Find a file
russell@unturf.com bb81a1a3a0
wave4: psalm-0001 flagship patch + linter/CI/config scan survey
psalm-0001: FileFilter.allowsClass runs in_array() on every class the
analyzer visits. For C classes and F filter entries, per-run cost is
O(C*F). Fix: lazy array_fill_keys hash set; O(1) probe per class.
Bench: 336x at C=F=5000. Patch + ticket + bench + intel brief ship.

wave4-linter-ci-survey.md: consolidated report on 40 projects scanned
across linters (eslint, biome, prettier, pylint, ruff, black, rubocop,
shellcheck, stylelint, sqlfluff, phpstan, PHP_CodeSniffer, psalm,
rustfmt, golangci-lint, scalafmt, hadolint, yamllint, markdownlint,
ktlint, detekt), CI runners (act, buildkite-agent, tektoncd/pipeline,
concourse, woodpecker), config management (aws-cdk, cdk8s, kustomize),
and build tools (rollup, parcel, vite, turborepo, nx, lerna, swc,
babel, gulp).

Clean scans (zero HIGH+ findings): hadolint, shellcheck, gulp.

Document includes per-target finding counts and 7 triage follow-ups for
future waves (PHP_CodeSniffer ReDoS, ktlint spacing rule, pylint
MSG_ORDER.index, black pgen2 dfa, golangci-lint migrate, tektoncd
forbidden-env scan, aws-cdk region-info).
2026-04-24 17:21:51 -04:00
.github undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
.jcheck undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
bin undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
defects wave4: psalm-0001 flagship patch + linter/CI/config scan survey 2026-04-24 17:21:51 -04:00
doc undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
docs wave4: psalm-0001 flagship patch + linter/CI/config scan survey 2026-04-24 17:21:51 -04:00
make undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
scanner scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
src undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
test undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
tests feat: add scan_verify.py + check_coverage.py for all 1258 UNDF indicators 2026-04-12 16:15:01 -04:00
tools wave15: v8-0002/0003 Intl+revectorizer (125x/25x) + bullet/box2d ticket files — 528/240 2026-03-27 19:16:28 -04:00
whitepaper wave4: psalm-0001 flagship patch + linter/CI/config scan survey 2026-04-24 17:21:51 -04:00
.editorconfig undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
.gitattributes undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
.gitignore undf: stamp patches (kdenlive-0010, krita-0001/0002); gitignore minecraft server artifacts 2026-04-03 15:06:14 -04:00
.gitlab-ci.yml scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
ADDITIONAL_LICENSE_INFO undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
ASSEMBLY_EXCEPTION undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
CLAUDE.md docs: document scanner improvement loop in CLAUDE.md 2026-04-12 17:43:44 -04:00
compile-unit-tests.sh nmap-0002 + haproxy-0004 + nginx-0004 + weechat-0003 + zeek-0002 + curl-0004: 6 new CWE-407 defects in network tools; count 693→699 2026-03-29 22:22:11 -04:00
configure undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
CONTRIBUTING.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
GNUmakefile wave8 complete + outreach: 452/202, 40 outreach briefs, buck2/ant CLEAN 2026-03-27 16:45:01 -04:00
LICENSE undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
Makefile scanner: undfscand v1.0.0 — UNDF patch verification scanner (C/pthreads) 2026-03-29 21:07:54 -04:00
README.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
SCAN-TODO.md scan-todo: add lean4 wave 35, add Priority 4c formal methods section 2026-04-13 09:08:56 -04:00
SECURITY.md undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
UNDF-REGISTRY.json wave4: psalm-0001 flagship patch + linter/CI/config scan survey 2026-04-24 17:21:51 -04:00

Welcome to the JDK!

For build instructions please see the online documentation, or either of these files:

See https://openjdk.org/ for more information about the OpenJDK Community and the JDK and see https://bugs.openjdk.org for JDK issue tracking.