undf: stamp new defects, registry 576 assigned

2026-03-29 19:56:49 -04:00 · 2026-03-29 19:56:49 -04:00 · f3bc1553f8
commit f3bc1553f8
parent cdf127dd05
13 changed files with 22 additions and 14 deletions
--- a/UNDF-REGISTRY.json
+++ b/UNDF-REGISTRY.json
@ -566,5 +566,13 @@
  "dry-0001": "UNDF-2026-000000314",
  "dry-0002": "UNDF-2026-000000316",
  "spring-0002": "UNDF-2026-000000317",
-  "tinkerpop-0001": "UNDF-2026-000000014"
+  "tinkerpop-0001": "UNDF-2026-000000014",
+  "druid-0001": "UNDF-2026-000000107",
+  "graphhopper-0001": "UNDF-2026-000000108",
+  "graphhopper-0002": "UNDF-2026-000000109",
+  "janusgraph-0001": "UNDF-2026-000000110",
+  "kylin-0001": "UNDF-2026-000000111",
+  "kylin-0002": "UNDF-2026-000000318",
+  "pinot-0001": "UNDF-2026-000000330",
+  "victoria-metrics-0001": "UNDF-2026-000000334"
 }
--- a/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md
+++ b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md
@ -1,12 +1,12 @@
 # UNDF: UNDF-2026-000000381
 # UNDF: (pending)
-# doris-0001: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup
+# doris-0003: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup

 ## CWE-407 — Algorithmic Complexity

 | Field | Value |
 |-------|-------|
-| ID | doris-0001 |
+| ID | doris-0003 |
 | Severity | MEDIUM |
 | Ecosystem | doris |
 | Package | fe-core |
--- a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md
+++ b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000383
+# UNDF: UNDF-2026-000000107
 # druid-0001: ScanQuery columns List.contains in orderBy validation loop

 ## Severity
--- a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md
+++ b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000407
+# UNDF: UNDF-2026-000000108
 # graphhopper-0001: AlternativeRouteCH — IntArrayList.contains() O(P) inside edge loop

 ## File
--- a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md
+++ b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000408
+# UNDF: UNDF-2026-000000109
 # graphhopper-0002: AlternativeRouteEdgeCH — IntArrayList.contains() O(P) inside edge loop

 ## File
--- a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md
+++ b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000430
+# UNDF: UNDF-2026-000000110
 # janusgraph-0001: MultiCondition extends ArrayList — O(C²) condition deduplication in query builder

 ## Severity
--- a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md
+++ b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000447
+# UNDF: UNDF-2026-000000111
 # kylin-0001: JdbcJobScheduler — List<String>.contains in stream filter → O(J²)

 ## Classification
--- a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md
+++ b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000447
+# UNDF: UNDF-2026-000000111
 # kylin-0001: NDataflowManager.updateDataflowDetailsLayouts — O(L²) ArrayList.contains in layout update loop

 ## CWE-407 — Algorithmic Complexity
--- a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md
+++ b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000014
+# UNDF: UNDF-2026-000000318
 # kylin-0002: AclPermissionUtil.transformAuthorities — O(A²) ArrayList dedup loop

 ## CWE-407 — Algorithmic Complexity
--- a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md
+++ b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000500
+# UNDF: UNDF-2026-000000330
 # pinot-0001: SegmentProcessorUtils sortOrder List.contains per field in schema loop

 ## Severity
--- a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch
+++ b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000314
+# UNDF: UNDF-2026-000000014
 --- a/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java
 +++ b/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java
@@ -203,13 +203,11 @@ public interface Path extends Cloneable, Iterable<Object> {
--- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md
+++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000330
+# UNDF: UNDF-2026-000000334
 # victoria-metrics-0001 — `streamaggr`: O(L×K) `slices.Contains` inside `Push()` hot loop

 ## Status
--- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch
+++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch
@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000330
+# UNDF: UNDF-2026-000000334
 diff --git a/lib/streamaggr/streamaggr.go b/lib/streamaggr/streamaggr.go
 --- a/lib/streamaggr/streamaggr.go
 +++ b/lib/streamaggr/streamaggr.go