java-topology/defects/qemu/patch/qemu-CLEAN-net-assign-name.md

UNDF: UNDF-2026-000000516

QEMU net/net.c assign_name — NOT CWE-407 (CLEAN)

Target: net/net.c — assign_name()

assign_name() scans net_clients with strcmp to count existing clients of the same model and generate a unique name. This is O(N) per call.

However, assign_name is only invoked when name == NULL — the legacy -net option path. MAX_NICS is 8 and typical use is 1–4 clients. N is bounded by a small constant at QEMU startup. No significant O(N²) risk.

Target: net/net.c — qemu_find_netdev()

Linear scan of net_clients by name. Called only during device setup/teardown (not in packet hot paths). N ≤ MAX_NICS × MAX_QUEUE_NUM but lookups are rare setup-time operations. Not a hot-path CWE-407.

Status: CLEAN for net/net.c