Netty project - an event-driven asynchronous network application framework
This report summarizes scanner evidence for netty/netty, a Java project with 35,067 GitHub stars. SynthScan examined 712,322 lines of code across 3929 source files, recording 384 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 1.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 198 finding(s).
Are imports declared and package/API names verified? 51 finding(s).
Are wrappers, guards, and repeated structures necessary? 143 finding(s).
Which changes need focused human review? 384 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 384 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ain/java/io/netty/handler/ssl/OpenSslSessionCache.java | 319 | this.id = new OpenSslSessionId(io.netty.internal.tcnative.SSLSession.getSessionId(session)); | CODE |
| CRITICAL | …o/netty/handler/ssl/ReferenceCountedOpenSslEngine.java | 2465 | long credPtr = io.netty.internal.tcnative.SSL.getSelectedCredential(ssl); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ServerCookieEncoder.java | 53 | return io.netty.handler.codec.http.cookie.ServerCookieEncoder.LAX.encode(name, value); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ServerCookieEncoder.java | 64 | return io.netty.handler.codec.http.cookie.ServerCookieEncoder.LAX.encode(cookie); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ServerCookieEncoder.java | 75 | return io.netty.handler.codec.http.cookie.ServerCookieEncoder.LAX.encode(cookies); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ServerCookieEncoder.java | 86 | return io.netty.handler.codec.http.cookie.ServerCookieEncoder.LAX.encode(cookies); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ServerCookieEncoder.java | 97 | return io.netty.handler.codec.http.cookie.ServerCookieEncoder.LAX.encode(cookies); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ClientCookieEncoder.java | 49 | return io.netty.handler.codec.http.cookie.ClientCookieEncoder.LAX.encode(name, value); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ClientCookieEncoder.java | 60 | return io.netty.handler.codec.http.cookie.ClientCookieEncoder.LAX.encode(cookie); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ClientCookieEncoder.java | 71 | return io.netty.handler.codec.http.cookie.ClientCookieEncoder.LAX.encode(cookies); | CODE |
| CRITICAL | …a/io/netty/handler/codec/http/ClientCookieEncoder.java | 82 | return io.netty.handler.codec.http.cookie.ClientCookieEncoder.LAX.encode(cookies); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 679 | // Construct using io.netty.example.worldclock.WorldClockProtocol.Location.newBuilder() | COMMENT |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1239 | // Construct using io.netty.example.worldclock.WorldClockProtocol.Locations.newBuilder() | COMMENT |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2178 | // Construct using io.netty.example.worldclock.WorldClockProtocol.LocalTime.newBuilder() | COMMENT |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2938 | // Construct using io.netty.example.worldclock.WorldClockProtocol.LocalTimes.newBuilder() | COMMENT |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 172 | return io.netty.example.worldclock.WorldClockProtocol.getDescriptor().getEnumTypes().get(0); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 303 | return io.netty.example.worldclock.WorldClockProtocol.getDescriptor().getEnumTypes().get(1); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 410 | io.netty.example.worldclock.WorldClockProtocol.Continent value = io.netty.example.worldclock.WorldClockPro | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 720 | return io.netty.example.worldclock.WorldClockProtocol.Location.getDefaultInstance(); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 734 | io.netty.example.worldclock.WorldClockProtocol.Location result = new io.netty.example.worldclock.WorldClockProto | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 761 | if (other == io.netty.example.worldclock.WorldClockProtocol.Location.getDefaultInstance()) return this; | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1283 | return io.netty.example.worldclock.WorldClockProtocol.Locations.getDefaultInstance(); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1297 | io.netty.example.worldclock.WorldClockProtocol.Locations result = new io.netty.example.worldclock.WorldClockProt | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1323 | if (other == io.netty.example.worldclock.WorldClockProtocol.Locations.getDefaultInstance()) return this; | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1592 | io.netty.example.worldclock.WorldClockProtocol.Location.getDefaultInstance()); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1600 | index, io.netty.example.worldclock.WorldClockProtocol.Location.getDefaultInstance()); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 1777 | io.netty.example.worldclock.WorldClockProtocol.DayOfWeek value = io.netty.example.worldclock.WorldClockPro | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2229 | return io.netty.example.worldclock.WorldClockProtocol.LocalTime.getDefaultInstance(); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2243 | io.netty.example.worldclock.WorldClockProtocol.LocalTime result = new io.netty.example.worldclock.WorldClockProt | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2290 | if (other == io.netty.example.worldclock.WorldClockProtocol.LocalTime.getDefaultInstance()) return this; | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2982 | return io.netty.example.worldclock.WorldClockProtocol.LocalTimes.getDefaultInstance(); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 2996 | io.netty.example.worldclock.WorldClockProtocol.LocalTimes result = new io.netty.example.worldclock.WorldClockPro | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 3022 | if (other == io.netty.example.worldclock.WorldClockProtocol.LocalTimes.getDefaultInstance()) return this; | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 3291 | io.netty.example.worldclock.WorldClockProtocol.LocalTime.getDefaultInstance()); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 3299 | index, io.netty.example.worldclock.WorldClockProtocol.LocalTime.getDefaultInstance()); | CODE |
| CRITICAL | …va/io/netty/example/worldclock/WorldClockProtocol.java | 3384 | new com.google.protobuf.Descriptors.FileDescriptor.InternalDescriptorAssigner() { | CODE |
| CRITICAL⚡ | transport-native-io_uring/README.md | 46 | at io.netty.channel.uring.IoUring.ensureAvailability(IOUring.java:63) | CODE |
| CRITICAL⚡ | transport-native-io_uring/README.md | 50 | at io.netty.channel.uring.Native.ioUringSetup(Native Method) | CODE |
| CRITICAL⚡ | transport-native-io_uring/README.md | 51 | at io.netty.channel.uring.Native.createRingBuffer(Native.java:141) | CODE |
| CRITICAL⚡ | transport-native-io_uring/README.md | 52 | at io.netty.channel.uring.Native.createRingBuffer(Native.java:174) | CODE |
| CRITICAL | …crobench/concurrent/FastThreadLocalCheckBenchmark.java | 83 | io.netty.util.concurrent.FastThreadLocalThread.runWithFastThreadLocal(() -> { | CODE |
| CRITICAL | …y/handler/codec/http2/Http2MultiplexTransportTest.java | 1166 | java.util.concurrent.locks.LockSupport.parkNanos(1000); | CODE |
| CRITICAL | …ndler/codec/compression/DefensiveDecompressorTest.java | 96 | new org.junit.jupiter.api.function.Executable() { | CODE |
| CRITICAL | …/codec/compression/InputBufferingDecompressorTest.java | 63 | assertThrows(DecompressionException.class, new org.junit.jupiter.api.function.Executable() { | CODE |
| CRITICAL | …va/io/netty/handler/codec/compression/ZstdDecoder.java | 128 | uncompressedLength = com.github.luben.zstd.Zstd.getFrameContentSize( | CODE |
| CRITICAL | …va/io/netty/handler/codec/compression/ZstdDecoder.java | 131 | uncompressedLength = com.github.luben.zstd.Zstd.getFrameContentSize( | CODE |
| CRITICAL | …va/io/netty/handler/codec/compression/ZstdEncoder.java | 41 | io.netty.handler.codec.compression.Zstd.ensureAvailability(); | CODE |
| CRITICAL | …main/java/io/netty/handler/codec/compression/Zstd.java | 43 | com.github.luben.zstd.util.Native.load(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | run-example.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | run-example.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …solver-dns-classes-macos/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …solver-dns-classes-macos/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/test/resources/io/netty/handler/ssl/generate-certs.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/test/resources/io/netty/handler/ssl/generate-certs.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | handler/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | handler/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-smtp/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-smtp/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | docker/update-sdkman-sha.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docker/update-sdkman-sha.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | docker/update-sdkman-sha.sh | 29 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport-classes-epoll/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport-classes-epoll/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-redis/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-redis/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …sport-native-unix-common/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …sport-native-unix-common/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-marshalling/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-marshalling/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-dns/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-dns/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | resolver-dns/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | resolver-dns/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-base/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-base/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-mqtt/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-mqtt/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http3/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http3/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | common/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | common/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-protobuf/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-protobuf/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-classes-quic/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-classes-quic/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http2/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-http2/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport-classes-kqueue/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | transport-classes-kqueue/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-haproxy/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | codec-haproxy/src/main/java/module-info.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/finish_release.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/finish_release.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/list_staged_release.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/list_staged_release.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/generate_docs.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/generate_docs.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check_icla.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/check_icla.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/collect-ghsa-reports.sh | 2 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/collect-ghsa-reports.sh | 16 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/ci-build.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/ci-build.yml | 15 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | .github/workflows/ci-pr.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| 75 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | run-example.sh | 1 | #!/bin/bash -e | COMMENT |
| LOW | …solver-dns-classes-macos/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …/test/resources/io/netty/handler/ssl/generate-certs.sh | 1 | #!/bin/sh | COMMENT |
| LOW | …/test/java/io/netty/handler/ssl/OpenSslEngineTest.java | 2021 | ByteBuffer serverOut = ByteBuffer.wrap("Hello Client, I'm Server".getBytes(CharsetUtil.US_ASCII)); | COMMENT |
| LOW | handler/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …main/java/io/netty/handler/ssl/AbstractSniHandler.java | 41 | // | COMMENT |
| LOW | …o/netty/handler/ssl/ReferenceCountedOpenSslEngine.java | 1061 | : getHandshakeStatus(SSL.bioLengthNonApplication(networkBIO)) | COMMENT |
| LOW | codec-smtp/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | codec-http/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …rc/main/java/io/netty/handler/codec/http/HttpUtil.java | 641 | return -1; | COMMENT |
| LOW | …rc/main/java/io/netty/handler/codec/http/HttpUtil.java | 761 | // | COMMENT |
| LOW | …rc/main/java/io/netty/handler/codec/http/HttpUtil.java | 781 | // field-name's token is equivalent to cookie-name's token, we can reuse the tchar mask for both: | COMMENT |
| LOW | …rc/main/java/io/netty/handler/codec/http/HttpUtil.java | 801 | // low |= 1L << bit; | COMMENT |
| LOW | …rc/main/java/io/netty/handler/codec/http/HttpUtil.java | 821 | // if (bit < 64) { | COMMENT |
| LOW | …/java/io/netty/handler/codec/http/HttpClientCodec.java | 361 | case 'H': | COMMENT |
| LOW | …ava/io/netty/handler/codec/http/HttpObjectDecoder.java | 1161 | COMMENT | |
| LOW | …ec/http/multipart/HttpPostMultipartRequestDecoder.java | 541 | // Content-type: multipart/form-data, boundary=AaB03x | COMMENT |
| LOW | …ndler/codec/http/multipart/HttpPostRequestEncoder.java | 581 | // filename="file1.txt" | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket13FrameDecoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket13FrameDecoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket07FrameDecoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket07FrameDecoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket08FrameDecoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket08FrameDecoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket07FrameEncoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket07FrameEncoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket13FrameEncoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket13FrameEncoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | …netty/handler/codec/http/websocketx/WebSocketUtil.java | 121 | * @return A pseudo-random number | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket08FrameEncoder.java | 21 | // Redistribution and use in source and binary forms, with or | COMMENT |
| LOW | …ler/codec/http/websocketx/WebSocket08FrameEncoder.java | 41 | // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | COMMENT |
| LOW | docker/update-sdkman-sha.sh | 1 | #!/bin/bash -e | COMMENT |
| LOW | transport-classes-epoll/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …/java/io/netty/channel/epoll/AbstractEpollChannel.java | 501 | COMMENT | |
| LOW | codec-redis/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …dns-native-macos/src/main/c/netty_resolver_dns_macos.c | 21 | #include <stdlib.h> | COMMENT |
| LOW | …c/test/java/io/netty/channel/ReentrantChannelTest.java | 61 | // 1. Because this write attempt has been made from a non-I/O thread, | COMMENT |
| LOW | transport/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …/main/java/io/netty/channel/ChannelOutboundBuffer.java | 461 | final int readerIndex = buf.readerIndex(); | COMMENT |
| LOW | …n/java/io/netty/channel/group/DefaultChannelGroup.java | 141 | boolean added = map.putIfAbsent(channel.id(), channel) == null; | COMMENT |
| LOW | …src/main/java/io/netty/channel/local/LocalChannel.java | 521 | COMMENT | |
| LOW | …t/src/main/java/io/netty/channel/nio/NioIoHandler.java | 441 | // The race condition is triggered when 'wakenUp' is set to | COMMENT |
| LOW | …sport-native-unix-common/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …nsport-native-unix-common/src/main/c/netty_unix_util.h | 21 | #include <stdint.h> | COMMENT |
| LOW | …port-native-unix-common/src/main/c/netty_unix_socket.c | 21 | #include <stdlib.h> | COMMENT |
| LOW | …port-native-unix-common/src/main/c/netty_unix_limits.c | 21 | #include "netty_unix_limits.h" | COMMENT |
| LOW | codec-marshalling/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | codec-dns/src/main/java/module-info.yml | 1 | # ---------------------------------------------------------------------------- | COMMENT |
| LOW | …ple/http/websocketx/client/WebSocketClientHandler.java | 21 | //of this software and associated documentation files (the "Software"), to deal | COMMENT |
| LOW | …ort-native-io_uring/src/main/c/netty_io_uring_native.c | 21 | #include <jni.h> | COMMENT |
| LOW | …ort-native-io_uring/src/main/c/netty_io_uring_native.c | 41 | #include <sys/socket.h> | COMMENT |
| LOW | …ort-native-io_uring/src/main/c/netty_io_uring_native.c | 61 | // Add define if NETTY_IO_URING_BUILD_STATIC is defined so it is picked up in netty_jni_util.c | COMMENT |
| LOW | transport-native-io_uring/src/main/c/syscall.c | 21 | #include <unistd.h> | COMMENT |
| LOW | transport-native-io_uring/src/main/c/io_uring.h | 101 | #define IOSQE_IO_DRAIN (1U << IOSQE_IO_DRAIN_BIT) | COMMENT |
| LOW | transport-native-io_uring/src/main/c/netty_io_uring.h | 21 | #include "netty_unix_errors.h" | COMMENT |
| LOW | …ative-io_uring/src/main/c/netty_io_uring_linuxsocket.c | 21 | */ | COMMENT |
| LOW | …ative-io_uring/src/main/c/netty_io_uring_linuxsocket.c | 41 | // TCP_FASTOPEN is defined in linux 3.7. We define this here so older kernels can compile. | COMMENT |
| LOW | …ative-io_uring/src/main/c/netty_io_uring_linuxsocket.c | 61 | // UDP_GRO is defined in linux 5. We define this here so older kernels can compile. | COMMENT |
| LOW | …te/transport/socket/DatagramUnicastIPv6MappedTest.java | 41 | throw new ExceptionInInitializerError(e); | COMMENT |
| LOW | …y/testsuite/transport/socket/SocketFileRegionTest.java | 301 | Channel sc = sb.bind().sync().channel(); | COMMENT |
| 94 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ler/src/main/java/io/netty/handler/ssl/SslHandler.java | 1550 | // We need to check if pendingUnecryptedWrites is null as the SslHandler | COMMENT |
| LOW | …ain/java/io/netty/handler/flow/FlowControlHandler.java | 226 | // we need to check if queue was set to null in the meantime and, if so, break out of the loop. | COMMENT |
| LOW | …io/netty/channel/epoll/AbstractEpollStreamChannel.java | 779 | // We need to check if it is still active as if not we removed all SpliceTasks in | COMMENT |
| LOW | …/src/main/java/io/netty/channel/DefaultFileRegion.java | 134 | // If the amount of written data is 0 we need to check if the requested count is bigger then the | COMMENT |
| LOW | …/src/main/java/io/netty/channel/DefaultFileRegion.java | 182 | // If the amount of written data is 0 we need to check if the requested count is bigger then the | COMMENT |
| LOW⚡ | …/src/main/java/io/netty/channel/ManualIoEventLoop.java | 613 | // We need to check if the method was called from within the EventLoop as this would cause a deadlock. | COMMENT |
| LOW⚡ | …/src/main/java/io/netty/channel/ManualIoEventLoop.java | 621 | // We need to check if the method was called from within the EventLoop as this would cause a deadlock. | COMMENT |
| LOW⚡ | …/src/main/java/io/netty/channel/ManualIoEventLoop.java | 629 | // We need to check if the method was called from within the EventLoop as this would cause a deadlock. | COMMENT |
| LOW⚡ | …/src/main/java/io/netty/channel/ManualIoEventLoop.java | 637 | // We need to check if the method was called from within the EventLoop as this would cause a deadlock. | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 66 | // Step 1: Load the certificate chain for netty.io. We'll need the certificate | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 74 | // Step 2: We need the URL of the CA's OCSP responder server. It's somewhere encoded | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 83 | // Step 3: Construct the OCSP request | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 89 | // Step 4: Do the request to the CA's OCSP responder | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 95 | // Step 5: Is my certificate any good or has the CA revoked it? | COMMENT |
| LOW | …main/java/io/netty/example/ocsp/OcspServerExample.java | 114 | // Step 6: Cache the OCSP response and use it as long as it's not | COMMENT |
| LOW | …n/java/io/netty/util/internal/CleanerJava24Linker.java | 128 | // First, we need to check if we have access to "restricted" methods through the Java Module system. | COMMENT |
| LOW | …/io/netty/handler/codec/quic/QuicheQuicConnection.java | 50 | // We need to have every stored 2 times as we need to check if the last sockaddr has changed between | COMMENT |
| LOW | …/netty/channel/uring/AbstractIoUringStreamChannel.java | 475 | // We need to check if it's supported as otherwise providing these would result in an -EINVAL. | COMMENT |
| LOW | …ava/io/netty/channel/uring/AbstractIoUringChannel.java | 906 | // In this case we we need to check if the user did signal the desire to read again | COMMENT |
| LOW | …ava/io/netty/channel/uring/AbstractIoUringChannel.java | 924 | // In this case we we need to check if the user did signal the desire to read again | COMMENT |
| LOW | …/netty/channel/uring/AbstractIoUringServerChannel.java | 185 | // We need to check if its supported as otherwise providing these would result in an -EINVAL. | COMMENT |
| LOW | …r/src/main/java/io/netty/buffer/UnsafeByteBufUtil.java | 548 | // We need to check if dst is ready-only so we not write something in it by using Unsafe. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 66 | // Step 1: Load the certificate chain for netty.io. We'll need the certificate | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 74 | // Step 2: We need the URL of the CA's OCSP responder server. It's somewhere encoded | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 83 | // Step 3: Construct the OCSP request | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 89 | // Step 4: Do the request to the CA's OCSP responder | COMMENT |
| LOW⚡ | …main/java/io/netty/example/ocsp/OcspServerExample.java | 95 | // Step 5: Is my certificate any good or has the CA revoked it? | COMMENT |
| LOW | …main/java/io/netty/example/ocsp/OcspServerExample.java | 114 | // Step 6: Cache the OCSP response and use it as long as it's not | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …dler/codec/http2/WeightedFairQueueByteDistributor.java | 293 | // be allocated bytes when the parent stream can't utilize them. This may be as a result of the | COMMENT |
| MEDIUM | .github/workflows/ci-verify-musl.yml | 144 | # The control. Anything that fails on Alpine but also fails here is a broken harness, not | COMMENT |
| MEDIUM | .github/scripts/musl-verify/verify.sh | 20 | # control -- anything that fails on Alpine but also fails here means the harness is broken, not the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rame/client/Http2ClientStreamFrameResponseHandler.java | 31 | public final class Http2ClientStreamFrameResponseHandler extends SimpleChannelInboundHandler<Http2StreamFrame> { | CODE |
| LOW | …le/http2/helloworld/client/Http2ClientInitializer.java | 139 | private final class UpgradeRequestHandler extends ChannelInboundHandlerAdapter { | CODE |
| LOW | …ample/http2/helloworld/client/HttpResponseHandler.java | 36 | public class HttpResponseHandler extends SimpleChannelInboundHandler<FullHttpResponse> { | CODE |
| LOW | …/io/netty/example/http2/tiles/Http2RequestHandler.java | 46 | public class Http2RequestHandler extends SimpleChannelInboundHandler<FullHttpRequest> { | CODE |
| LOW | …/io/netty/example/http2/tiles/Http1RequestHandler.java | 40 | public final class Http1RequestHandler extends Http2RequestHandler { | CODE |
| LOW | …/netty/example/http2/tiles/FallbackRequestHandler.java | 41 | public final class FallbackRequestHandler extends SimpleChannelInboundHandler<HttpRequest> { | CODE |
| LOW | …java/io/netty/example/http/cors/OkResponseHandler.java | 31 | public class OkResponseHandler extends SimpleChannelInboundHandler<Object> { | CODE |
| LOW | …c/main/java/io/netty/resolver/dns/DnsNameResolver.java | 1570 | private static final class DnsResponseHandler extends ChannelInboundHandlerAdapter { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | docker/update-sdkman-sha.sh | 22 | # Usage: | COMMENT |
| LOW | scripts/check_icla.sh | 21 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …o/netty/handler/codec/http/HttpRequestDecoderTest.java | 1250 | "Lorem ipsum"; | CODE |
| LOW | …/netty/handler/codec/http/HttpResponseDecoderTest.java | 1387 | "Lorem ipsum"; | CODE |
| LOW | …y/handler/codec/http2/DefaultHttp2FrameWriterTest.java | 600 | final String largeValue = repeat("dummy-value", 100); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …netty/handler/codec/http/HttpServerUpgradeHandler.java | 68 | * step which invokes {@link #upgradeTo}. When returning {@code true}, you can add headers to | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/scripts/bundle_create.sh | 24 | # Create a bundle zip that contains all jars. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/ci-verify-load.yml | 130 | # Check if we can load the native code on aarch64 | COMMENT |