Skip to content

Avoid Max call stack size exceeded on vulnerability format#4068

Merged
CarlesDD merged 2 commits into
masterfrom
ccapell/fix-max-call-stacktrace-size-exceeded-vuln-format
Feb 15, 2024
Merged

Avoid Max call stack size exceeded on vulnerability format#4068
CarlesDD merged 2 commits into
masterfrom
ccapell/fix-max-call-stacktrace-size-exceeded-vuln-format

Conversation

@CarlesDD

@CarlesDD CarlesDD commented Feb 15, 2024

Copy link
Copy Markdown
Contributor

What does this PR do?

Avoid RangeError: Maximum call stack size exceeded when formatting vulnerability

Motivation

Do not crash customer application.

Plugin Checklist

Additional Notes

Security

Datadog employees:

  • If this PR touches code that signs or publishes builds or packages, or handles credentials of any kind, I've requested a review from @DataDog/security-design-and-guidance.
  • This PR doesn't touch any of that.

Unsure? Have a question? Request a review!

APPSEC-51769

@github-actions

github-actions Bot commented Feb 15, 2024

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 6.04 MB
Deduped: 61.64 MB
No deduping: 62.4 MB

Dependency sizes

name version self size total size
@datadog/native-iast-taint-tracking 1.6.4 16.43 MB 16.44 MB
@datadog/native-appsec 7.0.0 14.51 MB 14.52 MB
@datadog/pprof 5.0.0 9.59 MB 10.44 MB
protobufjs 7.2.5 2.77 MB 6.56 MB
@datadog/native-iast-rewriter 2.2.3 2.19 MB 2.28 MB
@opentelemetry/core 1.14.0 872.87 kB 1.47 MB
@datadog/native-metrics 2.0.0 898.77 kB 1.3 MB
@opentelemetry/api 1.4.1 780.32 kB 780.32 kB
import-in-the-middle 1.7.3 67.62 kB 731.01 kB
pprof-format 2.0.7 588.12 kB 588.12 kB
msgpack-lite 0.1.26 201.16 kB 281.59 kB
opentracing 0.14.7 194.81 kB 194.81 kB
semver 7.5.4 93.4 kB 123.8 kB
@datadog/sketches-js 2.1.0 109.9 kB 109.9 kB
lodash.sortby 4.7.0 75.76 kB 75.76 kB
lru-cache 7.14.0 74.95 kB 74.95 kB
ipaddr.js 2.1.0 60.23 kB 60.23 kB
ignore 5.2.4 51.22 kB 51.22 kB
int64-buffer 0.1.10 49.18 kB 49.18 kB
shell-quote 1.8.1 44.96 kB 44.96 kB
istanbul-lib-coverage 3.2.0 29.34 kB 29.34 kB
tlhunter-sorted-set 0.1.0 24.94 kB 24.94 kB
limiter 1.1.5 23.17 kB 23.17 kB
dc-polyfill 0.1.4 23.1 kB 23.1 kB
retry 0.13.1 18.85 kB 18.85 kB
node-abort-controller 3.1.1 16.89 kB 16.89 kB
jest-docblock 29.7.0 8.99 kB 12.76 kB
crypto-randomuuid 1.0.0 11.18 kB 11.18 kB
path-to-regexp 0.1.7 6.78 kB 6.78 kB
koalas 1.0.2 6.47 kB 6.47 kB
methods 1.1.2 5.29 kB 5.29 kB
module-details-from-path 1.0.3 4.47 kB 4.47 kB

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov

codecov Bot commented Feb 15, 2024

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (6aa4ab2) 85.34% compared to head (1d9960a) 85.35%.
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #4068   +/-   ##
=======================================
  Coverage   85.34%   85.35%           
=======================================
  Files         243      243           
  Lines       10576    10574    -2     
  Branches       33       33           
=======================================
- Hits         9026     9025    -1     
+ Misses       1550     1549    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@CarlesDD CarlesDD added bug Something isn't working asm-iast semver-patch labels Feb 15, 2024
@pr-commenter

pr-commenter Bot commented Feb 15, 2024

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2024-02-15 16:40:20

Comparing candidate commit 1d9960a in PR branch ccapell/fix-max-call-stacktrace-size-exceeded-vuln-format with baseline commit 6aa4ab2 in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 256 metrics, 10 unstable metrics.

@CarlesDD
CarlesDD marked this pull request as ready for review February 15, 2024 14:37
@CarlesDD
CarlesDD requested a review from a team as a code owner February 15, 2024 14:37
simon-id
simon-id previously approved these changes Feb 15, 2024
iunanua
iunanua previously approved these changes Feb 15, 2024
Comment thread packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js Outdated
@CarlesDD
CarlesDD dismissed stale reviews from iunanua and simon-id via 1d9960a February 15, 2024 16:30
@CarlesDD
CarlesDD merged commit 42daad8 into master Feb 15, 2024
@CarlesDD
CarlesDD deleted the ccapell/fix-max-call-stacktrace-size-exceeded-vuln-format branch February 15, 2024 18:28
CarlesDD added a commit that referenced this pull request Feb 19, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
@CarlesDD CarlesDD mentioned this pull request Feb 19, 2024
CarlesDD added a commit that referenced this pull request Feb 20, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
@CarlesDD CarlesDD mentioned this pull request Feb 20, 2024
CarlesDD added a commit that referenced this pull request Feb 20, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
@CarlesDD CarlesDD mentioned this pull request Feb 20, 2024
CarlesDD added a commit that referenced this pull request Feb 22, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
CarlesDD added a commit that referenced this pull request Feb 22, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
CarlesDD added a commit that referenced this pull request Feb 22, 2024
* Avoid Max call stack size exceeded on vulnerability format

* Update packages/dd-trace/test/appsec/iast/vulnerability-formatter/utils.spec.js

Co-authored-by: Ugaitz Urien <[email protected]>

---------

Co-authored-by: Ugaitz Urien <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

asm-iast bug Something isn't working semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants