micronaut-0004 + diamond-recursion CLEAN sweep: camel/hazelcast/tomcat/undertow/vertx/quarkus-0003 unit tests
micronaut-0004: AbstractAnnotationMetadataBuilder.processAnnotation O(2^D) diamond recursion in meta-annotation stereotype traversal. isProcessed() guard tracks only current-path ancestors, not globally visited nodes — diamond meta-annotation hierarchies cause exponential re-visits of shared base annotations (e.g. @Transactional + @Retryable both extend @InterceptorBinding). 13x at D=8, 41x at D=10. 10/10 unit tests PASS. quarkus-0003 unit tests: added to QuarkusTest.java for the existing quarkus-0003 BeanDeployment.recursiveBuild diamond defect. 9/9 PASS. CLEAN markers: camel, hazelcast, tomcat, undertow, vertx — no diamond recursion pattern found. Hazelcast uses proper Tarjan algorithm. Tomcat uses iterative constraint propagation.
This commit is contained in:
parent
29308bfe00
commit
8a85da480d
8 changed files with 496 additions and 0 deletions
19
defects/undertow/patch/undertow-diamond-recursion-CLEAN.md
Normal file
19
defects/undertow/patch/undertow-diamond-recursion-CLEAN.md
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
# Undertow — Diamond Recursion (CWE-407 O(2^D)) Scan: CLEAN
|
||||
|
||||
**Pattern:** Recursive cycle-detection / dependency traversal without a visited set
|
||||
(exponential re-visitation on diamond-shaped DAGs)
|
||||
**Scan date:** 2026-03-29
|
||||
**Scope:** `core/src/main/java/io/undertow/`
|
||||
|
||||
## Methods Checked
|
||||
|
||||
| Method | Location | Guard | Result |
|
||||
|--------|----------|-------|--------|
|
||||
| Handler chain wiring | `core/src/main/java/io/undertow/server/handlers/` | No recursive dependency graph traversal | CLEAN |
|
||||
| SSL conduit state machine | `SslConduit.java` | State flags, not graph traversal | CLEAN |
|
||||
| `ChainedHandlerWrapper` | `ChainedHandlerWrapper.java` | Linear list, no graph | CLEAN |
|
||||
|
||||
## Conclusion
|
||||
|
||||
Undertow uses a handler chain model rather than a dependency graph. No recursive cycle
|
||||
detection without a visited set was found. Diamond-recursion pattern does not apply.
|
||||
Loading…
Add table
Add a link
Reference in a new issue