Find a file
russell@unturf.com 7786adc4c0 ruffle: 2 CWE-407 defects, MOADs 0002-0005 documented
ruffle-0001: AVM2 optimizer type_aware.rs process_jump() worklist dedup
  Vec<usize>.contains() inside while-loop over basic blocks -> O(B^2).
  Fix: companion HashSet<usize> for O(1) dedup. 249.5x at fanWidth=500.

ruffle-0002: MovieClip goto_commands depth lookup O(F*D^2) -> O(F*D).
  goto_place_object/goto_remove_object use iter().position(|o| o.depth()==d)
  inside frame-scan while-loop. Fix: HashMap<Depth, usize> index alongside
  Vec; swap_remove displacement handled correctly. 51.5x at F=500 D=100.

MOAD-0002 (Intertangle): UpdateContext god-object couples GC/AVM1/AVM2/
  audio/video/renderer/navigator/UI/storage/log/timers/input in one struct.
  Architectural, not a single-patch fix.
MOAD-0003 (Leaked Context): CURRENT_CONTEXT thread_local in web/src/lib.rs
  holds raw *mut UpdateContext<'static> (request-scoped in thread scope).
  Desktop thread_locals CALLSTACK/RENDER_INFO/SWF_INFO carry per-SWF state.
MOAD-0004: CLEAN. No verbatim credential logging found.
MOAD-0005: CLEAN. Arc<Mutex<Player>> used consistently, no unsynchronized
  cache double-check pattern.

2/2 unit tests PASS.
2026-03-31 19:57:30 -04:00
.github undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
.jcheck undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
bin undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
defects ruffle: 2 CWE-407 defects, MOADs 0002-0005 documented 2026-03-31 19:57:30 -04:00
doc undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
docs whitepaper: 312 sites / 151 ecosystems — wave2+3 defect tables and PDF rebuild 2026-03-27 15:23:43 -04:00
make undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
scanner scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
src undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
test undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
tests freecad/retroarch/mpv: CWE-407 scan — 3 defects, mpv CLEAN 2026-03-30 14:53:03 -04:00
tools wave15: v8-0002/0003 Intl+revectorizer (125x/25x) + bullet/box2d ticket files — 528/240 2026-03-27 19:16:28 -04:00
whitepaper outreach: update scala.md with scala-0002 (intersectionIsEmpty 100x) 2026-03-29 22:12:55 -04:00
.editorconfig undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
.gitattributes undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
.gitignore undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
.gitlab-ci.yml scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
ADDITIONAL_LICENSE_INFO undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
ASSEMBLY_EXCEPTION undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
CLAUDE.md roles: java-topology is sandbox, undefect.com is source of truth 2026-03-31 17:48:57 -04:00
compile-unit-tests.sh nmap-0002 + haproxy-0004 + nginx-0004 + weechat-0003 + zeek-0002 + curl-0004: 6 new CWE-407 defects in network tools; count 693→699 2026-03-29 22:22:11 -04:00
configure undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
CONTRIBUTING.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
GNUmakefile wave8 complete + outreach: 452/202, 40 outreach briefs, buck2/ant CLEAN 2026-03-27 16:45:01 -04:00
LICENSE undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
Makefile scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
README.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
SECURITY.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
UNDF-REGISTRY.json undf: assign 1040-1056; stamp emulator wave patches (hatari/fceux/sameboy/duckstation/pcsx2/mupen64plus/mednafen/vice/fbneo/dolphin/genesis-plus-gx/ryujinx/cemu/fs-uae) 2026-03-31 18:18:58 -04:00

Welcome to the JDK!

For build instructions please see the online documentation, or either of these files:

See https://openjdk.org/ for more information about the OpenJDK Community and the JDK and see https://bugs.openjdk.org for JDK issue tracking.