37Mdn_8 zQ+ob`{!PZtjgpij&)2+Py;Pl^TI1XEd_(%B>+a0p3cvfhd!65xJ+*x5)|or}$c7WI z))Zo$Vh*~*iP|~@;s)Stfrw<9EZ8i#1LRq!6OS~tP1z8A6Lc=Tgg&R&E;m9?auW#E zslS|pBN*?bdQ3toOpe?JS9HNo@q$=n^40FeQ+ao7DzJEZo!ygVvs25{YwVGHRbBdP znZXZ^=BnCrZ2JxX`!4iT1h5eVnB}cZP%W@YHfg)e$mBgw(st2=5pA}D=9QNh;&B^l7$1BWsSSecA+7K80D>B#l&g>J*Pu%Lc!ynzKhTC_5;@4p;4T=SI zeFAN`0WeJkB};&Lo{?F&2v($Bkz(}et$>sTI9UwFx&j#Wsge?BqR6bo$e+fGU0G8!7GR+uP9~cm{p+k`<`?;iDw440M7V)DA+a!le7$B=ZH!$QL04C>k6alj=Ls}hxa@>g4qd<^y zJseJe;jvGHIw(dPEj<+0zt^GR6D^R+BQK(9lAG}mtyGv|RYCJXA*$134;;%VU~w}_ z5CmWpOwp?!xbD^pE44zlAuF%e?%!l=+};$MuX3m7ZddIAoWB3U(hHgKJFdDaOB))&nBf+L3h3Eh&85`@$PLWq}5j992k zqb-XmnMTb3kZ?X zJ)(EG~#aQd?Kdug~BkrVY>xjCpz199FVd5%rag4@;AyM!P;|D{qKttOj zxM|rRoxuPQx3dER265n{O!^f`=$-K^LeEqr(&N=H7>Nm@6phWC7(6PB2?vLT-#asK zKsYz>#xdc{06jj7`{&Gk=(HDlHHczpuB4|Sv!_AmX%KrFJaBGMn2f|`wvTYY(lK^> zsI}5aBu&LsP7Y4b#8e`x zd|0~Tqiq$qN81$)zEB0YX^~juqsccNYoNZigS+2|p zPpwrPS{%LSbfwAF#Ja0FV_$XcPLVuck@7CN?(%IbKvAP>{2p+#(|c3#l#Ww?y_wwEcU_f`K-D=J(!lR z`!*S#+n*xqo{nr?b}+jyb7j@jlj7GK_GCM=BiX02&eewARK-2MHr)yjaF^e^!tc!< zTH|~3#Z8CTcyFGsOM4-dxy$ccfmmj|wCUs;zdzs9k*!EcOYDO>82j@ErlKJ|w#v6G zj^tTxG5F4zyKM6c3$L@rwimZ>_%cgc{$#{RpS)s3f&rsr90`3z>Mx$7gIL(j zWb6fE@p;YG*8ztMHi(&R(+pY##r7O?6}$@3RydlsgT>x;J{X>c;8u&^4?r?NPq!$2 zDmhDoH;7?1&|(;dfvO^frc^Skg>f7Ps)~ZXP63PcG}jT17-;l~1BrnhU%RjLj;qk6 zG6VvQvWd|3mM51-R$Ka(s#A_Mmv=X2>fcS~__kCs?{3JDcN00jbtzG5P0g9S2OSn$ z(@*pnhnY0zUM$!Yw4BrvdX(j~+--6!XaIcfhgu196v7m2ULjnhT4cfEnf_WK*wn1O zu2;xWTJ#Dai(_0iA{;*`jG`E$iZzmPzg+x|o(Z$ino34gGOBs!190|H(y}J9}N4%p~TQ*;9=W6OW1o9 zL=hrPY!tKC$Qs}AFlM9YijcJKu1_Di{&vQH+r1~p@5#A=`5p^Tm*H{B2f zx+RO(ryV?gds+Y8#D#UeCV@~aTE?8!v2i`W>bDqLFm%dHBo0=5QZg-R>`E{I7TPpu zkg3A(OMVW-eO$Z~H|^ABXj6z;HYj`3Cr&(ux*vY~cVJv)1O#ZlwmsvAOyUxkBB`NbKDg&@d_TFA%#5zO_hbieySs9H zSI*t_n5vwC{{MeeNvZd#66Jw!V{v{C>3&F&(okRW3m_)s7jYL2!?xs%+EuKJA&V}i zB5~PA-J8VdS5Zj$K0d<14};iQE5OnvT3K;-m69|%HPqbwHS82?0tgui2{uS(JPXEc zN3&-kQ*$X9WGX@eH~}LqIFjr|lUTLBQ5NWT!I^}h0hb(P|BgM!h-{L4AHuAp10*=> z5PCR_)YDZ0A+XcSC;G=C;i;fJD?t6DK(CO#gG?^1q=1HtG>XgcK0XIsi(fi4hdEJo zRDePTR1qNem+)xo7<}yrAmo5B9f=9Z%{cdkRV%*)hhAP=v&ZmM@xoP!PvwnHAuSz< z#r>f&o@DV_wvj$v7)&QX}gPo!QRS zhOVWPsgaayuI*=2r_v+&=9bLJ2bWXNlLJI8 z%XM$LDmd*4=+yzZ(A*5?V+#`=J9(5?u29>`E#DWlYC?G*a*}py@luMd(L*d1dN7Z$ zQN&`EFo8X&KSmLoNppa=(7X@LTk!gXt;6W*tZ?fg=&o*DPqnPci zmIud59Nl4}G_SL)*};4N3La!@5JU;T)$Pp=uGV!!f#q?z4S9`n+y9vww!8L^Rs&|> z1k-gm+;^X%8VPAaMrg_+h@GeVu*JB1)#=`T@895%Qz&R@&{z-9z#u=;+50x^6k7(v zec#F5g2WZR8r=%~UT7;g*ciDb?cqhU!e+qRc*aEw8#Z^Mfhh7u(M$rI#Y$%>% zP6UD~F>VwW`>6RYTB0mG*i-P^8Upb=L*NaQ%o|XIwuU4H=kdGb27$DE9atRZFYH%{ zR@NXiTME?;TOXtm=JYx>rKc||j!#QrU}AYVapsZBArO&eEbT+l`mMNBsPOk44@Dr@ zQ-=G@-u@1rSHTM8e=xsUWNvpKzePTtT(0}Ew9Wv~!rukSQ%-rdHmEq6{|MDHS~I`4ivxtzZ3TFrb3A;Ne7| z2M`|xKHdi}f9ut??&GU_kFR!|xa~dxwyB~r?|KgGP(|g6TTAv%Kos=`zQ~&>d?+Lo zK@<@b+iZ*<+fZQfNWnTg+88h@n=Wcu99*Slk?2TgFdgO~7_-(G2pljw#IXo^*dX6(7ujj64Z&K|NlTU= zDxhIe0mlauZ2~1N`1ZqZSP!9hG9DAI1R?(?OJY1M`oYt>5|J-Kj6>aJ8w?}&q38#J z=?sde9yov+!x)~Rj?!zm2i_hd?*g&it8S&>qK|_0Cm%+!TJ)6|e8{|M=B3;%|A+$| z1p$C^@6Nmg@yZel@ysB6E|KE%o`&?klyjYjNCz@@{H>lf{%GFaoOvd5^tQV@$9J!| zyGu#30{Wwx`E%GQCdnfAdHhlCGw2OsP0$-xph(DqU@4rl=#A4d8{iOAhx!sYM&Kw9 z069X12wY^RaR&DJq<(dY(_G=LOgwEut>_~nprN>|Kq^-MnkX2i{x5Z-MM;Vp2v9T! z;yyx?rmQq=Q{{gX+7dMuXL|UAkZ1y=VAsLR@L31uuMC&kZgHt8KJ-jS!JFO&5*!lq zUPczSiK4{n^wRzleLF&=6(ix1p%JF^gsE3e(}@S zbG7GmN4aOC8it|(n}8LvjinTLEE)ax?F97}wxRe3_$gSeMS^m0Pi)mz8eT7+4#3ac zOm2ECueY&y8q4{+rmOI1M+^C>h?$`7T|m5H;D2JNg_q?j!_g|jt`ZA|LdDFb8>Y~F z-+f%B6r?waR;r}TWTar8#IyTA6gj{q@`^n&8TFCqFFP?0C!k-zO-ATmNnX#fu-XY(ipAxyB1p5**t~FM z2E1Evy_9%h1|p6r%^IloNxv-P(wdNyAms%R#WSil(nXBvYv6fsPJECy35$s*cbMbt z7ylA_9RyL9;LFYL(7WHt@$F0BD&=)^Za;?pis!b7*GC?Q*GutTlwXEicQMOb>i%Yh zG09yvDhjM&yMg&fu*LvRDcbL$a{AG7f`a4+h2V!p7<h<1+kC}2Y(t^K&-4{J?upGBj_cThq=eQny(R$Hn48JR7zS?7Lg4pl zYAr5<^HB+Wt>`&_EEp+?W$bY4*01UPA}JrkP%?l5m4$vwGIfxj!`Irj72-E2_v6x_ z8+?PPKRIUY9&sNJC4MM65er3xGyE?I%OzaLnm zKg{|aflBxIiNgmh6=NOjknVeGXzmzP)#!(wMj{WI2j}|a8F+ZjNyX{DFMvq2oiy@( z;HtpAf{c@_c_{KMTwz8;ZE!#nB{VkjR+h{Bsl4_@sV^?00a0ts5`Z4Ln-@gY8vP-S zGf<$0krj-_sf$B}R&Cb&97RKc&mRM-ggXD>M9+3`XeOxS!vBIkl@CF{H(9P~s0kNk z^`Y3@ynnfKwduf8Rf++p~4I-FtKV-kf`H9=`e-Ua1{SLFup|V|(}Q96y@t z_{LAWf7<*h$?YCpAnw67>M+ot=4m`cVxo>1UEcH==)2&9OuKHs+2fX~pi0`Rc>r*JQ>B;^)} z2X;cphRs3P2elmO{RLaMRpTIz%_feF5=dy0j?H?W9NTPSN&RNMlZ=zihDvf`vtuu* z`(lFZCp8-kh%YV>52@T>Kzwn)gN-1*IM71&Z!jRfI8sN($OeP*K`+C)QiS~7=nwZa{?^MRdVcm3wUf|KDr@P#w!{T18(@AW;4r~c^q2TnNrQe!%Hq>uS| NU)`w9{`Z7{{2!sZmqY*n literal 0 HcmV?d00001 diff --git a/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md b/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md index 244db0364..091bbaaef 100644 --- a/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md +++ b/defects/doris/patch/doris-0002-plannode-conjuncts-linkedhashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000289 +# UNDF: UNDF-2026-000000607 # UNDF: (pending) # doris-0002: PlanNode.addConjunct — ArrayList.contains() O(C²) dedup diff --git a/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md index cd55ff323..f9e31d0c8 100644 --- a/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md +++ b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000381 +# UNDF: UNDF-2026-000000001 # UNDF: (pending) # doris-0003: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup diff --git a/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md b/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md index acd54588b..426857d50 100644 --- a/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md +++ b/defects/dragonfly/patch/dragonfly-0001-missing-migrations-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000104 +# UNDF: UNDF-2026-000000382 # dragonfly-0001: GetMissingMigrations O(M²) std::find → O(M log M) set_difference ## Classification diff --git a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md index cc9469dc3..767c99508 100644 --- a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md +++ b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000107 +# UNDF: UNDF-2026-000000383 # druid-0001: ScanQuery columns List.contains in orderBy validation loop ## Severity diff --git a/defects/dry/patch/dry-0001-listview-hashset.patch b/defects/dry/patch/dry-0001-listview-hashset.patch index 32b20fe05..51801d56d 100644 --- a/defects/dry/patch/dry-0001-listview-hashset.patch +++ b/defects/dry/patch/dry-0001-listview-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000314 +# UNDF: UNDF-2026-000000054 --- a/Source/Dry/UI/ListView.h +++ b/Source/Dry/UI/ListView.h @@ -... ListView class members diff --git a/defects/dry/patch/dry-0002-object-unsub-hashset.patch b/defects/dry/patch/dry-0002-object-unsub-hashset.patch index 806094b57..fbdeb7a4d 100644 --- a/defects/dry/patch/dry-0002-object-unsub-hashset.patch +++ b/defects/dry/patch/dry-0002-object-unsub-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000316 +# UNDF: UNDF-2026-000000055 --- a/Source/Dry/Core/Object.cpp +++ b/Source/Dry/Core/Object.cpp @@ -269,12 +269,16 @@ void Object::UnsubscribeFromAllEventsExcept(const PODVector& exceptions, bool onlyUserData) diff --git a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md index 4dcea2d67..25d0f595b 100644 --- a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md +++ b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000108 +# UNDF: UNDF-2026-000000407 # graphhopper-0001: AlternativeRouteCH — IntArrayList.contains() O(P) inside edge loop ## File diff --git a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md index 63a4e7bcc..81eb4d2ff 100644 --- a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md +++ b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000109 +# UNDF: UNDF-2026-000000408 # graphhopper-0002: AlternativeRouteEdgeCH — IntArrayList.contains() O(P) inside edge loop ## File diff --git a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md index 617abb3cc..9c5713993 100644 --- a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md +++ b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000110 +# UNDF: UNDF-2026-000000430 # janusgraph-0001: MultiCondition extends ArrayList — O(C²) condition deduplication in query builder ## Severity diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GracePeriodGraphNode.class new file mode 100644 index 0000000000000000000000000000000000000000..cc2f0b0d5ad8f0e98a2994e2b3edf09f797f549d GIT binary patch literal 573 zcma)3T}uK%6g_u!-Bq_NQ~Q8GD8V&o-z$PJ`Y@3|@qJt;ozmUdUHex(1Vzw8KcF8K z-Q9W+3i4s*+_`hlnS1Vhe7?N{IKfs98d3(*7Ib6?&dgJhb0u!>#Cag@$Go|+D@EXr zPnDSZ-moXbXg9g*_(Ms^94V$86Uz1Wt#}a5M0g{o8wJW69oqdYOk@q@EaYJk4i?sT z<+TiyKb(6?AI04es70v!@mkC76VlD3twLLQvNM|wWY80X3A6GE`&*Qds@trR>-w|6 zm1in0sQqVqKlVp3J3N95Ka31in6;22f_3S6GH6aj7|M{4o%2=V_?KN&d2$+m5}_E+ zj-&XbV~I1%9PJ>5G-JN8_X=uMUtm1(kx<}0!wA%Qtzh+su+0K-R&PARc;sNd)Mm9J Z=QOOLlwcX_j7839C}V@WF&Q^uegTUEhtmK6 literal 0 HcmV?d00001 diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$GraphNode.class new file mode 100644 index 0000000000000000000000000000000000000000..f07028dbe5cd69a390d2f8395ab28658d085d0f0 GIT binary patch literal 1196 zcmbVLTW=CU6#izpEG#R<7J5;!l%jIcQnfzOG%4!w|?9nkpg;OVVlRn^w7I+Q&v`mwUa2;cHM4h$04E#T6ZK%rTUQ z1TOFMx5xas%LhIBwT*_s-FEMZ$@`AoIWRmwC-3S`$6$yJxNF$HFg%9E+Ih07V_8JW zbnJ@Aa#hDX78rsy?-Oo*>?yf7eAl$Q6+tK^DqCb&$~@ruVcz@ZU?l4jG~ivuksI=n}=fnH08bm(-}TQ@Oxo zQg5M2YE-3)bJQ85KJ2#)_kg!7N*=N4qAsOM<_o`z#jyPAShjXbZHE0nT>T&SC~5gp zc9~%-f9di?nF~`>^5#r(t>Fyaw(-mq1>gGH)NP1PlQ4Cfz+K1lRoo}kKQ)6v-?MGQ zty?%D{+i-@%e;{y2=Q6m2_Qjt7$fhwJ1Nx`dgdgEMKLfj<<#)vGfB9|r*r${q= dAZwc2Iu!)C=`~={|96SI3 literal 0 HcmV?d00001 diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest$TopologyException.class new file mode 100644 index 0000000000000000000000000000000000000000..2a57c6d96edbf632e8e50a0dcb20eff16ce6dcc7 GIT binary patch literal 403 zcma)2Jx{|h6g;;j2_du;i2(-001_V(85uy8Q27*92NJQnsYwlq9XSqypVbM8fgiw+ zLcC-Fi2*Fx=eu`)KE036w|4-iSoP6D+eIh90vv{o2mZvvjH@)ft(29yIDbw=VWn0K z&WTjg4j9&UN8i548mZFby*n2k!%;<+@P^+%@=L>u86Am;1UJd-O!8c-X)H>+9qU48 zI(_-ky))EP!O$B?CB{`g5hmu7j1)i8l}W^ftjW$_tq<#D4BnW&xzeR|(W6)YO2rUd zD<#Y@<7FvIhW@XZ*n&$Fs~4k9Gb3E2+a{^C?(84Dg3X({U-QPdjy9HvwGd#r!7f$^ LeX6?Xq7Uy2#sO!? literal 0 HcmV?d00001 diff --git a/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class b/defects/kafka/unit/unit/KafkaGraphGraceSearchDiamondTest.class new file mode 100644 index 0000000000000000000000000000000000000000..ab1fac46afc2789c62a654e2025c5cba5d660d77 GIT binary patch literal 5859 zcmb_g33yc175;BBGw;phg=NSDhoHPrkR&8z0TWGtvO`z`HIcQ7kIYLlFqt=}~M z+7_+aDy`y%YpIIb@`?BvASh^U-D+3sR%=_eTI$kG+p1O5|GqcbBv|Oz;p4vh?sD!q z|M}0k=jEwSx()%DDTW4+g=_^L4PN*JhOIX?8s#w~-detN-Fmax7Vu4t#-sLhf$XB< z-kKS4w5FzY#S0aT5U4pm!A(}eidn54b2m4e2|H@Vg9I_8As-_J zMz$Lp%-L4F*|1kc?KbvOwh^~e0;d)otw-_ELjeR4mVOu|5E^XDas{IWYL8D>2ef5G z(Teoq5kLV>(J%(OKu)XlfV;r)?ZO<4#pe`^(=Z;V3gq_rmq>9#vlX|EXgsyZ?D&*| zE>-G^S4$B^8j4Xuk*y~EIl%Uwb^UD53@IoT7}Dph#a6sEfQgu-pVW&^5aG?(IzP*pvL)VFxuJ8 zD;mUYK?qEf9AJo?K8V};8JpqYAVQ>;Gc?SUCXGlKNyd{rJ+(Gti?=)TlMCl+n1}iF zNWX=QoF3&Ia?iG6F@`TWT9<=*kmidtEXEQV(dXB`MKm*Nn@PjAk^=byB-LleDQ78` zDfohhGo_lrJ~=&0h<%%pYA`q3a&41_v#?yi6X(FE!Rz(=N`Wzbey^w2twyZTHf*yu z$^uv+^T|Z4(eOo_%~Li?CM<0sRz(Z@qbX@aJ;!3LhI3(%0f{t^9^jVD$^G1NY+Cx6 z#F{lkK_ksy4y zLLzacK+#}e4d7G;94Y5p8ouqwX)&TPDMvxb%PWAt5tpjCmRdJe>al2?_gYzV8VJE&Tpshr$z>T^S?<)2R6!t7g7Jx(Tc4H#Rha?to{FDKAZzq?W3z6x==LVd zb&>Ag7mV(U@k<#zz92#Rm9+F(iAw$8Nns0~*YE;fWWF;uM;V$PW)GRyXFK=f(8c6? zL%MyPnQSuF#fWb%(|7X*77dwqe`B;YZrJH0=dM5T403cfb4PlLxTz=1;(ijH8)Ldt z2mW55YRw7DA`b0zr^IhfKe?H#QOug{4@^;mOfd$gHZxZ^wRND;N++Amc}y#;mH%6r zJV|Ce-v13OnU|Onc~+UjW|2@So5l4K({8gOB->j8bKMeJZ;n|hQ@0s#dNie5@mPl* zF?mrjf?BMkzR4-HGvSox?aRU;HA$au+4>rB_9PYW&`wb{U8wjA4~}OTRjYI0Z%nqN z@LI99LdCniFO@3(!IZmfW@DpV^)IHYc{A%5>p}(zOA|9PP3WzbJ<eaG^V?;@<+J zb^eN+JkS&7wqnn7u9v`rJGz0&n9RTWcC=kjhw!-&vUx+>K2giNU^F`qO8SY9%9LHWN-G%Q%*~T75ijCTGW_ zt>lJ(zWnBL>)GK)r4*)X&i8x_^e$CI4!L+-7AhiF;FQl^N*B9uppc0<3t&B>%F>EG zRo>6ellLp1e%93d9%cJ$zMae`zdGS9*#~hSI|47UmD4~TH}hg;UoJhB)r%Y*QW8`S z!oO-Ca`r>p&5{0l%9-}~RZ1neN6g@!09QO#@;HVcL~zx_E=uLSanj+EM^JDBa!MXX zK_^b$U0QMgg;_joxa>{H!o!%@iL%{nDsDiaq!ZPTw4aq7#eoD8CtgLn)&X2o4#UTd$z%lQ$!fJ}~4_1TcA=IqOE^DmyWLJAb-cdUd^>Rp(BKshxLf$SUrP1leu+P&ovN1E_ku*6} zt!7vIL;jGu6Jx_l$X`_(;O?q$pc9+8$?a_Qi(TC>hkdo4tzP!7lcIuOrrcU@*dvcS zRIOxJt06U{?8L~hFQiu0`orF^pF*~(+;JrA-Q&1fhMr5UB+W@9giSbw=#1m%LN(4K zfzHP|TtF&pfzAGTL~RS#Y~{agtUT_!DEOV|CP)2(_&IMJ zk%J8A_c8th_`B&CwP#jAP4DC=0?p#s1sdy_8e}yzWlSLhWz=3=P|}63fhTU=i_0V# zFWZH%93E5Hg>Pmiw#kWYGQGIrGm28cdf$hu7(Q1s3thv|xfYXgy`#4WSto~hF6+z8 zxh>o&^I8RS#xYJE=_+&8XP$W@L+2(YsGIpwcPl2~HvSD{XU~}hBN$e%;8pj`EJ-Sb zNo=W0sytjxS}pGN?vheQ)~4V!9A`9Kw;wy0K5p5M+xRjgcsu)JIOfa4ojqfBu`kE= zyq-!#R>c@Hb318fulHCnu(tc-q@MoNqGN?Q??ZhwGk`H^atqafe zIE0Co+4Q;l2=9~lBi^LzT{`UG-2yPZ<1UOOiAUoe6yaXdVGmRN1I(SBSVp^>@F4&6 z@DQ`=AtZ2^yn7hi@fb<-IPSy~-1Rh9{giLd@PudCKF9p|JRSN1&wGg{zKFMYFTF#D zzl&GM{Z~aUUK1l(M~=qpq7ZM0GQ24!v$~suw?%`q63pgGH!cK2=QWRqmmqU=Hx=%A z&*D3ys~YUQ#_KdQ?Y?CuEBhvcSs&606|XzDth`yr6A}6I)2Wy7zY{6$r7Hi14CX`+ zuH^qW*w3OVNBC5E#}_!)&!6}<2P`Nk=1r%4+iCyow10KlzdP-FPWw-%ecx$6blQ)c i_7mZwq_I4w2D!9CrGs)=L8?3_SNNG80zwl*5dIH5$`c^~ literal 0 HcmV?d00001 diff --git a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md index 2e8b92a4b..640e43e61 100644 --- a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md +++ b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000111 +# UNDF: UNDF-2026-000000447 # kylin-0001: JdbcJobScheduler — List.contains in stream filter → O(J²) ## Classification diff --git a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md index 8ff93d874..851492086 100644 --- a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md +++ b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000111 +# UNDF: UNDF-2026-000000447 # kylin-0001: NDataflowManager.updateDataflowDetailsLayouts — O(L²) ArrayList.contains in layout update loop ## CWE-407 — Algorithmic Complexity diff --git a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md index 3100c7e52..c7ace8665 100644 --- a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md +++ b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000318 +# UNDF: UNDF-2026-000000608 # kylin-0002: AclPermissionUtil.transformAuthorities — O(A²) ArrayList dedup loop ## CWE-407 — Algorithmic Complexity diff --git a/defects/micronaut/unit/unit/MicronautTest.class b/defects/micronaut/unit/unit/MicronautTest.class new file mode 100644 index 0000000000000000000000000000000000000000..eb46eb5764a248dc5dff593160b2fac647d57ec0 GIT binary patch literal 9466 zcmd5?3wTuJnSQ^SbLPxU1_(n293na>Xaa-;kbr?8;T{MP2%-@q44EMrn9RhP34*#^ ztKhX>YTatID&mD!t5xeG5Jjz9@2zdE+j{BNb=$4BZrxVht{{?q|8vevW|AmqpJ$)V zB>(;Y&-cCG_kWi&dFgP^lK|>uxEBsM4QM{-a0!Yxg|~z&?zXMO!lh*X&p# zmYE}PmX)tD;1-N97jBmd3A`FM$zz82o5D*OQdzN~Pz}=cmWWupTS`aA9+i#IOtNd(r zz$hP%K~SKjV;4kC%Ino|sSn4hL!IGB#K3WaQTeAQHb)~%!s+&=D7hH}XA#CKN=^_A z>08E0HD2l`eB*sM2`BTEj_~H_{A8jvoH;X=X=f{)2`4fpg#|n|Wm2(3+bll>0HTC20VkK4?X!2n-&LB};RPoB?vDQ>F5$?*Yjw($nNyn4tuZpIV@h#CM zF>;w|ZQn*gl-1XlFI5Me>BCuScgeTW3@W z;UXXY!Ca?=@Hy+UvfyQ^t`TcJne@ETNHIS`tVPRx*>{-g^4YTVsTQh zW^VG~W^+c-otyE)i@2X=l%~OF9dVlvx8n{f&W5g7JhD8R2``9+JCcbA)i!5BO{!=D zcqi@@oYZ&6Xf0d2QmJSnQ^{M}5o@iiGpmMVqRoq)xJ$8jHqkKm<^c*=*T@gwezZjJE)8fCl2Pp3sq@MF9e%W#bn*mFKSugDk{ zOSGn<9TaR`BC=SytQYZ;ftP*wi89}TJ{9OwR$gUyw4*bl47;N56(4@4+=!1Xot|0{ z-5BnQo1T0&pFcktq3ayh5KBZGyE-;RQ>)eGqbfIL!mXRBYj$7jpf^^WtsUfUGhp~N z?Z+Tf0#8${EfLOirFdxl08O4f@U%SjAp?Ufm@{k6EWy1;)Qds39@W`Lu_$lJ5ma38 z;{OvuKM%|=!;7~m*_CRI(!Noe{sK=rS*arJ*F4&lbS4$3h|r(p7c6IzqBovoP! zO`mm$eE=)9=L5ll!aY-4LMv*gRfV!_)lR88s;B=&uyBx*rc~t}HT~$0`cQDnfTJSO zNLOd*2<&_;m{YiOT1#kQ?Q{~+$nvNd`5R5g!n2e}J`qeGaN0)G0Un8vgMt}_TTf{T zMJ%@$T2MQ)zbpy_d59747i`W7q)(CsyAKPd4%l6Q+m=|GL2sm1DkYSlkxVO9V7LH} zR}Go*mpB+7HORVnbYsRX8ugl;RIIH%Gt4C}uNdMs#6zbbUcoriR+~XxEU_iIIa+CX zQzjBjDHerW8D2B+ygA=o*bA+zv?QE}#G~nP4awx@u1?#{n&%a`<@_gD8&@-k8f1CC zxz6TQmNCdbVtzOtZz2*jxxV^DBAS{X52w@7v>`*7-wfbsFj5U+nt0q7FJ(|=@x^d* zC6gxgQ$)0xud@6Fdt+D&Ykk5V$ir+1US+AKfl&#RI|++Wj?*y#%}g=dIogE^T!JcG zgDJR)alyTqh9BY-#v@gDj%$Cy{jYN8FL~+&czOw{OGGm;oWBHl@*z0n5N7hvAvFh} zA2ff7Jo6(P`IR>E`xNqHi2U&id8?5_{Zl5 z7$$QzOHbG=wd85cU@V#PDqv|+KbA}(54V&_agy8d+5k?H%EGK0aCrtco-Cs{mJY4!ro^T4S4yAOm()}Jj&Xy8Q z0lO2jT~iC+cpMXXbt-CHrsbjZMh9I1qX&}#f8{<*aZ+`aP56UibB6FJTIU)gXzasj zf^O8Q)k;~fY`cKGHs*XVx#?(LVFqETCOaO z)vzp0KeUxPouubi>hn^3Wpi#{|IRNVK5bE0q z_3ecE4nn^>#TNFn~K8j#&9}rq?^OB&_zW8i2GbAL$z`PB>;GJzPFk(0ps2-T1bR^-*Kf{rTAR z5B;+C!Id@3Ms~#QtY-Y+-i3uU5uP4is;qr><+`Q;F;tg!*m9IXcdl#Vq{6kw&7+FF zyKsg*S;K%Yn2j@!2^x008^oH!Ce|+1GHpaK=(gM47((N1uP|ek`}$Wc|=0i(^@`xaf<>Qqy0NtVi>1+7ZZl ztUp;cSUDeKqo(Jh7Sv5V{P&nb?8b>f&A-QPkFt#sWw$R+XzHRA%mfN9N{>Z`eNni! z^w=IeZVr|ndk1gZUOcI?ATt+`4;ZGXIR`^bjmr!?!55YLF%nNQ>U)Zz&C?8Po}vT! z5mw>H^rFu(oO_;O+Y1bYUSz=Y5?^hweuWS5 zYkZ2=WeDDoQFv1(v982hG6TPr8oVv@__k*m-jNo*Ha`IVf!%t;y4C>b&SV{jw*cQSj4&>A3Ij!fMYcdI$H3lqYZ}~ z+whs=QXF>N%=%XJI_?sO<6hAm4~p*CBQD3&VmMwDx8qguINlPkB~sx}4;ES59_* zAZ5-^q+A;&6SOfhQLBvOUiWZYf`Q4kQv%_GE=)( zPSqZj8tr+RrTtQ7YwxjsUuw0FWUlr%nWud!^L0%Y=tE_pe!MK!Pn9KlqtxrovQ$s9 zPRTO;0%_DQm(%rc$O`>>S*4u1vmK}PGS$-!{EBIs2F#US1mUv#%w!EDHBIZK8}A$B zay3Xl{|Sa2#z-^08_T5QWH|u;2z5rOz1*Hs-yA1}!i0w5 zUglpOlTV8lHq9Pz2n=uPd-+D*VmUVtoM`c86z=0o{v3M)rg9vr1G$bs1D|2sS7Egm zHSqR5TP4*@{IXc$AQoE*U=`^QHHp z&iuIoeab$sa6zAL<>U2#`mn<|(`1Ig?ktoyNmYY`$vZbSC|Ci8!~AZJwpG1bYGwYa zvb-nkB(1@}XZgfQwp+Avvq_D-?W47biet4q(Wdg$XH@E~8vo2jU)T|J(<_*Ph4vi1 zJ(D%7J2A)@Wm$93y$3(G4xJb@cjb))U5!DbM%%9U?(Xfj2~aU!!HIhAMCHWoqaMoo z4f=u-^3=@#_c$9xvKFJ|92`&UJweXJG+Bq)vYv@#7>%+4E#y5Z5qw>u*e)A!1=n3G z?YK!|gmn{sAe+&{cW)}Us|C%@IKDqJg;7tH<}dHgVa&AJ6h<#IK)qmry1pUK;B}M0 zHwZkxo3wyu3aPOVv@+a$_N+-0Z11W)JaNKays!^Hb<)R;wUWR|giS%gMGD+pr1}_s zt|DMNO)ga}J56TtJdw~b`q|z4PR_6LEgEGlY0{ZNv2+oe^HDBanV)XM8o2=LAEM)}ZrL{8Ye6g+=cz=+BfHeVI&=`h2Ez zhTn>*zTAIIK{o29B2}oM?*84qZ}+h^fnPvFE}?ub<*S+PI97IGqFjdQbkuX?3bJ%1 z|CQh>bjsBxYa^fy_ZISYqRrb|{O6Y6nBw|Z{FZeFBSfdGc-t)BG0WeX<$svvyJq=E zvwYty|7@23WtM+6%a6?Rzs>T0%<_O)erlGVnPsmk`J+mwsJFddwtO;FiV^%@`Ouvp literal 0 HcmV?d00001 diff --git a/defects/nmap/patch/nmap-0001.patch b/defects/nmap/patch/nmap-0001.patch index cbb15f47e..dabc6782f 100644 --- a/defects/nmap/patch/nmap-0001.patch +++ b/defects/nmap/patch/nmap-0001.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000105 +# UNDF: UNDF-2026-000000187 --- a/service_scan.h +++ b/service_scan.h @@ -280,8 +280,8 @@ class ServiceProbe { diff --git a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md index 3bb33e3c4..5726b17ee 100644 --- a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md +++ b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000330 +# UNDF: UNDF-2026-000000500 # pinot-0001: SegmentProcessorUtils sortOrder List.contains per field in schema loop ## Severity diff --git a/defects/quarkus/unit/unit/QuarkusTest.class b/defects/quarkus/unit/unit/QuarkusTest.class new file mode 100644 index 0000000000000000000000000000000000000000..d9127a5ef62d4fcca1af665cd8fc3b24e9e413bc GIT binary patch literal 10116 zcmcgy3w%`7ng4$?_s*S}3=oD)V0g%YfO$d!5;Y-U2%-rAg&-)1G9&{TNM>SY5~02- zVy%y^>#l9Zbz6#Bx>^?>t0bc0x?6SKS|8m$w65!;w%cyI?r!UgP0aq!y?2s3$w0wh zxBTXJALpL)o$vd9|MPv{IpM|6o_HESomBeag4=)=fDVr!e|xkiI9j%|x|35=d-dw1;ot%Aa$hT^7CJ!;f+69brp zu)y1rOr)dnL`o1Ua`d&Vs43o{I!_5;s_N{Hwze8LMKIB+VPZ$D^}J}RtvN<(rYUP? zV2Xj6f-%G0%#Q|UDZFM2!uDJy81>2ac0v|UCTbK?r)A7CKd$YH#a2c;{g|U9m!Q-@ zSpemjn5OXB7+4fQEl8H&u$)X6dbBN?S{2(#tM#5|^$jEjukV2PbAvxruddo-W25=r4Xe+&1*WP{{r*O&{m}sDBlswZjE8zCx zd@9o(i*5~aeXI^(4Vp=lj_8h9eKOG!O|Orq+xV19M-yq2Ygx=}PItu<+iHRktX6Za z3t&Ai61b9N@u@i+>U0XJRpUoJW~q@I)yPW(3v&z_?edXgyttHRbS0By@@7O0Yzd$R zt%5njZsCGy>F(-^CDQZg*p7J1ygKvNluT?BjEg5)x?&ytT9;@&H)gr4QBiAa0Nc<; z7j9Fnb8_hCT&wo_^J6=97-$cm0|_qCVKs(XMmW8(j?VNh0zn65s9+LSVWU-O%JXQU=MB(OxqewrL#>^tX&sRaS_wH_(@r( zkpH~KDy?n|;LEs)0Z0K&A}vjJCt6jE?`ny4GN91wdQn3|aii*dO8~c;os|i>I_q4O z>Yv+(KgaC`{vv?C#2wj;*p*7hI>^tYilQM)_jq#N1zehGIx`mSAY5O=*A3hmz+T*y zNmORcSs6_$Zg)g?D!m#TiyOVTn``NUy5?ptzQL#Ebq!5HX3c#nIDAV`%wCPwET#mT zFV00^H~Dc7?lo{<0N=)eOd8GBj4`rP>DjIpNe(|1ugf5y2jRv(6)FNjXn0U*^S6pI z4Gkx#Ob;Fk;9&)KzVb~&YFVr^mS~M7TFiCxXaIj_epJ42e#~f45M&PAmw9Uq!lU%b z!;>m>Jta8LslOcu9I73&WfZxU&?8FdGlHrU5}H%Qvr5E22xjFFF={}N_00Darq3x% zH*9byemn>F;DrGG2`_SSZ&9&iSv=a2OmNW!hf0{C5TZi!_f;M75?NK$SiDX(ysV;Y zs~4}bZT8&Ct$zFv|6<@rs!sZG7SER@ySKEnnhF&yv$Z$rXEl@Io%m@0uj37dldZ|F zjwlzySx(DsGd4Ob%M?qFCc9S~jQs>3b zd0XnmFL;@^2&rilG(<*@${oaEDU7{RtyTO|55<| z_aDw@LwNY{JB7#Z1&vPi?C%a`j@gm}pCFn3krMl{S@hGdhPsCPrcWjAut&N%t8PlAOw(MZmvfq8p@okA{y1R?L8%FVR(Xn*T z;FzPs;+n-Zg8PmMM27P@hFY`z0ojgDCzEY+OsDjG;ZLC_^JdQJ|G1`19G&YM5(%|? zI=L)=TvQz@t7^a*E7kj-2+)&IF(>dN)Xv$5i>QN}NVWK!anWAF+|-GWc{|4^fxkJ~ z&5~w$T*c&kM~yjG)w*n2%4$57?uvGttqdJWwvjU%i3dG(_YDE^~;y8__j8_ z1sP^HUTzht>`;ptTc(PV@Mk3;s0zu8F z@e9@X%7rH+piodYLO@HByM>l?B9=;7BJBBjQ&UbFG3ESCk)^ej6%~^WWgfm zl%{|Mrhv+d6HFq}9scwBmGIhn8r2 z`w;e-mn`%n#}kurU}mK0!puvS7@j<2`GDGFS)h23?SokYpI_!lM3t-KJTk{Gr%90^ z#mp&E!qUgwcbRoUJkgWf5u0aGyWZT}E|0dbAm1gp(-|P`juvarizZszW2sq9$>fgi z%r3}T_FA#RIfFHD?XJ$4y^nBqcP^#utnCz0PsE$Kd10stnBlFyJ(^0zQihZZW{DSVsGYGft~ zaVno?@j4q7JiS_i)6m4XHT-rF53pJ=7wwqG8mfZZ+DdNV=5tpy7vJQ!`*^7I8KupF z|1*r$4CF~a4V`}!I)DAp`0CBP5-x83Z1_Aje7hBV(+J;mCw%1@_)an5^E*(BWMF#N zgz42`m`;4q50%Hl+98};tviruggO+eAu@}I%wi(5gvgvtEb55KQXZr&;gQy2wk*dA zoQt(Qm%0cIxCD)e^F7J-Zk*3O{skr~GvT#RnPH-G6cGm~)*CV54$a1-!p7u&g~=RZ zQk21DKbB=k=5bdUA%o1C7WRbnkg-|YJh{{4lSv?h)OnAb(%BUD^r6^IRw+I`X_0e3 zRw^=bvGid9laNPsI!ox$dFpA2;2Gpqld*=$SjAVv6lU^uFFXhM8+^$W`KSZCk7W*Wa@#zw@oTf-jB%arg2T*8W25~%!nF`dSJT~{L zZ7pY3u`Nz$eRRZ;!&pJ9S2hJ#tt>6GA+R`Awo0nC$y%!lQQEh#J)}QD){{@_VJ#nw zu=YGAs4?ZexbP4zuJ#^4(0mVTz1U#3l!iU3CG6#!CATzejA#jaR)vjfZI3>9VDM|| zo8<<*yblqA7}lP{7y?dGtJl)trm${{dWa@iF>ei_1W#wYxR=1*hslI#Iv(Iz-FLA7 z4|2U9Vs1W)sN#02R}7%cdhW+qB0b2^sb}>8agOi{29=H+;Z-M?7W|w+tYEuj&8xYDhRdT7`_WsYs3qR2HPO)JlB+JvyC zY$MHfXN-F}tPNXN!Xyv8L1li1ad?v}>Ma!G-Z z0Zr^T?W-8J&&6!!7R|OVLO*E~?JX%SC$ziOl+J?T*ET9#Orj`a77lq=Q;7g;ib?K8 z?%F*r$uG$F_To!Rt^3Vq=raoS0(>QY$2VYT2f(7jcm%hxkw1SgzSiXdq&=OPE_9gBjwrYdDT#w&i7a8-YPC!tLib_Ro;*{ zr0>T$A1%^c-pI(lP|m)93FLcP{d3Yp`s@`wCNNMYC;qQR_` zNSpP0{Otd$J!1amxM_@;RaUu4NkAGElV=`GZUI)$I`*_{UBZ zs6!)x8ZTw})c4?0`ynH-_e3Q=F;b!(epi*d34_9$t0G@zc9lbVahM^%3U%e`gX+NW zpxDHZPY-`oBh*KG*xwI*aaXC5m4P%zIWQ+Hp&3@zV#&G}KCOzpWEJq^+#^rR9+|In zva1IU)y<(l$^>$cQ--0uXGXE9>d7ufykU>>w4F}Fo}mOW+r+ZKRAOrshh9RDD(|4;XG1PwFF<$o`UOQccF1}p--*mo0GkGt+^LJ3FSGd z`ZG%_wq>YFujW)sx%*`GD!^L~PG)pd`dI-cOO>}rsxrjN;5*9x;CsRMt$c2CG5DU@ z{7WnCXBywn)%Z&rK&#Ubwp#EV8}#zvJDKdKus5p_RkP-vn(aB}W^0bg*?NrGjo>?0 zS;9giOt0^*_J+O6${J#|T zY@9Onnd<1-N(mF(VsGr z_46=&fXVDLR@8&)uc2T*z+T?(78mXnoqv-ua8SJH6(5dB9$t_DUXw9+Q^w*G-anIo zXfj^L@OWyXOpqBoW}3_U>3pwd%Nm{mT`FNo^L~X)mTP6Y?3Re!#GbdyOu0u+l?P>( zJj?s{WVXB{Me>Ri%j-Ovcuz{@Ln)I%DR&h}nQNlVbxoH_*GyU9Dv{G&D`cUoO{!eG zv~oeyWW>2uA_3cYe4GV9$DtDl5^bkvfRB|&U0TbjqaVY z!hI9(w@Q=y4q5H~x-`4*mbLD0%Z2WPvd;aOtal%gi`=is#qPIcgZsC#QFF;9+H~G$ z$|kKuHf!awMOz>(TCKEd%O$3*l&#u&*`~Ego7N+7?Izi-eN}d7_w)Xsv}=z^QtOp2 z?HNgFKasTd8|l_Xdi3#fg+4`g>a%2*UMW}V)pC`-My}S|+}cY zdi^=sqyJQH(BGFY=^yd_sodxhx!E&TZt+ZzTRjuy&s0(3J{L;{aT;`kCvl>&>Nr~l z5r)Tp=h=dRdo)cOWR)@8s9TM!ML)r~0nF62lOHz7?T62th7}QiLKfwbRsF1LW^xn8 z-+-!<)F#)*twfj&1!|h9@Q)m(da3`8bdT^m&s1}MSC*(rItR&ix7kHi)RE7l`~YTs zo?(OBa2d98B}$iSpqOP~zxwY_)g^oyK*)qcZJ`EmhKRB_IAoDIh*0IScKBOPO9#2V z%izsT#b$GBu{q=Nvf(Kl-!kquK^w-^Ih@B_CK;@Ki4)pEZp)87;gsV}X!0%N#$40U z#4JA!%JdPFkyF;d85XH0jhJxwy9H*(fRSc8`zc_pej}z2!7XYx;F3HBKk(otAhRJ1 vdFndOypA`o6U=MKyiPQ)Ve>l0yiPN()6MG)^Lnb3QXY>J8RX_l1;YOaCmq8q literal 0 HcmV?d00001 diff --git a/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md b/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md index 4afac81f2..97fc2303f 100644 --- a/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md +++ b/defects/tinkerpop/patch/tinkerpop-0001-mutablepath-issimple-hashset.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000014 +# UNDF: UNDF-2026-000000314 # UNDF: (pending) # tinkerpop-0001: MutablePath.isSimple — missing O(P) override, falls back to O(P²) default diff --git a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch index 93ace7b4f..963ae5b14 100644 --- a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch +++ b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000014 +# UNDF: UNDF-2026-000000314 --- a/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java +++ b/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java @@ -203,13 +203,11 @@ public interface Path extends Cloneable, Iterable { diff --git a/defects/tor/patch/tor-0001-routerlist-digestset.patch b/defects/tor/patch/tor-0001-routerlist-digestset.patch index 05f0d18e3..e666c76c7 100644 --- a/defects/tor/patch/tor-0001-routerlist-digestset.patch +++ b/defects/tor/patch/tor-0001-routerlist-digestset.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000106 +# UNDF: UNDF-2026-000000316 diff --git a/src/feature/nodelist/routerlist.c b/src/feature/nodelist/routerlist.c index 3f82d45..c1e8b9f 100644 --- a/src/feature/nodelist/routerlist.c diff --git a/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch b/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch index 784649ff0..af1b89687 100644 --- a/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch +++ b/defects/tor/patch/tor-0002-nodelist-family-id-strmap.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000187 +# UNDF: UNDF-2026-000000317 diff --git a/src/feature/nodelist/nodelist.c b/src/feature/nodelist/nodelist.c index abc1234..def5678 100644 --- a/src/feature/nodelist/nodelist.c diff --git a/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch b/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch index 0ef8b5c73..1e94d702c 100644 --- a/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch +++ b/defects/tor/patch/tor-0003-kist-readd-heap-idx-o1.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000231 +# UNDF: UNDF-2026-000000318 diff --git a/src/core/or/scheduler_kist.c b/src/core/or/scheduler_kist.c index abc1234..def5678 100644 --- a/src/core/or/scheduler_kist.c diff --git a/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md b/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md index 669fafbd0..f1c014215 100644 --- a/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md +++ b/defects/traefik/patch/traefik-0004-checkcursion-stack-contains-hashset.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000616 # UNDF: (pending) # traefik-0004: CheckRecursion — O(D²) slices.Contains on growing stack diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md index a9bab812d..17fc67d26 100644 --- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md +++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000334 +# UNDF: UNDF-2026-000000330 # victoria-metrics-0001 — `streamaggr`: O(L×K) `slices.Contains` inside `Push()` hot loop ## Status diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch index beec4f4ab..1987cfaf9 100644 --- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch +++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch @@ -1,4 +1,4 @@ -# UNDF: UNDF-2026-000000334 +# UNDF: UNDF-2026-000000330 diff --git a/lib/streamaggr/streamaggr.go b/lib/streamaggr/streamaggr.go --- a/lib/streamaggr/streamaggr.go +++ b/lib/streamaggr/streamaggr.go