1.3 KiB
Cura + CuraEngine — MOAD 0002-0005 CLEAN
Scanned 2026-03-31 against:
- https://github.com/Ultimaker/Cura (depth=1)
- https://github.com/Ultimaker/CuraEngine (depth=1)
MOAD-0001
See cura-0001 and curaengine-0001 for confirmed defects.
MOAD-0002 Intertangle
CuraApplication.getInstance() is used 129 times across cura/ — this is a pre-existing singleton pattern, not a new defect. Subsystems do not re-entrant-couple through it in ways that create surprising emergent behavior beyond standard Qt app initialization. No new intertangle defect found.
MOAD-0003 Leaked Context
No threading.local(), ThreadLocal, or thread_local usage found in cura/ or curaengine/src/.
Qt signal/slot mechanism and single-threaded QML bridge handle all cross-thread communication.
CLEAN.
MOAD-0004 CWE-312 Logged Secret
OAuth2 logging in cura/OAuth2/ logs only URLs (OAUTH_SERVER_URL) and status messages ("No auth data", "Refreshing token", etc.). Actual access_token and refresh_token values are never passed as log arguments. CLEAN.
MOAD-0005 Thundering Herd
No unsynchronized cache get+null+compute+put pattern found. CuraEngine is single-threaded (one slice per process). Cura's background thread communication goes through Qt signals. No race-prone cache population found. CLEAN.