Scanned bitcoin/dragonfly/tor/transmission/nmap/ceph/allegro5 for additional CWE-407 defects. All repos found CLEAN beyond previously recorded patches. Updated tor/CLEAN.md to correctly reference existing tor-0001 through tor-0003.
632 B
632 B
CLEAN — gRPC
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
Scope
The cloned ~/git/grpc repository is the gRPC C/C++ core repo, not the Java
implementation (grpc-java). No Java source files were found in src/ beyond
Android example activities.
Findings
- No Java main-path source files present in this clone.
- gRPC Java (
io.grpc:grpc-*) ships as a separate Maven/Gradle repository (grpc/grpc-javaon GitHub) which was not cloned.
Result
CLEAN (N/A). No Java CWE-407 defects findable in this clone — wrong repo flavor.
Action: clone grpc/grpc-java for a proper Java scan if needed.