java-topology/tests
russell@unturf.com 8a3fc56b23 libjpeg-turbo+libwebp: 5-MOAD scan; libjpeg-turbo-0001 CWE-407, libwebp CLEAN
libjpeg-turbo-0001: rdcolmap.c add_map_entry() O(P*C) linear color dedup.
For each pixel in a PPM colormap file, a linear scan checks the palette
(up to 256 entries). With large images (JPEG_MAX_DIMENSION=65500) and a
saturated palette, cost reaches O(W*H*256). Fix: open-addressing hash set
resets once per _read_color_map() call, giving O(1) average per pixel.
Measured 128-131x speedup. 7/7 unit tests PASS.

libwebp: CLEAN on all 5 MOADs. GetColorPalette uses open-addressing hash,
backward references use hash chains, palette sort O(N^2) bounded to N<=256
once per image, DSP init uses mutex-protected lazy initialization.
2026-03-31 22:36:56 -04:00
..
bench undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
freecad freecad/retroarch/mpv: CWE-407 scan — 3 defects, mpv CLEAN 2026-03-30 14:53:03 -04:00
functional undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
integration undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
retroarch freecad/retroarch/mpv: CWE-407 scan — 3 defects, mpv CLEAN 2026-03-30 14:53:03 -04:00
sql undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
support undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
unit undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
workbench undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
BasicStream.class undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
CollectorComposition.class undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
Makefile libjpeg-turbo+libwebp: 5-MOAD scan; libjpeg-turbo-0001 CWE-407, libwebp CLEAN 2026-03-31 22:36:56 -04:00
NestedGenerics.class undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
ScaledCallSites50.class undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00