2372d29c88
undf: assign UNDF-2026-000000858 for proxysql-0001; stamp patch
2026-03-30 14:59:38 -04:00
c31c569e45
undf: stamp gitlab-foss patches with UNDF numbers
2026-03-30 14:56:23 -04:00
4cc47349a5
undf: assign 847-849; stamp freecad/retroarch patches
2026-03-30 14:53:28 -04:00
0d852be0a3
undf: assign 845-846; stamp firefox patches
2026-03-30 14:51:42 -04:00
558f0d30c2
undf: stamp clementine patches (UNDF-2026-000000841..842)
2026-03-30 14:43:28 -04:00
fb2c48dc37
undf: stamp kdenlive-0005..0008 (UNDF-2026-000000835..838)
2026-03-30 14:40:29 -04:00
9bdea940fc
undf: assign 828-832; stamp patches; tomcat-0001/hibernate-orm-0001/netty-0001/netty-0002
2026-03-30 13:55:42 -04:00
7f2c2a1a36
undf: assign UNDF-2026-000000823; stamp terraform-0001/ansible-0002/ansible-0003
2026-03-30 13:29:54 -04:00
3d2957276d
undf: assign UNDF-2026-000000822; stamp telegraf-0001 patch
2026-03-30 13:28:35 -04:00
2ccaf9e7fa
undf: assign UNDF-2026-000000821; stamp loki-0001 patch
2026-03-30 13:18:59 -04:00
cf2c734de1
undf: assign UNDF-2026-000000819 through 000000820; rename hive-0004/hive-0005; stamp patches
2026-03-30 13:17:14 -04:00
4f51d81913
undf: assign UNDF-2026-000000815 through 000000817; stamp superset patches
2026-03-30 13:04:50 -04:00
9b3008a2b1
undf: assign UNDF-2026-000000813; stamp neovim-0001 patch
2026-03-30 11:46:05 -04:00
ae2eaf3be9
undf: assign UNDF-2026-000000807 through 000000812; stamp vscode+zed patches
2026-03-30 11:43:50 -04:00
f8eb370fe4
undf: assign 806; stamp vlc+obs-studio patches
2026-03-30 11:33:21 -04:00
20f60ee078
undf: assign 798-805; stamp kdenlive+shotcut patches
2026-03-30 11:28:35 -04:00
20089cbd72
undf: assign 793-794; stamp gimp patches
2026-03-30 11:22:14 -04:00
b5c2a3d989
undf: stamp patches, update registry to 792
2026-03-30 11:15:59 -04:00
9b71d0d527
undf: assign 778-785; stamp inkscape/blender patches
2026-03-30 11:13:27 -04:00
a0dde8b41a
undf: assign 775-776; stamp deluge patches
2026-03-30 10:37:20 -04:00
c967910a44
undf: assign UNDF-2026-000000774; stamp llvm-0006 patch
2026-03-30 10:34:45 -04:00
36595d65fb
undf: stamp rustc/swift patches, update registry to 773
2026-03-30 10:27:44 -04:00
79a77db4f8
undf: assign 768-770; stamp minio patches
2026-03-30 10:25:20 -04:00
e45af3961b
undf: stamp duckdb/arrow patches; update registry to 767
2026-03-30 10:12:10 -04:00
0772cf539a
undf: assign UNDF-2026-000000761..762, 000000301; stamp flink-0006/0007/storm-0001 patches
2026-03-30 09:53:25 -04:00
cb15f957b5
undf: assign UNDF-2026-000000758..759, stamp godot-0011/0012 patches
2026-03-30 09:51:06 -04:00
d78b31eb6e
undf: assign UNDF numbers, stamp patches (cockroach-0001..0003, influxdb-0001..0002)
2026-03-30 09:36:45 -04:00
780d7fde87
undf: assign UNDF-2026-000000751..752, stamp patches (bullet3-0001, three-0001)
2026-03-30 09:26:18 -04:00
99e1a862bd
undf: assign UNDF-2026-000000749/750 to consul-0002/nats-server-0002; stamp patches
2026-03-30 09:19:09 -04:00
7ab4695e82
undf: assign UNDF-2026-000000748 to nomad-0005; stamp patch
...
nomad-0005: scheduler/reconciler/reconcile_cluster.go
handleReconnectingAllocs slices.Contains(replacements, alloc.ID)
O(A×R) inner linear scan — replaced with map[string]struct{} O(1)
Also confirm envoy-0001 through envoy-0004 were previously scanned
(UNDF-63, 390, 391, 699) and nomad-0001 through nomad-0004 (UNDF-476..479).
2026-03-30 09:15:20 -04:00
b577fa269f
undf: assign UNDF-2026-000000449/746/747 to libgdx-0002/0005/0006; stamp patches
2026-03-30 09:14:21 -04:00
032998cf74
undf: assign UNDF numbers, stamp quarkus patches (517, 518, 469, 678)
2026-03-30 08:54:16 -04:00
e72c6fb013
undf: assign UNDF-2026-000000740 through UNDF-2026-000000744; stamp micronaut-core patches
2026-03-30 08:44:51 -04:00
b0a9a83efc
pulsar: 3 CWE-407 defects — load-manager/replicator/namespace List.contains O(N^2)
...
pulsar-0001: ModularLoadManagerImpl.reapDeadBrokerPreallocations() receives
aliveBrokers as List<String> from listLocks(); .contains() inside O(B) loop
→ O(B^2); fix: HashSet wrap before loop.
pulsar-0002: PersistentTopic.removeOrphanReplicationCursors() and
checkReplicationStatus() call configuredClusters.contains() (List<String>)
inside loops over cursors and replicators → O(C×R); fix: HashSet wrap.
pulsar-0003: NamespacesBase.internalGetTopicHashPositionsAsync() calls
allTopicsInThisBundle.contains() (List<String>) inside for loop over query
topics → O(T×B); fix: HashSet wrap before loop.
UNDF-2026-000000505 through UNDF-2026-000000507; 3/3 unit tests PASS.
2026-03-30 08:43:51 -04:00
e72461aba9
undf: assign 737-739; stamp dragonfly/valkey/kafka patches; update UNDF count to 739
2026-03-30 08:35:14 -04:00
192219a62f
undf: assign 734-736; stamp rabbitmq-0001/0002
2026-03-30 08:26:11 -04:00
9f9acfd5f5
undf: assign 732-733; stamp activemq-0002/0003
2026-03-30 08:02:58 -04:00
e72b9fccde
undf: assign 731; stamp patches; postgres-0001/asterisk-0001/haproxy-0001/nginx-0001
2026-03-30 07:57:50 -04:00
2202a50f5c
undf: assign UNDF-730 to esbuild-0001; stamp patch
2026-03-30 07:41:36 -04:00
38945e8138
undf: assign UNDF-729 to element-web-0001/0002 and bun-0001; stamp patches
2026-03-30 07:38:08 -04:00
f87eeeb302
undf: assign UNDF-728 to wave16 defects (nova/keystone/crystal/dovecot/wireshark); stamp patches
2026-03-30 07:34:08 -04:00
0caef69f01
undf: assign 722-727; stamp opensmtpd-0002; update count to 727
2026-03-30 07:08:30 -04:00
2573ec8802
undf: assign 721-726; salt-0001/0002/0003 CWE-407 list→set patches
2026-03-30 06:59:11 -04:00
f176e86fbd
ninja-0001/ninja-0002: CWE-407 depfile dedup and output validation O(N²)→O(N)
...
ninja-0001: depfile_parser.cc std::find over ins_/outs_ vectors is O(N) per
token → O(N²) total parse; fix adds unordered_set ins_seen_/outs_seen_ members
to DepfileParser for O(1) duplicate detection (490x at N=1000).
ninja-0002: graph.cc std::find_if over edge->outputs_ called for each depfile
output token is O(M×N); fix builds unordered_set from edge outputs once before
the loop for O(M+N) total (125x at M=N=500).
2026-03-30 06:56:54 -04:00
740f17256b
undf: assign 721; stamp spidermonkey-0005
2026-03-30 06:47:50 -04:00
25c2bafdee
undf: assign 694-720; stamp patches; ruby-0003/elixir-0002/r-source-0002/victoria-metrics-0002
...
New UNDF assignments (693→720):
elixir-0002 → UNDF-2026-000000698 (typespec used_type_pairs O(T²))
r-source-0002 → UNDF-2026-000000711 (.walkClassGraph match dedup O(S²))
ruby-0003 → UNDF-2026-000000712 (RubyGems dependent_gems O(N²×D))
victoria-metrics-0002 → UNDF-2026-000000717 (MetricName tag-filter O(T×I))
Total: 720 UNDF assigned
2026-03-29 22:28:31 -04:00
0f7d8485f0
undf: assign 681-693; stamp 20 patches; numpy/pandas/scipy/scylladb/clickhouse/cockroachdb/duckdb/moby/simplex-chat new defects
2026-03-29 22:05:46 -04:00
130e4fb159
undf: assign 671-680 to diamond-scan defects; 680 total assigned
...
New defects from diamond O(2^D) sweep:
- cpython-0002/0003/0004: pydoc.allmethods, turtle.__methodDict, idlelib.rpc._getmethods
- micronaut-0005/0006/0007: populateTypeHierarchy, populateTypeArgumentsForInterfaces, SuperclassAwareTypeVisitor
- quarkus-0004/0005: HierarchyDiscovery.discoverTypes, ConfigMappingUtils.collectInterfacesRec
- weld-0004/0005: HierarchyDiscovery.discoverTypes, Services.identifyServiceInterfaces
- rails-0019: Digestor#dependency_digest Array#include? O(N²)
- spring-0007: AnnotationsScanner.processClassHierarchy O(2^D)
- django-0007: migrations.state.flatten_bases O(2^D)
- typescript-0005: hasBaseType O(2^D)
- hibernate-validator-0003: ClassHierarchyHelper.getImplementedInterfaces O(2^D)
- swift-0001: QualifiedLookupRequest::evaluate protocol superclass O(2^D)
2026-03-29 20:27:09 -04:00
77a5410eee
undf: assign 617-670 to legacy non-standard-named patches; 670 total assigned
2026-03-29 20:05:28 -04:00
7f92eba7ed
undf: repair registry collision; 616 assigned (602-616 new); stamp all agent-added patches
2026-03-29 20:01:56 -04:00
