Commit graph

65 commits

Author SHA1 Message Date
5451e1748b outreach: add lean4 disclosure brief — 7 defects, MOAD references 2026-04-13 09:27:50 -04:00
bace89cebc fix: remove 'The' from fixed system harmony sentence 2026-04-10 12:40:37 -04:00
5b06ab06c9 fix: source Truth & Light attribution to timehexon.com/theology 2026-04-10 12:33:52 -04:00
716ef7cb2d undf: register UNDF-1250..1258 (DragonFly BSD + NetBSD CWE-407) 2026-04-05 19:46:54 -04:00
6050e1b741 hurd: all 5 defects patched, hurd-0004 closed as clean scan, add hurd-0005 patch 2026-04-05 15:57:48 -04:00
e94a4b17b3 hurd: 6 CWE-407 defects confirmed — auth, libports, proc, idvec 2026-04-04 16:19:59 -04:00
d01d210351 hurd: queue CWE-407 scan — libports, dispatch loops, translator tables 2026-04-04 16:14:54 -04:00
9cc2a89d0f linux: add complexity gate headers to all 8 patches; fix 0003/0007/0008 code issues
- All 8 patches now carry required # CWE-407 / # Defect / # Fix / # Complexity gate
  header blocks per patch file format spec
- linux-0001 (headerdep.pl): header only — code was correct
- linux-0002 (auditsc.c): header + explicit break to prevent ctx->names_list fall-through
- linux-0003 (dev.c): rewrote fix — skip altname loop when format has no percent-d
  placeholder; removes duplicate bounds check from prior draft
- linux-0004 (neighbour.c): header + cleaned up ifdef guards; xarray with fallback
- linux-0005 (component.c): header + existing hash fast-path retained
- linux-0006 (btf.c): header + fixed cache hit path — no longer re-runs
  btf_find_by_name_kind on hit; uses stored btf_id directly
- linux-0007 (pktgen.c): rewrote fix — replaced xa_for_each (O(N)) with dual
  DECLARE_HASHTABLE: dev_ht (by dev*) and name_ht (by jhash(ifname))
- linux-0008 (taskstats.c): fixed mixed list_for_each_entry/hash_for_each_possible
  syntax; clean replacement of duplicate-pid list scan with hash_for_each_possible
- Combined patch: linux-0001..0008-hashstruct.patch (8 defects, was missing 0004)
- outreach/linux.md: updated to 8 defects, corrected numbering (0001=headerdep,
  0002=auditsc, 0003=dev, 0004=neighbour, 0005-0008 as before)
2026-04-04 11:33:15 -04:00
fdbb9a1aa9 redot: 12 CWE-407 defects, patches, outreach brief, UNDF-2026-000001231..1242
All 12 O(N²) algorithmic complexity defects confirmed in Redot Engine 26.2-alpha
(commit 360a8d3). Inherited verbatim from Godot Engine upstream. All patched.

Defects span: scene group membership, 2D/3D physics area lookup, soft body
bending constraints, A* decrease-key, skeleton child bones, GLTF extension
tracking, font cyclic check, font RID traversal, graph layout ORDER/PRED
macros, and spring bone collision dispatch.

Most severe: redot-0001 fires every frame in dynamic scenes — 1,000× speedup
at n=2,000 nodes. redot-0002/0003 fire 60Hz in physics-heavy games — 50×.

Strategy: patch Redot first, Godot follows our lead.
2026-04-03 21:00:29 -04:00
e52caba572 outreach: update scala.md with scala-0002 (intersectionIsEmpty 100x) 2026-03-29 22:12:55 -04:00
b680523c79 sync: UNDF stamps, unit classes, 146 outreach briefs, CLAUDE.md #1 priority MOAD-1 2026-03-29 15:56:35 -04:00
0ee2c5acaf whitepaper: onos-0004 entry, count 615→616, rebuild PDF 2026-03-28 10:56:56 -04:00
a5f1dd1d77 godot-0005..0008 whitepaper entries + UNDF stamps; A* open_list.find O(N) 800x, skeleton child_bones 24x, RestFixer 188x, GLTF extensions 11x; count 611→615 2026-03-27 23:18:59 -04:00
47a312b0c7 libvirt-0001/0002 + xen-0001: cpu_x86 g_strv_contains O(F×A) + x86FeatureFind O(C×F) + credit2 balance_load O(V²); 21+11 PASS; count 608→611 2026-03-27 23:02:58 -04:00
87099aaaac v8-0004 + jsc-0003: Maglev KnownMapsMerger O(P×R) std::find, IntegerRangeOpt liveAtHead O(50×B×R×L); 2+2 PASS; count 606→608 2026-03-27 23:00:07 -04:00
ae91f05bf3 curl-0002/0003 + libevent-0001: header lookup O(K×H), HSTS O(N²), route dispatch O(C); libuv CLEAN; count 603→606 2026-03-27 22:46:05 -04:00
212d313185 bazel-0003 + kicad-0002: build toolchain feature check + PCB zone filler O(Z²×L²); count 601→603 2026-03-27 22:38:32 -04:00
1d6a8b8ccd redis-0004 + dragonfly-0001: ACL channel O(C×P) + cluster migration O(M²); memcached CLEAN; count 599→601 2026-03-27 22:34:04 -04:00
ff7bd27654 bird-0003/0004 + frrouting-0003/0004: BGP community set ops O(N×M)/O(N²); OpenBGPD CLEAN; count 595→599 2026-03-27 22:30:39 -04:00
3f8c5e6d3e httpd-0003/0004 + varnish-0003: 3 new defects (12x/50x/25x); count 592→595 2026-03-27 22:26:26 -04:00
34e8d9212f openssl-0004 + uwsgi-0001: 2 new defects (500x/249x); all 10 missing whitepaper entries restored; count 590→592 2026-03-27 22:20:52 -04:00
2e4f7807d5 whitepaper: re-add 10 missing entries + 11 new defects this session, count 578→590; rebuild PDF 2026-03-27 22:18:31 -04:00
e4ee168b1e 578/240 — rustc-0004/vertx-0001/asterisk-0003/bitcoin-0001/actix-web-0003/hazelcast-0001+0002/rabbitmq-0005/nginx-0003/haproxy-0003/envoy-0003/istio-0003 2026-03-27 21:25:37 -04:00
dde5ec97fb wave17: 562/240 — vim/qemu/tcl/nodejs/bun/httpd-0002/systemd/emacs 2026-03-27 20:28:18 -04:00
cce7ec653a wave17 complete: systemd/emacs/vim/qemu/tcl/kafka-0007/spark-0004 + 559/240 2026-03-27 20:15:47 -04:00
4221966e66 wave17: openssh-0001/2, strongswan-0001, gradle-0002, groovy-0001/2, make-0001, clojure-CLEAN + whitepaper 549/240 2026-03-27 19:55:52 -04:00
0f275c44af whitepaper: add html-cwe407 and html-minecraft targets; update clean 2026-03-27 19:52:27 -04:00
d816d3c74c wave16: dart-0001/2/3 + octave-0002 + php-0003/4 + cassandra-0005 + erlang-0003 + chef-0001 — 542/240 2026-03-27 19:36:35 -04:00
31850d5ef6 wave15: sm-0003/0004 + threejs-0006 + varnish-0002 + mongodb-0008 — 533/240 2026-03-27 19:22:37 -04:00
7146714143 wave15: v8-0002/0003 Intl+revectorizer (125x/25x) + bullet/box2d ticket files — 528/240 2026-03-27 19:16:28 -04:00
c4026333ba wave14b: openbsd-0001/2 + 526/240 PDF 2026-03-27 18:14:55 -04:00
ac0e1e091e wave14a/c/d: 524/239 — rails-0018/grape-0001..3/django-0005..6/sqlalchemy-0003/go-stdlib-0001/vault-0001/tf-aws-0001 2026-03-27 18:11:25 -04:00
8f0bc73afa wave13: 514/239 — flink/nifi/artemis + K8s/cilium/linkerd2 + ES/OpenSearch/Solr + hadoop/hbase/spark 2026-03-27 17:50:40 -04:00
424a2a7787 wave12: 501/237 — ClickHouse/Druid/Pinot + Ansible/OpenTofu/Pulumi + Celery/Camel + VictoriaMetrics/Ceph 2026-03-27 17:34:59 -04:00
19333b378e wave11: 488/227 — ROS2/OpenCV/Open3D/metaflow/kubeflow/optuna/openssl/mbedtls/wolfssl + Kafka Streams/Pulsar 2026-03-27 17:31:52 -04:00
6276aea2e5 wave10 complete: 472/219 2026-03-27 17:14:32 -04:00
70702dff5c wave10b/c: 465/212 hudi/iceberg/scylladb/yugabyte/foundationdb 2026-03-27 17:12:25 -04:00
f7fa333977 wave10a: 462/209 hudi/iceberg/beam-clean/samza-clean 2026-03-27 17:10:09 -04:00
ab10b2f555 wave9 complete: 458/207 — airflow/argo/pytorch-0003/tf/jax/pyg/grpc/thrift + graphhopper/valhalla 2026-03-27 16:59:04 -04:00
81bc62b9cb wave9b: 455/204 — graphhopper-0001/0002 + valhalla-0001 + OSRM CLEAN 2026-03-27 16:54:46 -04:00
16cc7ecf1d wave8 complete + outreach: 452/202, 40 outreach briefs, buck2/ant CLEAN 2026-03-27 16:45:01 -04:00
3c0b3edc79 wave8c: 452/202 — envoy/cilium, graph-dbs, elixir/nim, k8s/maven + PDF 2026-03-27 16:38:25 -04:00
c4330be5b0 wave8b: 438/196 — rails-0017, hanami-0001, spark-0002 + PDF 2026-03-27 16:33:08 -04:00
2d3e3d603e wave8a: 436/195 — istio-0002, spark-0002, igraph-0001 + PDF 2026-03-27 16:31:34 -04:00
5fe6da7cc2 wave7: 433/194 — kafka/flink/pulsar, spring/micronaut/quarkus, nginx/haproxy/traefik, linux/nomad/consul, numpy/pandas/sklearn, ES/OS/pg/sqlite/rustc/cargo 2026-03-27 16:20:58 -04:00
3735145aa5 whitepaper: 398/185 — wave6d (rails-0012..16, jsc-0001/2, vtk, sm-0002, redis/valkey-0003, helm-0002/3, k8s-0003) 2026-03-27 15:57:50 -04:00
eb9612e4bf whitepaper: 383/183 — wave6 defect tables + PDF rebuild 2026-03-27 15:46:25 -04:00
a4b0cf4edd whitepaper: 366/178 — wave5 defect tables + PDF rebuild 2026-03-27 15:37:42 -04:00
835ae73b0f whitepaper: 352/169 — wave4 MEDIUM (hadoop/hbase/nova/neutron/openstack) + fix odl-0002 dup 2026-03-27 15:33:17 -04:00
9934133dcf whitepaper: 312 sites / 151 ecosystems — wave2+3 defect tables and PDF rebuild
Add 88 new defect entries to HIGH and MEDIUM tables:
  HIGH: mysql-0001/0002, mariadb-0001, redis-0001/0002, valkey-0001/0002, openvpn-0001,
        vlc-0001, prometheus-0001, otel-collector-0001, cockroachdb-0001..0004,
        tidb-0001..0008, kubernetes-0001/0002, go-0001, kotlin-0002, scala-0001,
        allegro5-0001, sdl2-0001, grafana-0001, clickhouse-0001, duckdb-0001,
        mongodb-0001, envoy-0001, istio-0001, cilium-0001, linkerd2-0001,
        linux-0001/0002/0003, tor-0002/0003, curl-0001, julia-0001, lua-0001,
        perl5-0001, nats-0001, spring-0003/0004, tomcat-0001, onos-0002, odl-0002

  MEDIUM: helm-0001, mariadb-0002, openssl-0001/0002, memcached-0001,
          cassandra-0001..0004, flink-0001, storm-0001/0002, zookeeper-0001..0003,
          pip-0001, gradle-0001, nginx-0001, haproxy-0001, caddy-0001, varnish-0001,
          ffmpeg-0001, gstreamer-0001, raylib-0001, love2d-0001, php-0001/0002,
          r-source-0001, cpython-0002, ruby-0001, rabbitmq-0003/0004, activemq-0001,
          ovs-0001, onos-0003, odl-0002, jetty-0001

PDF: 976K
2026-03-27 15:23:43 -04:00