Skip to main content
← Back to list
01Issue
BugShippedExtensionsPublic
AssigneesNone

Relationships

↔ sibling #3716

#3720 @swamp/cve/dirtyfrag: scan logs are never saved (file writer handle dropped, data name collides with the status resource)

Opened by skunk-ape · 10/21/2026· Shipped 10/22/2026

Found while building @swamp/cve/emudhra (#3709), which copies dirtyfrag's structure.

dirtyfrag's methods call context.createFileWriter('log', label) with the same instance name as the status resource they write (label or host), and never return the handle from finalize(). After a scan, swamp data list shows only the status resource; the log file is not recorded.

Two problems:

  1. finalize() returns a data handle that has to be included in the method's dataHandles, or the file is not registered.
  2. Data names are per model, not per spec, so a file and a resource with the same instance name overwrite each other's versions.

Fix as done in cve/emudhra: name file instances distinctly (for example host-log) and return the finalize() handles alongside the resource handles. Affects scan, scanFleet and mitigate.

02Bog Flow
✓OPEN✓TRIAGED✓IN PROGRESS✓SHIPPEDLINKED+ 5 MOREPR_MERGED+ 1 MORESESSION_SUMMARIZED

Shipped

10/22/2026, 1:23:27 AM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 linked sibling of #371610/21/2026, 11:46:18 PM
Editable. Press Enter to edit.

system commented 10/21/2026, 3:56:08 PM

Classified automatically when this issue was filed.

  • Source: Extensions

If you feel this classification is incorrect, add a ripple to tell us so.

Sign in to post a ripple.