java-topology/defects/fuse-0001/SUMMARY.md

fuse: all 5 MOADs CLEAN

ZX Spectrum emulator, C codebase. Shallow clone scanned 2026-03-31.

MOAD-0001 CWE-407

CLEAN. Hot paths use GLib GHashTable for all key lookups (O(1)). Port I/O dispatch uses g_slist_foreach with O(P) per port read/write where P is registered ports (bounded, typically <20). Breakpoint check iterates GSList of breakpoints O(B) per instruction only when debugger is ACTIVE mode. Disk sector search is O(S) bounded by sectors-per-track (9-18). No list.contains() inside a loop on unbounded data found.

MOAD-0002 Intertangle

CLEAN. Global GHashTable for peripherals and GSList for ports are expected single-instance emulator design. No evidence of independent subsystems inappropriately coupled through shared mutable state.

MOAD-0003 Leaked Context

CLEAN. No ThreadLocal, pthread_key, or thread-scoped identity carriers found. Fuse is single-threaded.

MOAD-0004 CWE-312

CLEAN. No credentials, API keys, tokens, or passwords found in logging paths. Spectranet peripheral has no credential-bearing network calls in our codebase.

MOAD-0005 Thundering Herd

CLEAN. No unsynchronized cache get+null+compute+put patterns. Single-threaded architecture eliminates this class of defect.