Pitivi — MOAD 0002-0005 CLEAN

Scanned 2026-03-31 against:

https://github.com/pitivi/pitivi (depth=1)

MOAD-0001

See pitivi-0001 for confirmed defect.

MOAD-0002 Intertangle

Pitivi uses a clean app reference passed at construction. No god-object coupling between independent subsystems (timeline, undo, render, effects) beyond standard GTK app pattern. CLEAN.

MOAD-0003 Leaked Context

threading.Thread is used for GL effects check (previewers.py line 298) but operates only on process-level capabilities, carrying no request-scoped identity. No threading.local() found in pitivi/. CLEAN.

MOAD-0004 CWE-312 Logged Secret

Pitivi has no external service authentication. GStreamer pipeline URIs logged in previewers.py are local file URIs (file:///path/to/video). No tokens, API keys, or credentials in logging paths. CLEAN.

MOAD-0005 Thundering Herd

Pitivi runs on GLib's single-threaded main loop. ThumbnailCache operations are serialized through GTK idle handlers and GLib timeouts. No concurrent cache population race. CLEAN.

1 KiB Raw Blame History