russell@unturf.com
99be1fbed9
Previously 52 registered defects had no project dir locally because their
patches live under a sibling project (e.g. ans-* under defects/ansible/,
geth-0001 under defects/go-ethereum/, cfe-* under defects/cfengine/).
Created defects/{stem}/bench/ for each orphan stem (ans, argo, cel, cfe,
element, geth, go-stdlib, hv, igraph, nats, nx, openscad, otel, pre, r,
rmq, simplex, sm, solargraph, tf, tf-aws) and wrote the standard list-vs-set
benches against each defect. Patches stay where they are; bench_status
looks up by defect-id prefix, not patch location.
Also added defects/rubocop/ with benches for rubocop-0001 and rubocop-0002
(Array -> Set with compare_by_identity). Both were misclassified as
MOAD-0011 ReDoS in generate_undf.py; the tickets show they're CWE-407
Sedimentary (O(N*S) -> O(N+S) via identity Set).
Coverage: 1243 -> 1281 (96.0% -> 98.9%). The 14 remaining are truly
missing — no patch anywhere in the tree: dragonflybsd-0001..0005,
jami-daemon, jitsi-videobridge, netbsd-0001..0004, regamedll-cs-0001,
supertuxkart-0002, hadoop-rpc-0001.
30 lines
1.7 KiB
Text
30 lines
1.7 KiB
Text
=== element-web-0001: CWE-407: list-scan inside loop in element-web-0001 (generic model) ===
|
|
N=100 k=100 : defective=0.097ms fixed=0.004ms speedup=25.1x
|
|
N=500 k=500 : defective=3.221ms fixed=0.037ms speedup=87.1x
|
|
N=1000 k=1000 : defective=17.058ms fixed=0.057ms speedup=299.5x
|
|
N=2000 k=2000 : defective=50.789ms fixed=0.097ms speedup=521.6x
|
|
|
|
=== element-web-0002: CWE-407: list-scan inside loop in element-web-0002 (generic model) ===
|
|
N=100 k=100 : defective=0.085ms fixed=0.004ms speedup=24.2x
|
|
N=500 k=500 : defective=2.153ms fixed=0.021ms speedup=104.9x
|
|
N=1000 k=1000 : defective=10.996ms fixed=0.048ms speedup=230.3x
|
|
N=2000 k=2000 : defective=47.956ms fixed=0.158ms speedup=304.0x
|
|
|
|
=== element-web-0003: CWE-407: list-scan inside loop in element-web-0003 (generic model) ===
|
|
N=100 k=100 : defective=0.153ms fixed=0.005ms speedup=30.2x
|
|
N=500 k=500 : defective=2.253ms fixed=0.021ms speedup=106.9x
|
|
N=1000 k=1000 : defective=13.024ms fixed=0.104ms speedup=125.0x
|
|
N=2000 k=2000 : defective=41.579ms fixed=0.155ms speedup=268.3x
|
|
|
|
=== element-web-0004: CWE-407: list-scan inside loop in element-web-0004 (generic model) ===
|
|
N=100 k=100 : defective=0.085ms fixed=0.003ms speedup=24.9x
|
|
N=500 k=500 : defective=2.244ms fixed=0.032ms speedup=69.1x
|
|
N=1000 k=1000 : defective=9.021ms fixed=0.047ms speedup=193.8x
|
|
N=2000 k=2000 : defective=42.478ms fixed=0.179ms speedup=237.6x
|
|
|
|
=== element-web: CWE-407: list-scan inside loop in element-web (generic model) ===
|
|
N=100 k=100 : defective=0.146ms fixed=0.007ms speedup=21.9x
|
|
N=500 k=500 : defective=2.167ms fixed=0.021ms speedup=102.8x
|
|
N=1000 k=1000 : defective=8.907ms fixed=0.047ms speedup=191.3x
|
|
N=2000 k=2000 : defective=51.391ms fixed=0.105ms speedup=488.6x
|
|
|