Migrated from https://git2.unturf.com/engineering/java-topology.git
russell@unturf.com
0e3cf0440b
samba-0001: security_token_has_sid O(A*S) in se_access_check - security_token_has_sid() does O(S) linear scan over token SIDs - called inside O(A) ACE loop in se_access_check_implicit_owner() - O(A*S) per file access; S=200 groups, A=20 ACEs = 4000 comparisons - fix: sort token->sids[2..] at finalization, use bsearch for O(log S) - 9.5x measured speedup (S=200, A=20); up to 26x at S=200, A=50 - hot path: called on every smbd file open / access check samba-0002: security_token_create O(N^2) SID dedup (source4 AD DC path) - nested for-loop in security_token_create deduplicates SIDs O(N^2) - Kerberos PAC with 500 group SIDs: ~125,000 dom_sid_equal() calls/login - at MS-KILE 1015-SID limit: ~515,000 calls per DC login - fix: binary insertion sort scratch array for O(N log N) dedup - 5.7x speedup at N=500, 9.3x at N=1000 (near PAC limit) - also applies security_token_sort_sids() after token build MOAD-0002: smbd is single-threaded event loop, global state is by design MOAD-0003: no thread-local credential storage found MOAD-0004: all sensitive dumps guarded by #ifdef DEBUG_PASSWORD compile flag MOAD-0005: all caches TDB-synchronized or single-threaded event loop |
||
|---|---|---|
| .github | ||
| .jcheck | ||
| bin | ||
| defects | ||
| doc | ||
| docs | ||
| make | ||
| scanner | ||
| src | ||
| test | ||
| tests | ||
| tools | ||
| whitepaper | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| ADDITIONAL_LICENSE_INFO | ||
| ASSEMBLY_EXCEPTION | ||
| CLAUDE.md | ||
| compile-unit-tests.sh | ||
| configure | ||
| CONTRIBUTING.md | ||
| GNUmakefile | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| SECURITY.md | ||
| UNDF-REGISTRY.json | ||
Welcome to the JDK!
For build instructions please see the online documentation, or either of these files:
- doc/building.html (html version)
- doc/building.md (markdown version)
See https://openjdk.org/ for more information about the OpenJDK Community and the JDK and see https://bugs.openjdk.org for JDK issue tracking.