Enable WAF generate_stack action by default#7518
Merged
Conversation
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 50 metrics, 13 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1049790
Total [baseline] (8.508 s) : 0, 8507600
Agent [candidate] (1.057 s) : 0, 1057260
Total [candidate] (8.512 s) : 0, 8511618
section iast
Agent [baseline] (1.182 s) : 0, 1181636
Total [baseline] (9.03 s) : 0, 9029995
Agent [candidate] (1.181 s) : 0, 1181493
Total [candidate] (9.061 s) : 0, 9060990
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.174 s) : 0, 1174195
Total [baseline] (8.951 s) : 0, 8951061
Agent [candidate] (1.172 s) : 0, 1172443
Total [candidate] (8.968 s) : 0, 8968099
section iast_TELEMETRY_OFF
Agent [baseline] (1.17 s) : 0, 1170352
Total [baseline] (8.964 s) : 0, 8963777
Agent [candidate] (1.178 s) : 0, 1177998
Total [candidate] (8.974 s) : 0, 8973865
gantt
title insecure-bank - break down per module: candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (669.798 ms) : 0, 669798
BytebuddyAgent [candidate] (674.98 ms) : 0, 674980
GlobalTracer [baseline] (307.01 ms) : 0, 307010
GlobalTracer [candidate] (308.701 ms) : 0, 308701
AppSec [baseline] (51.284 ms) : 0, 51284
AppSec [candidate] (51.686 ms) : 0, 51686
Remote Config [baseline] (666.081 µs) : 0, 666
Remote Config [candidate] (665.694 µs) : 0, 666
Telemetry [baseline] (7.471 ms) : 0, 7471
Telemetry [candidate] (7.511 ms) : 0, 7511
section iast
BytebuddyAgent [baseline] (784.454 ms) : 0, 784454
BytebuddyAgent [candidate] (785.144 ms) : 0, 785144
GlobalTracer [baseline] (298.28 ms) : 0, 298280
GlobalTracer [candidate] (298.657 ms) : 0, 298657
AppSec [baseline] (50.614 ms) : 0, 50614
AppSec [candidate] (51.522 ms) : 0, 51522
IAST [baseline] (25.217 ms) : 0, 25217
IAST [candidate] (24.41 ms) : 0, 24410
Remote Config [baseline] (593.52 µs) : 0, 594
Remote Config [candidate] (614.021 µs) : 0, 614
Telemetry [baseline] (8.796 ms) : 0, 8796
Telemetry [candidate] (7.419 ms) : 0, 7419
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (780.068 ms) : 0, 780068
BytebuddyAgent [candidate] (779.508 ms) : 0, 779508
GlobalTracer [baseline] (296.864 ms) : 0, 296864
GlobalTracer [candidate] (296.565 ms) : 0, 296565
AppSec [baseline] (50.758 ms) : 0, 50758
AppSec [candidate] (48.421 ms) : 0, 48421
IAST [baseline] (22.714 ms) : 0, 22714
IAST [candidate] (25.744 ms) : 0, 25744
Remote Config [baseline] (611.905 µs) : 0, 612
Remote Config [candidate] (593.918 µs) : 0, 594
Telemetry [baseline] (9.56 ms) : 0, 9560
Telemetry [candidate] (7.973 ms) : 0, 7973
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (776.43 ms) : 0, 776430
BytebuddyAgent [candidate] (781.411 ms) : 0, 781411
GlobalTracer [baseline] (296.369 ms) : 0, 296369
GlobalTracer [candidate] (298.496 ms) : 0, 298496
AppSec [baseline] (51.519 ms) : 0, 51519
AppSec [candidate] (51.56 ms) : 0, 51560
IAST [baseline] (22.396 ms) : 0, 22396
IAST [candidate] (22.832 ms) : 0, 22832
Remote Config [baseline] (600.945 µs) : 0, 601
Remote Config [candidate] (590.983 µs) : 0, 591
Telemetry [baseline] (9.435 ms) : 0, 9435
Telemetry [candidate] (9.413 ms) : 0, 9413
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.057 s) : 0, 1056555
Total [baseline] (10.433 s) : 0, 10432662
Agent [candidate] (1.059 s) : 0, 1059181
Total [candidate] (10.446 s) : 0, 10445525
section appsec
Agent [baseline] (1.171 s) : 0, 1171064
Total [baseline] (10.497 s) : 0, 10497090
Agent [candidate] (1.174 s) : 0, 1173716
Total [candidate] (10.481 s) : 0, 10481105
section iast
Agent [baseline] (1.183 s) : 0, 1182761
Total [baseline] (10.882 s) : 0, 10881690
Agent [candidate] (1.173 s) : 0, 1172756
Total [candidate] (10.817 s) : 0, 10817368
section profiling
Agent [baseline] (1.265 s) : 0, 1264832
Total [baseline] (10.657 s) : 0, 10656535
Agent [candidate] (1.249 s) : 0, 1248974
Total [candidate] (10.599 s) : 0, 10598717
gantt
title petclinic - break down per module: candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (674.457 ms) : 0, 674457
BytebuddyAgent [candidate] (675.908 ms) : 0, 675908
GlobalTracer [baseline] (308.661 ms) : 0, 308661
GlobalTracer [candidate] (309.517 ms) : 0, 309517
AppSec [baseline] (51.545 ms) : 0, 51545
AppSec [candidate] (51.798 ms) : 0, 51798
Remote Config [baseline] (672.192 µs) : 0, 672
Remote Config [candidate] (671.672 µs) : 0, 672
Telemetry [baseline] (7.545 ms) : 0, 7545
Telemetry [candidate] (7.545 ms) : 0, 7545
section appsec
BytebuddyAgent [baseline] (679.197 ms) : 0, 679197
BytebuddyAgent [candidate] (680.348 ms) : 0, 680348
GlobalTracer [baseline] (300.984 ms) : 0, 300984
GlobalTracer [candidate] (301.438 ms) : 0, 301438
AppSec [baseline] (158.918 ms) : 0, 158918
AppSec [candidate] (161.279 ms) : 0, 161279
Remote Config [baseline] (617.074 µs) : 0, 617
Remote Config [candidate] (622.005 µs) : 0, 622
Telemetry [baseline] (8.468 ms) : 0, 8468
Telemetry [candidate] (7.137 ms) : 0, 7137
IAST [baseline] (18.626 ms) : 0, 18626
IAST [candidate] (18.457 ms) : 0, 18457
section iast
BytebuddyAgent [baseline] (785.653 ms) : 0, 785653
BytebuddyAgent [candidate] (778.153 ms) : 0, 778153
GlobalTracer [baseline] (298.262 ms) : 0, 298262
GlobalTracer [candidate] (296.241 ms) : 0, 296241
AppSec [baseline] (52.428 ms) : 0, 52428
AppSec [candidate] (50.572 ms) : 0, 50572
Remote Config [baseline] (613.532 µs) : 0, 614
Remote Config [candidate] (592.18 µs) : 0, 592
Telemetry [baseline] (8.119 ms) : 0, 8119
Telemetry [candidate] (8.625 ms) : 0, 8625
IAST [baseline] (23.981 ms) : 0, 23981
IAST [candidate] (24.927 ms) : 0, 24927
section profiling
BytebuddyAgent [baseline] (674.308 ms) : 0, 674308
BytebuddyAgent [candidate] (665.384 ms) : 0, 665384
GlobalTracer [baseline] (394.524 ms) : 0, 394524
GlobalTracer [candidate] (389.993 ms) : 0, 389993
AppSec [baseline] (52.91 ms) : 0, 52910
AppSec [candidate] (52.252 ms) : 0, 52252
Remote Config [baseline] (723.043 µs) : 0, 723
Remote Config [candidate] (684.66 µs) : 0, 685
Telemetry [baseline] (7.489 ms) : 0, 7489
Telemetry [candidate] (7.36 ms) : 0, 7360
ProfilingAgent [baseline] (96.978 ms) : 0, 96978
ProfilingAgent [candidate] (95.843 ms) : 0, 95843
Profiling [baseline] (97.001 ms) : 0, 97001
Profiling [candidate] (95.867 ms) : 0, 95867
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 16 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section baseline
no_agent (373.806 µs) : 353, 394
. : milestone, 374,
iast (492.544 µs) : 470, 515
. : milestone, 493,
iast_FULL (552.241 µs) : 531, 573
. : milestone, 552,
iast_GLOBAL (508.984 µs) : 488, 530
. : milestone, 509,
iast_HARDCODED_SECRET_DISABLED (488.551 µs) : 466, 511
. : milestone, 489,
iast_INACTIVE (460.004 µs) : 439, 481
. : milestone, 460,
iast_TELEMETRY_OFF (484.022 µs) : 461, 507
. : milestone, 484,
tracing (454.633 µs) : 434, 475
. : milestone, 455,
section candidate
no_agent (374.404 µs) : 354, 394
. : milestone, 374,
iast (493.049 µs) : 470, 516
. : milestone, 493,
iast_FULL (563.473 µs) : 542, 585
. : milestone, 563,
iast_GLOBAL (516.929 µs) : 495, 539
. : milestone, 517,
iast_HARDCODED_SECRET_DISABLED (491.815 µs) : 470, 514
. : milestone, 492,
iast_INACTIVE (458.596 µs) : 437, 480
. : milestone, 459,
iast_TELEMETRY_OFF (488.255 µs) : 466, 511
. : milestone, 488,
tracing (452.776 µs) : 432, 473
. : milestone, 453,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section baseline
no_agent (1.353 ms) : 1334, 1373
. : milestone, 1353,
appsec (1.737 ms) : 1713, 1761
. : milestone, 1737,
appsec_no_iast (1.731 ms) : 1707, 1756
. : milestone, 1731,
iast (1.476 ms) : 1454, 1499
. : milestone, 1476,
profiling (1.486 ms) : 1463, 1509
. : milestone, 1486,
tracing (1.464 ms) : 1439, 1489
. : milestone, 1464,
section candidate
no_agent (1.369 ms) : 1349, 1389
. : milestone, 1369,
appsec (1.736 ms) : 1712, 1759
. : milestone, 1736,
appsec_no_iast (1.748 ms) : 1724, 1772
. : milestone, 1748,
iast (1.496 ms) : 1473, 1518
. : milestone, 1496,
profiling (1.491 ms) : 1468, 1513
. : milestone, 1491,
tracing (1.468 ms) : 1444, 1492
. : milestone, 1468,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section baseline
no_agent (1.463 ms) : 1452, 1475
. : milestone, 1463,
appsec (2.229 ms) : 2195, 2264
. : milestone, 2229,
iast (1.973 ms) : 1931, 2016
. : milestone, 1973,
iast_GLOBAL (2.031 ms) : 1987, 2074
. : milestone, 2031,
profiling (2.317 ms) : 2135, 2499
. : milestone, 2317,
tracing (1.842 ms) : 1809, 1875
. : milestone, 1842,
section candidate
no_agent (1.464 ms) : 1453, 1476
. : milestone, 1464,
appsec (2.238 ms) : 2202, 2273
. : milestone, 2238,
iast (1.987 ms) : 1943, 2031
. : milestone, 1987,
iast_GLOBAL (2.024 ms) : 1981, 2068
. : milestone, 2024,
profiling (1.867 ms) : 1832, 1902
. : milestone, 1867,
tracing (1.842 ms) : 1809, 1875
. : milestone, 1842,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~3b32ad1f06, baseline=1.39.0-SNAPSHOT~e0a335cbd2
dateFormat X
axisFormat %s
section baseline
no_agent (15.466 s) : 15466000, 15466000
. : milestone, 15466000,
appsec (15.011 s) : 15011000, 15011000
. : milestone, 15011000,
iast (19.005 s) : 19005000, 19005000
. : milestone, 19005000,
iast_GLOBAL (17.91 s) : 17910000, 17910000
. : milestone, 17910000,
profiling (15.784 s) : 15784000, 15784000
. : milestone, 15784000,
tracing (14.962 s) : 14962000, 14962000
. : milestone, 14962000,
section candidate
no_agent (15.359 s) : 15359000, 15359000
. : milestone, 15359000,
appsec (15.414 s) : 15414000, 15414000
. : milestone, 15414000,
iast (18.78 s) : 18780000, 18780000
. : milestone, 18780000,
iast_GLOBAL (17.665 s) : 17665000, 17665000
. : milestone, 17665000,
profiling (15.704 s) : 15704000, 15704000
. : milestone, 15704000,
tracing (14.975 s) : 14975000, 14975000
. : milestone, 14975000,
|
8be4a80 to
04dd0a6
Compare
04dd0a6 to
3b32ad1
Compare
| try { | ||
| int size = unpacker.unpackMapHeader(); | ||
| if (size != 12) { | ||
| if (size != 12 && size != 13) { |
There was a problem hiding this comment.
My bad, I should have added support here when I did the meta struct part, sorry!
Member
Author
There was a problem hiding this comment.
No problem. I noticed only now when we got smoke tests actually generating this.
manuel-alvarez-alvarez
approved these changes
Aug 28, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What Does This Do
Enable
generate_stackWAF action by default. These will only be emitted by RASP (aka Exploit Prevention) at the moment.To support smoke tests, also added support to decode meta_struct in SpanV04.
Motivation
There is little reason for anyone to disable this, except the need to troubleshoot or workaround a bug.
This PR is part of enabling RASP for AppSec users.
Additional Notes
Contributor Checklist
type:and (comp:orinst:) labels in addition to any usefull labelsclose,fixor any linking keywords when referencing an issue.Use
solvesinstead, and assign the PR milestone to the issue[ ] Update the public documentation in case of new configuration flag or behaviorJira ticket: APPSEC-53837 (partially)