java-topology/defects/play/scan
russell@unturf.com 265fad9edb play: 1 CWE-407 defect (play-0001); basilisk: all 5 MOADs CLEAN
play-0001: CIopBios::FindIntrHandler() O(H) linear scan per IOP interrupt.
Called from HandleInterrupt() thousands of times per second. Fix: direct
index array m_intrHandlerIndex[LINES_MAX] keyed by interrupt line -> O(1).
Algorithmic ratio 32x (H=MAX_INTRHANDLER=32), timing 5.6x. 5/5 PASS.

Basilisk II: all 5 MOADs CLEAN. Video/newcpu lookuptab searches are cold
paths only; no god object, thread_local identity, credential logging, or
unsynchronized cache patterns found.
2026-03-31 19:51:16 -04:00

7 lines
770 B
Text

Scanned 2026-03-31 for all 5 MOADs.
MOAD-0001 (CWE-407): 1 defect found — play-0001 (see defects/play-0001/).
FindIntrHandler() O(H) linear scan per IOP interrupt -> O(1) fix via index array.
MOAD-0002 (Intertangle): CPS2VM is a reasonable orchestrator class, not a god object coupling independent subsystems through shared mutable global state. CLEAN.
MOAD-0003 (Leaked Context): thread_local in BasicBlock.cpp is scoped to AOT_BUILD_CACHE build variant only, holds a JIT compiler instance for a thread — not request-scoped identity. CLEAN.
MOAD-0004 (CWE-312): Iop_Secrman.cpp logs AuthCard port/slot/cnum numbers, not actual cryptographic keys or passwords. CLEAN.
MOAD-0005 (Thundering Herd): no unsynchronized cache get+null+compute+put pattern found. CLEAN.