# postfix — CLEAN

Scanned 2026-03-30. No CWE-407 defects warranting a patch.

Postfix systematically uses `htable` (hash table) for all hot-path membership
tests: `been_here()` for recipient dedup, `delivered_hdr_find()` for loop
detection, `qmgr_transport_find()` for transport lookup.

Two marginal candidates found, both LOW severity and admin-bounded:
- `src/qmgr/qmgr_message.c:1214`: O(R×T) defer_transports check — T is
  admin-configured, not inflatable by remote senders.
- `src/global/sasl_mech_filter.c:90`: O(M×P) SASL filter — M ≈ 5–20 mechs,
  P admin-configured.

Neither creates a situation where a remote party can inflate both dimensions
of a nested loop.