engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/defects/box2d/patch/CLEAN.md
russell@unturf.com e074f18ac7 python-ruby wave: cpython/mastodon defects + 8 CLEAN markers; count 668→671 
cpython-0001: unittest.mock.reset_mock visited=[] O(N²) diamond traversal
mastodon-0001: OStatus Creation processed_account_ids Array#include? O(N²)
mastodon-0002: ActivityPub process_hashtag status.tags.include? O(N²) AR queries
CLEAN: dask, bottle, pyramid, alembic, dgl, synapse, dendrite, zulip
2026-03-29 19:50:42 -04:00

580 B
Raw Blame History

box2d — CWE-407 Scan Result: CLEAN

Scanned: 2026-03-29 Repo: https://github.com/erincatto/box2d (v3.x C rewrite)

Findings

Box2D v3 is a complete rewrite in C. All membership / deduplication structures use b2HashSet (open-addressing hash table defined in src/table.h):

  • Broad-phase pair dedup: b2HashSet with B2_SHAPE_PAIR_KEY(K1, K2) — O(1)
  • Island body/contact/joint tracking: array with direct ID indexing — O(1)
  • Sensor overlap tracking: hash-set — O(1)

No std::find, no linear scan dedup loops found in any hot path.

Verdict: CLEAN