root-cern+hexchat: 5-MOAD scan; 2 defects + hexchat CLEAN
root-cern-0001: TTreeCache::FillBuffer potentialVetoes std::vector
O(N²) per basket/branch — replace with std::unordered_set, 9.8x speedup
(MOAD-0001 CWE-407, tree/tree/src/TTreeCache.cxx)
root-cern-0002: TWebFile::GetFromWeb10 logs full HTTP request including
Authorization: Basic base64(user:password) at gDebug > 0 (HIGH)
Also affects TS3WebFile — exposes AWS access key + signature
(MOAD-0004 CWE-312, net/net/src/TWebFile.cxx)
hexchat: all 5 MOADs CLEAN — binary tree user lookup, single-threaded
event loop, raw log is ephemeral in-memory widget only
russell@unturf.com
c13562b619