Migrated from https://git2.unturf.com/engineering/java-topology.git
russell@unturf.com
4c4a8ecac9
Scanned the three foundational Python documentation tools (Sphinx, docutils, Pelican) and documented the triage outcome. Pelican joins the clean-scan honor roll (now 25 projects). Both flagged findings tested as false positives — utils.py:485 is String.index for '\n', not list iteration; pelican_import.py:663 ReDoS pattern scales linearly at N=40 (0.11ms). Sphinx + docutils have multiple M1 hits in node-tree walks (Node.findall via parent.index per ancestor). Investigated and benchmarked: both old and new algorithms are O(D*S) — constant-factor only, not CWE-407-grade complexity-class change. A real fix would require maintaining a parent_index cache on Element nodes, a refactor with cache-invalidation surface area beyond a single-defect patch. No patches shipped this pass; the work is documented for the next reviewer. |
||
|---|---|---|
| .github | ||
| .jcheck | ||
| bin | ||
| defects | ||
| doc | ||
| docs | ||
| make | ||
| scanner | ||
| src | ||
| test | ||
| tests | ||
| tools | ||
| whitepaper | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| ADDITIONAL_LICENSE_INFO | ||
| ASSEMBLY_EXCEPTION | ||
| CLAUDE.md | ||
| compile-unit-tests.sh | ||
| configure | ||
| CONTRIBUTING.md | ||
| GNUmakefile | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| SCAN-TODO.md | ||
| SECURITY.md | ||
| UNDF-REGISTRY.json | ||
Welcome to the JDK!
For build instructions please see the online documentation, or either of these files:
- doc/building.html (html version)
- doc/building.md (markdown version)
See https://openjdk.org/ for more information about the OpenJDK Community and the JDK and see https://bugs.openjdk.org for JDK issue tracking.