russell@unturf.com
068ebbd29f
Scanned bitcoin/dragonfly/tor/transmission/nmap/ceph/allegro5 for additional CWE-407 defects. All repos found CLEAN beyond previously recorded patches. Updated tor/CLEAN.md to correctly reference existing tor-0001 through tor-0003.
16 lines
632 B
Markdown
16 lines
632 B
Markdown
# CLEAN — gRPC
|
|
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
|
|
|
|
## Scope
|
|
The cloned `~/git/grpc` repository is the gRPC C/C++ core repo, not the Java
|
|
implementation (`grpc-java`). No Java source files were found in `src/` beyond
|
|
Android example activities.
|
|
|
|
## Findings
|
|
- No Java main-path source files present in this clone.
|
|
- gRPC Java (`io.grpc:grpc-*`) ships as a separate Maven/Gradle repository
|
|
(`grpc/grpc-java` on GitHub) which was not cloned.
|
|
|
|
## Result
|
|
**CLEAN (N/A). No Java CWE-407 defects findable in this clone — wrong repo flavor.**
|
|
**Action: clone `grpc/grpc-java` for a proper Java scan if needed.**
|