russell@unturf.com
7491349edc
bullet3-0001: btGhostObject::addOverlappingObjectInternal O(N²) linear dedup per broadphase step — even carries "too slow" self-admission comment (HIGH) bullet3-0002: btSoftRigidCollisionAlgorithm::processCollision O(C×D) per frame on m_collisionDisabledObjects plain array (MEDIUM) allegro5: CLEAN (vector_contains only on non-hot setup paths) box2d: CLEAN (v3 rewrite uses b2HashSet throughout) dry: CLEAN (HashSet/HashMap on all hot dedup paths)
15 lines
529 B
Markdown
15 lines
529 B
Markdown
# zulip — CWE-407 Scan: CLEAN
|
|
|
|
Scanned: 2026-03-29
|
|
|
|
## Scope
|
|
|
|
- `zerver/lib/thumbnail.py` — `seen_thumbnails`: `set()` based (line 939 context: set())
|
|
- `zerver/lib/onboarding.py` — `seen_topics = set()` (line 561)
|
|
- Message thread traversal, user group membership, notification dispatch: checked
|
|
|
|
## Verdict
|
|
|
|
No CWE-407 (algorithmic complexity / quadratic membership check) defects found.
|
|
All deduplication uses `set`. No list-based visited/seen patterns in message
|
|
threading, group membership, or notification hot paths.
|