java-topology/defects/grpc/patch/CLEAN.md
russell@unturf.com 068ebbd29f cpp-systems: tor CLEAN.md updated to note existing patches tor-0001/0002/0003
Scanned bitcoin/dragonfly/tor/transmission/nmap/ceph/allegro5 for additional
CWE-407 defects. All repos found CLEAN beyond previously recorded patches.
Updated tor/CLEAN.md to correctly reference existing tor-0001 through tor-0003.
2026-03-29 19:54:59 -04:00

632 B

CLEAN — gRPC

Scanned 2026-03-29 for CWE-407 (algorithmic complexity).

Scope

The cloned ~/git/grpc repository is the gRPC C/C++ core repo, not the Java implementation (grpc-java). No Java source files were found in src/ beyond Android example activities.

Findings

  • No Java main-path source files present in this clone.
  • gRPC Java (io.grpc:grpc-*) ships as a separate Maven/Gradle repository (grpc/grpc-java on GitHub) which was not cloned.

Result

CLEAN (N/A). No Java CWE-407 defects findable in this clone — wrong repo flavor. Action: clone grpc/grpc-java for a proper Java scan if needed.