engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

whitepaper: 383/183 — wave6 defect tables + PDF rebuild

Browse source
This commit is contained in:
russell@unturf.com 2026-03-27 15:46:25 -04:00
parent 3eebda37e1
commit eb9612e4bf
5 changed files with 314 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
whitepaper/MD5SUMS
View file

@ -3,7 +3,7 @@ ba0de5d1546aa2971492f74616f13f47 full-paper.pdf
3fda5736a004c621f52701c92a7ca7f5 undefect-cwe407-2026-03-24.pdf
f076f22e9e70a94f51884562aad6fdc5 undefect-cwe407-2026-03-25.pdf
5da33a4087fdca81f70cce84656afc7f undefect-cwe407-2026-03-26.pdf
26971a4038cb3d5647428725f39f5ace undefect-cwe407-2026-03-27.pdf
aead15513dbcb6ef907cff61c6f63808 undefect-cwe407-2026-03-27.pdf
ff52abf9f47a7e6bb25e4519b1325090 undefect-minecraft-enterprise-java-2026-03-24.pdf
c7fe499eb004271b384a31ac01b38852 undefect-minecraft-enterprise-java-2026-03-25.pdf
818d29731df88333d29cfdd3eefeb3a2 undefect-minecraft-enterprise-java-2026-03-26.pdf

26
whitepaper/full-paper.md
View file

@ -39,8 +39,8 @@ A single well-crafted implementation serves as the genetic blueprint.
4. **Harvest Stage:** Mature implementations compile into comprehensive documentation, ready for use
Code propagates according to its kind — clean architecture begets clean implementations,
elegant solutions inspire elegant variations. The process of generating 366 validated
defect patches across 178 ecosystems in a single research wave demonstrates how truth,
elegant solutions inspire elegant variations. The process of generating 383 validated
defect patches across 183 ecosystems in a single research wave demonstrates how truth,
properly seeded, multiplies. Each tested patch validates the correctness of the original
diagnosis & extends light into new programming paradigms.
@ -159,7 +159,7 @@ the missing linkages, applied them, tested them, and benchmarked them across eve
confirmed site — compiler, routing, database, build tool, event streaming, web framework,
query optimizer, and browser runtime.
**366 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
**383 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
1 fixable-upstream (Erlang OTP). 1 fixable-pending (swipl-0003). 2 not-worth-fixing.
3 unpatched (Minecraft, Create mod). No language left behind.
@ -425,6 +425,15 @@ stacks, Spark schemas — this is the dominant build cost.
| containerd-0001 | containerd | `pkg/oci/spec_opts.go:1069,1080` — `filterCaps`/`WithAddedCapabilities` `capsContain()` `slices.Contains` O(n²) per container launch; fix: `map[string]bool` capability set | **PATCHED** |
| moby-0001 | Moby (Docker daemon) | `daemon/pkg/oci/caps/utils.go` — `TweakCapabilities()` `slices.Contains(capDrop)` O(n²) per cap; fix: pre-built `map[string]bool` (38×) | **PATCHED** |
| crystal-0001 | Crystal compiler | `src/compiler/crystal/semantic/restrictions.cr:94,104,141,148` — `compare_strictness()` O(N×M) named-arg scan; called from `add_def()` in overload loop O(D×N×M); fix: `Set(String)` (800×) | **PATCHED** |
| elasticsearch-0001 | Elasticsearch | `server/src/main/java/.../MMRResultDiversification.java` — `selectedDocRanks List.contains()` O(n²) per diversification pass; fix: `HashSet` (200×+) | **PATCHED** |
| zeek-0001 | Zeek IDS | `src/RuleMatcher.cc` — `is_member_of()` `std::ranges::find` O(R) on `matched_rules` vector; 6× per packet per connection; fix: `unordered_set<intptr_t>` (239×) | **PATCHED** |
| llvm-0004 | LLVM | `lib/Analysis/DomConditionCache.cpp` — `registerBranch()` O(B²) `SmallVector` duplicate check; fix: `SmallPtrSet` (100×) | **PATCHED** |
| llvm-0005 | LLVM | `lib/Analysis/AssumptionCache.cpp` — `transferAssumptionsToParent()` O(n²) `SmallVector::contains()` per transfer; fix: `DenseSet` (100×) | **PATCHED** |
| linux-0005 | Linux kernel | `drivers/base/component.c` — `find_component()` O(M×C) `list_for_each_entry` per component bind; fix: `DECLARE_HASHTABLE` | **PATCHED** |
| linux-0006 | Linux kernel | `kernel/bpf/btf.c` — O(M) `idr_for_each_entry` module-BTF name scan per BTF lookup; fix: name→id `DECLARE_HASHTABLE` | **PATCHED** |
| gcc-0002 | GCC | `gcc/gimple-range-path.cc` — `compute_exit_dependencies()` O(n²) `basic_block` scan in path range query; fix: `hash_set<basic_block>` | **PATCHED** |
| tokio-0001 | tokio | `tokio-util/src/codec/any_delimiter_codec.rs` — `AnyDelimiterCodec::decode()` O(n×D) `Vec<u8>::contains()` scan per byte; fix: 256-entry lookup table (16×) | **PATCHED** |
| actix-web-0001 | actix-web | `actix-http/src/ws/mod.rs` — `update_unique()` O(n²) `Vec::contains()` dedup on response extension; fix: `HashSet` shadow (300×) | **PATCHED** |
### MEDIUM — Real defect, bounded or cold path
@ -589,6 +598,15 @@ stacks, Spark schemas — this is the dominant build cost.
| postgresql-0006 | PostgreSQL | `src/backend/optimizer/util/tlist.c` — `add_to_flat_tlist()` `tlist_member` O(T) inside `foreach(exprs)`; O(E×T) total; fix: pointer-identity seen-set | **PATCHED** |
| postgresql-0007 | PostgreSQL | `src/backend/optimizer/util/tlist.c` — `add_new_columns_to_pathtarget()` `list_member` O(T) inside `foreach(exprs)`; fix: `HashSet` from target->exprs | **PATCHED** |
| wireshark-0001 | Wireshark | `epan/dfilter/dfilter.c` — `dfilter_interested_in_field()` int[] linear scan per color-filter per capture; fix: keep the compile-time `GHashTable` at runtime (O(1)) | **PATCHED** |
| elasticsearch-0002 | Elasticsearch | `ingest/src/main/java/.../IngestDocument.java` — `appendFieldValue()` `List.contains()` O(n) per append in bulk ingest pipelines; fix: `HashSet` shadow | **PATCHED** |
| opensearch-0001 | OpenSearch | `server/src/main/java/.../ImmutableCacheStatsHolder.java` — `filterLevels()` O(n²) `levelsList.contains()` per stat level; fix: `HashSet` | **PATCHED** |
| opensearch-0002 | OpenSearch | `server/src/main/java/.../MustToFilterRewriter.java` — `rewrite()` O(n²) filter dedup `List.contains()`; fix: `HashSet` (500×) | **PATCHED** |
| solr-0001 | Apache Solr | `solr/core/src/java/.../ClusterStatusCommand.java` — `liveNodes List.contains()` O(n) per replica per status request; fix: `Set` (100×) | **PATCHED** |
| solr-0002 | Apache Solr | `solr/core/src/java/.../ActiveReplicaWatcher.java` — `liveNodes List.contains()` O(n×R×W) per watch event; fix: `HashSet` (114×) | **PATCHED** |
| actix-web-0002 | actix-web | `actix-http/src/ws/codec.rs` — `ws_protocol_negotiate()` O(R×P) `Vec::contains()` per WS upgrade; fix: `HashSet` (50×) | **PATCHED** |
| love2d-0002 | LÖVE2D | `src/modules/window/sdl/Window.cpp` — `fullscreenSizes` dedup `std::find` O(n²) per mode enum; fix: `std::unordered_set` | **PATCHED** |
| love2d-0003 | LÖVE2D | `src/modules/filesystem/physfs/Filesystem.cpp` — `allowedMounts` scan `std::find` O(m) per mount call; fix: `std::unordered_set<std::string>` (250×) | **PATCHED** |
| raylib-0002 | raylib | `src/rshapes.c` — `GenerateImageCellular()` random-sequence dedup O(n²) `std::find`; fix: `HashSet` | **PATCHED** |
| hadoop-0001 | Apache Hadoop | `hdfs/server/blockmanagement/HeartbeatManager.java` — `ArrayList<DatanodeDescriptor>.contains()` O(K) dead-node check per storage per datanode; O(D×S×K) per heartbeat cycle; fix: `HashSet` (3.3×) | **PATCHED** |
| hbase-0001 | Apache HBase | `hbase-server/.../store/DefaultStoreFileManager.java` — `filesCompacting ArrayList.contains()` O(C) per store file in `getUnneededFiles()`; O(F×C) per compaction; fix: hoisted `HashSet` (43×) | **PATCHED** |
| nova-0001 | OpenStack Nova | `nova/scheduler/filters/affinity.py` — `_GroupAffinityFilter.host_passes()` `group_hosts list.contains()` O(G) per host per filter; fix: `set` (50×) | **PATCHED** |
@ -633,7 +651,7 @@ where D is the depth of the diamond chain. For a diamond of depth 10, that is 2^
1,024 redundant node visits per edge check. Large modpacks produce diamond dependency
chains with depths in this range.
**366 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 4 CLEAN (WireGuard-tools, Solana, git, JGit).**
**383 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 4 CLEAN (WireGuard-tools, Solana, git, JGit).**
---

BIN
whitepaper/undefect-cwe407-2026-03-27.pdf
View file

Binary file not shown.