netfabric / linqbenchmarks

Benchmarking LINQ and alternative implementations

NetFabric

Defines classes and structs common to other NetFabric projects.

Throw

Defines a set of static methods to throw exceptions.

Methods that throw exceptions cannot be inlined by the JIT compiler. Only if thrown within a called method. Using the methods in this class allows exceptions to be thrown and still let the method be a candidate to be inlined.

[MethodImpl(MethodImplOptions.AggressiveInlining)]
public static ReadOnlyListWrapper<T> AsReadOnlyList<T>(T[] source)
    => source switch
    {
        null => Throw.ArgumentNullException<ReadOnlyListWrapper<T>>(nameof(source)),
        _ => new ReadOnlyListWrapper<T>(source)
    };

Credits

The following open-source projects are used to build and test this project:

• .NET
• BenchmarkDotNet
• coverlet
• NetFabric.Assertive
• NetFabric.Hyperlinq.Analyzer
• xUnit

License

This project is licensed under the MIT license. See the LICENSE file for more info.

linqbenchmarks's Issues

Upgrade StructLinq

Hi @reegeek
After a long pause away from OSS development, I'm trying to update the benchmarks.
I tried to upgrade StructLinq but it doesn't compile. The uint to int changes are easy to fix but I could not figure out what to do with the changes with Where and Select using ref.
Can you please submit a PR or simple give me some pointers?
Thanks

Dependabot-preview

Hi,

Maybe you can install https://github.com/marketplace/dependabot-preview for this repository ?

Regards,

CVE-2018-8292 (High) detected in system.net.http.4.3.0.nupkg

CVE-2018-8292 - High Severity Vulnerability

Vulnerable Library - system.net.http.4.3.0.nupkg

Provides a programming interface for modern HTTP applications, including HTTP client components that...

Library home page: https://api.nuget.org/packages/system.net.http.4.3.0.nupkg

Path to dependency file: LinqBenchmarks/LinqBenchmarks/LinqBenchmarks.csproj

Path to vulnerable library: /usr/share/dotnet/sdk/NuGetFallbackFolder/system.net.http/4.3.0/system.net.http.4.3.0.nupkg

Dependency Hierarchy:

• netfabric.hyperlinq.analyzer.2.0.1.nupkg (Root Library)
  • microsoft.codeanalysis.csharp.workspaces.3.8.0.nupkg
    • humanizer.core.2.2.0.nupkg
      • netstandard.library.1.6.1.nupkg
        • ❌ system.net.http.4.3.0.nupkg (Vulnerable Library)

Found in HEAD commit: 69a4e4ba33a33d7387161e1764de7d8dbc434955

Found in base branch: master

Vulnerability Details

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

Publish Date: 2018-10-10

URL: CVE-2018-8292

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: None
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: dotnet/announcements#88

Release Date: 2018-10-10

Fix Resolution: System.Net.Http - 4.3.4;Microsoft.PowerShell.Commands.Utility - 6.1.0-rc.1

---

Step up your Open Source Security Game with WhiteSource here

fat reference type benchmarks are missing

These lead to 404

Also would be cool with a few more benchmarks for ref types

Discussion: Type of T

Hi,
Currently, all tests are made on "IEnumerable".
I think benchmark should bench 3 kind of object:

• int (small valueType)
• a class
• fat struct (fat valueType)
  Impact on enumeration should be important.

For the moment, I don't know how design it and avoid Copy-Paste between type.

Again, thank for this repository.

CVE-2019-0820 (High) detected in system.text.regularexpressions.4.3.0.nupkg

CVE-2019-0820 - High Severity Vulnerability

Vulnerable Library - system.text.regularexpressions.4.3.0.nupkg

Provides the System.Text.RegularExpressions.Regex class, an implementation of a regular expression e...

Library home page: https://api.nuget.org/packages/system.text.regularexpressions.4.3.0.nupkg

Path to dependency file: LinqBenchmarks/LinqBenchmarks/LinqBenchmarks.csproj

Path to vulnerable library: /usr/share/dotnet/sdk/NuGetFallbackFolder/system.text.regularexpressions/4.3.0/system.text.regularexpressions.4.3.0.nupkg

Dependency Hierarchy:

• netfabric.hyperlinq.analyzer.2.0.1.nupkg (Root Library)
  • microsoft.codeanalysis.csharp.workspaces.3.8.0.nupkg
    • humanizer.core.2.2.0.nupkg
      • netstandard.library.1.6.1.nupkg
        • system.xml.xdocument.4.3.0.nupkg
          • system.xml.readerwriter.4.3.0.nupkg
            • ❌ system.text.regularexpressions.4.3.0.nupkg (Vulnerable Library)

Found in HEAD commit: 69a4e4ba33a33d7387161e1764de7d8dbc434955

Found in base branch: master

Vulnerability Details

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Publish Date: 2019-05-16

URL: CVE-2019-0820

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here

Big table of comparison

To make the results more useful, consider aggregating all benchmark results into one table in README possibly with ⚪🔴🟠🟡🟢🔵🟣🟤⚫s so that we can immediately see which one is faster in which areas without needing to click many times.