russell@unturf.com
7491349edc
bullet3-0001: btGhostObject::addOverlappingObjectInternal O(N²) linear dedup per broadphase step — even carries "too slow" self-admission comment (HIGH) bullet3-0002: btSoftRigidCollisionAlgorithm::processCollision O(C×D) per frame on m_collisionDisabledObjects plain array (MEDIUM) allegro5: CLEAN (vector_contains only on non-hot setup paths) box2d: CLEAN (v3 rewrite uses b2HashSet throughout) dry: CLEAN (HashSet/HashMap on all hot dedup paths)
15 lines
457 B
Markdown
15 lines
457 B
Markdown
# bottle — CWE-407 Scan: CLEAN
|
|
|
|
Scanned: 2026-03-29
|
|
|
|
## Scope
|
|
|
|
- `bottle.py` — Route.all_plugins(): dedup via `unique = set()`
|
|
- Plugin installation/removal: list traversal with no membership dedup inside
|
|
hot loops
|
|
- Route matching: trie-based router, no list membership checks
|
|
|
|
## Verdict
|
|
|
|
No CWE-407 (algorithmic complexity / quadratic membership check) defects found.
|
|
Plugin name deduplication uses `set`. No visited/seen lists in traversal paths.
|