🍒 9355 - Fix NullPointerException log in AppSec #9356

jandro996 · 2025-08-12T14:01:33Z

Backport #9355 to release/v1.52.x

What Does This Do Modifies WafModule#buildEvents to safely handle actionWithData.data being null. Motivation Fix #9346 Additional Notes The current version of libddwaf may return null in the data field of actionWithData. This was previously not handled and could cause unexpected logged exceptions. The method now explicitly checks for null to prevent this. (cherry picked from commit ef2e9f0)

datadog-official · 2025-08-12T14:22:42Z

Code coverage: total 53.57%, patch 100.00% (view details)

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 1e4b598 | Docs | Was this helpful? Give us feedback!}

pr-commenter · 2025-08-12T14:35:41Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/backport-pr-9355
git_commit_date	1755006834	1755007177
git_commit_sha	`ef2e9f0`	`1e4b598`
release_version	1.53.0-SNAPSHOT~ef2e9f03e6	1.53.0-SNAPSHOT~1e4b598bd3

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1755009032	1755009032
ci_job_id	1076184451	1076184451
ci_pipeline_id	73418730	73418730
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-brdrg9l3 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-brdrg9l3 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 2 performance improvements and 0 performance regressions! Performance is the same for 47 metrics, 10 unstable metrics.

scenario	Δ mean execution_time	candidate mean execution_time	baseline mean execution_time
scenario:startup:insecure-bank:iast:Telemetry	better [-751.633µs; -180.946µs] or [-8.860%; -2.133%]	8.017ms	8.484ms
scenario:startup:petclinic:appsec:Remote Config	better [-57.991µs; -14.749µs] or [-9.080%; -2.309%]	602.274µs	638.644µs

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.043 s) : 0, 1043020
Total [baseline] (8.56 s) : 0, 8560158
Agent [candidate] (1.043 s) : 0, 1042610
Total [candidate] (8.572 s) : 0, 8571572
section iast
Agent [baseline] (1.183 s) : 0, 1182545
Total [baseline] (9.347 s) : 0, 9346926
Agent [candidate] (1.178 s) : 0, 1177660
Total [candidate] (9.267 s) : 0, 9267287

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.043 s	-
Agent	iast	1.183 s	139.524 ms (13.4%)
Total	tracing	8.56 s	-
Total	iast	9.347 s	786.768 ms (9.2%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.043 s	-
Agent	iast	1.178 s	135.05 ms (13.0%)
Total	tracing	8.572 s	-
Total	iast	9.267 s	695.715 ms (8.1%)

gantt
    title insecure-bank - break down per module: candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.43 ms) : 0, 1430
crashtracking [candidate] (1.428 ms) : 0, 1428
BytebuddyAgent [baseline] (729.7 ms) : 0, 729700
BytebuddyAgent [candidate] (730.976 ms) : 0, 730976
GlobalTracer [baseline] (241.273 ms) : 0, 241273
GlobalTracer [candidate] (241.194 ms) : 0, 241194
AppSec [baseline] (29.79 ms) : 0, 29790
AppSec [candidate] (30.173 ms) : 0, 30173
Debugger [baseline] (6.001 ms) : 0, 6001
Debugger [candidate] (5.982 ms) : 0, 5982
Remote Config [baseline] (659.981 µs) : 0, 660
Remote Config [candidate] (651.158 µs) : 0, 651
Telemetry [baseline] (13.301 ms) : 0, 13301
Telemetry [candidate] (11.258 ms) : 0, 11258
section iast
crashtracking [baseline] (1.429 ms) : 0, 1429
crashtracking [candidate] (1.435 ms) : 0, 1435
BytebuddyAgent [baseline] (854.286 ms) : 0, 854286
BytebuddyAgent [candidate] (852.004 ms) : 0, 852004
GlobalTracer [baseline] (232.877 ms) : 0, 232877
GlobalTracer [candidate] (231.092 ms) : 0, 231092
IAST [baseline] (28.706 ms) : 0, 28706
IAST [candidate] (28.223 ms) : 0, 28223
AppSec [baseline] (28.566 ms) : 0, 28566
AppSec [candidate] (26.792 ms) : 0, 26792
Debugger [baseline] (6.584 ms) : 0, 6584
Debugger [candidate] (8.468 ms) : 0, 8468
Remote Config [baseline] (589.138 µs) : 0, 589
Remote Config [candidate] (577.446 µs) : 0, 577
Telemetry [baseline] (8.484 ms) : 0, 8484
Telemetry [candidate] (8.017 ms) : 0, 8017

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.049 s) : 0, 1048944
Total [baseline] (10.694 s) : 0, 10694099
Agent [candidate] (1.045 s) : 0, 1045329
Total [candidate] (10.659 s) : 0, 10659047
section appsec
Agent [baseline] (1.218 s) : 0, 1218342
Total [baseline] (10.737 s) : 0, 10736783
Agent [candidate] (1.22 s) : 0, 1220243
Total [candidate] (10.729 s) : 0, 10729241
section iast
Agent [baseline] (1.183 s) : 0, 1182866
Total [baseline] (10.971 s) : 0, 10970803
Agent [candidate] (1.175 s) : 0, 1175375
Total [candidate] (10.856 s) : 0, 10856226
section profiling
Agent [baseline] (1.2 s) : 0, 1200225
Total [baseline] (10.913 s) : 0, 10912501
Agent [candidate] (1.193 s) : 0, 1193134
Total [candidate] (10.948 s) : 0, 10948389

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	appsec	1.218 s	169.398 ms (16.1%)
Agent	iast	1.183 s	133.922 ms (12.8%)
Agent	profiling	1.2 s	151.281 ms (14.4%)
Total	tracing	10.694 s	-
Total	appsec	10.737 s	42.684 ms (0.4%)
Total	iast	10.971 s	276.704 ms (2.6%)
Total	profiling	10.913 s	218.402 ms (2.0%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.045 s	-
Agent	appsec	1.22 s	174.914 ms (16.7%)
Agent	iast	1.175 s	130.046 ms (12.4%)
Agent	profiling	1.193 s	147.805 ms (14.1%)
Total	tracing	10.659 s	-
Total	appsec	10.729 s	70.194 ms (0.7%)
Total	iast	10.856 s	197.179 ms (1.8%)
Total	profiling	10.948 s	289.342 ms (2.7%)

gantt
    title petclinic - break down per module: candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.436 ms) : 0, 1436
crashtracking [candidate] (1.428 ms) : 0, 1428
BytebuddyAgent [baseline] (734.36 ms) : 0, 734360
BytebuddyAgent [candidate] (731.07 ms) : 0, 731070
GlobalTracer [baseline] (243.156 ms) : 0, 243156
GlobalTracer [candidate] (241.212 ms) : 0, 241212
AppSec [baseline] (30.202 ms) : 0, 30202
AppSec [candidate] (30.007 ms) : 0, 30007
Debugger [baseline] (6.027 ms) : 0, 6027
Debugger [candidate] (6.075 ms) : 0, 6075
Remote Config [baseline] (666.058 µs) : 0, 666
Remote Config [candidate] (650.432 µs) : 0, 650
Telemetry [baseline] (12.105 ms) : 0, 12105
Telemetry [candidate] (13.935 ms) : 0, 13935
section appsec
crashtracking [baseline] (1.437 ms) : 0, 1437
crashtracking [candidate] (1.438 ms) : 0, 1438
BytebuddyAgent [baseline] (752.476 ms) : 0, 752476
BytebuddyAgent [candidate] (754.376 ms) : 0, 754376
GlobalTracer [baseline] (234.492 ms) : 0, 234492
GlobalTracer [candidate] (235.024 ms) : 0, 235024
IAST [baseline] (23.489 ms) : 0, 23489
IAST [candidate] (23.531 ms) : 0, 23531
AppSec [baseline] (168.36 ms) : 0, 168360
AppSec [candidate] (169.49 ms) : 0, 169490
Debugger [baseline] (5.759 ms) : 0, 5759
Debugger [candidate] (6.479 ms) : 0, 6479
Remote Config [baseline] (638.644 µs) : 0, 639
Remote Config [candidate] (602.274 µs) : 0, 602
Telemetry [baseline] (10.701 ms) : 0, 10701
Telemetry [candidate] (8.276 ms) : 0, 8276
section iast
crashtracking [baseline] (1.429 ms) : 0, 1429
crashtracking [candidate] (1.453 ms) : 0, 1453
BytebuddyAgent [baseline] (854.289 ms) : 0, 854289
BytebuddyAgent [candidate] (849.039 ms) : 0, 849039
GlobalTracer [baseline] (233.287 ms) : 0, 233287
GlobalTracer [candidate] (232.016 ms) : 0, 232016
IAST [baseline] (27.962 ms) : 0, 27962
IAST [candidate] (31.343 ms) : 0, 31343
AppSec [baseline] (28.458 ms) : 0, 28458
AppSec [candidate] (25.325 ms) : 0, 25325
Debugger [baseline] (7.378 ms) : 0, 7378
Debugger [candidate] (6.616 ms) : 0, 6616
Remote Config [baseline] (586.188 µs) : 0, 586
Remote Config [candidate] (592.159 µs) : 0, 592
Telemetry [baseline] (8.378 ms) : 0, 8378
Telemetry [candidate] (8.053 ms) : 0, 8053
section profiling
crashtracking [baseline] (1.412 ms) : 0, 1412
crashtracking [candidate] (1.401 ms) : 0, 1401
BytebuddyAgent [baseline] (765.001 ms) : 0, 765001
BytebuddyAgent [candidate] (757.944 ms) : 0, 757944
GlobalTracer [baseline] (222.543 ms) : 0, 222543
GlobalTracer [candidate] (222.339 ms) : 0, 222339
AppSec [baseline] (30.176 ms) : 0, 30176
AppSec [candidate] (30.287 ms) : 0, 30287
Debugger [baseline] (6.369 ms) : 0, 6369
Debugger [candidate] (6.354 ms) : 0, 6354
Remote Config [baseline] (676.248 µs) : 0, 676
Remote Config [candidate] (690.296 µs) : 0, 690
Telemetry [baseline] (16.11 ms) : 0, 16110
Telemetry [candidate] (15.938 ms) : 0, 15938
ProfilingAgent [baseline] (108.167 ms) : 0, 108167
ProfilingAgent [candidate] (108.695 ms) : 0, 108695
Profiling [baseline] (108.822 ms) : 0, 108822
Profiling [candidate] (109.345 ms) : 0, 109345

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/backport-pr-9355
git_commit_date	1755006834	1755007177
git_commit_sha	`ef2e9f0`	`1e4b598`
release_version	1.53.0-SNAPSHOT~ef2e9f03e6	1.53.0-SNAPSHOT~1e4b598bd3

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1755008716	1755008716
ci_job_id	1076184452	1076184452
ci_pipeline_id	73418730	73418730
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-l3d7pjoz 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-l3d7pjoz 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 2 performance improvements and 3 performance regressions! Performance is the same for 7 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:petclinic:iast:high_load	better [-2.379ms; -1.519ms] or [-5.090%; -3.250%]	unstable [-2.891op/s; +11.566op/s] or [-2.888%; +11.555%]	44.789ms	104.425op/s	46.738ms	100.088op/s
scenario:load:petclinic:no_agent:high_load	worse [+1.870ms; +2.507ms] or [+5.213%; +6.989%]	unstable [-16.041op/s; +1.091op/s] or [-12.307%; +0.837%]	38.054ms	122.862op/s	35.866ms	130.338op/s
scenario:load:petclinic:appsec:high_load	worse [+2.037ms; +2.901ms] or [+4.578%; +6.517%]	unstable [-12.900op/s; +1.825op/s] or [-12.271%; +1.736%]	46.974ms	99.588op/s	44.505ms	105.125op/s
scenario:load:petclinic:code_origins:high_load	better [-2.508ms; -1.681ms] or [-5.405%; -3.622%]	unstable [-2.261op/s; +11.811op/s] or [-2.242%; +11.713%]	44.310ms	105.612op/s	46.405ms	100.838op/s
scenario:load:petclinic:tracing:high_load	worse [+2.331ms; +3.180ms] or [+5.205%; +7.101%]	unstable [-13.286op/s; +1.236op/s] or [-12.717%; +1.183%]	47.529ms	98.450op/s	44.774ms	104.475op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.323 ms) : 4272, 4375
.   : milestone, 4323,
iast (9.277 ms) : 9124, 9429
.   : milestone, 9277,
iast_FULL (14.27 ms) : 13979, 14561
.   : milestone, 14270,
iast_GLOBAL (10.153 ms) : 9976, 10330
.   : milestone, 10153,
profiling (8.878 ms) : 8738, 9018
.   : milestone, 8878,
tracing (7.358 ms) : 7255, 7462
.   : milestone, 7358,
section candidate
no_agent (4.346 ms) : 4290, 4402
.   : milestone, 4346,
iast (9.488 ms) : 9326, 9651
.   : milestone, 9488,
iast_FULL (13.975 ms) : 13698, 14252
.   : milestone, 13975,
iast_GLOBAL (10.058 ms) : 9878, 10239
.   : milestone, 10058,
profiling (8.691 ms) : 8554, 8828
.   : milestone, 8691,
tracing (7.402 ms) : 7287, 7517
.   : milestone, 7402,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.323 ms [4.272 ms, 4.375 ms]	-
iast	9.277 ms [9.124 ms, 9.429 ms]	4.953 ms (114.6%)
iast_FULL	14.27 ms [13.979 ms, 14.561 ms]	9.947 ms (230.1%)
iast_GLOBAL	10.153 ms [9.976 ms, 10.33 ms]	5.83 ms (134.9%)
profiling	8.878 ms [8.738 ms, 9.018 ms]	4.555 ms (105.4%)
tracing	7.358 ms [7.255 ms, 7.462 ms]	3.035 ms (70.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.346 ms [4.29 ms, 4.402 ms]	-
iast	9.488 ms [9.326 ms, 9.651 ms]	5.142 ms (118.3%)
iast_FULL	13.975 ms [13.698 ms, 14.252 ms]	9.629 ms (221.6%)
iast_GLOBAL	10.058 ms [9.878 ms, 10.239 ms]	5.712 ms (131.4%)
profiling	8.691 ms [8.554 ms, 8.828 ms]	4.345 ms (100.0%)
tracing	7.402 ms [7.287 ms, 7.517 ms]	3.056 ms (70.3%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6
    dateFormat X
    axisFormat %s
section baseline
no_agent (35.866 ms) : 35575, 36157
.   : milestone, 35866,
appsec (44.505 ms) : 44119, 44892
.   : milestone, 44505,
code_origins (46.405 ms) : 45997, 46812
.   : milestone, 46405,
iast (46.738 ms) : 46331, 47145
.   : milestone, 46738,
profiling (47.689 ms) : 47251, 48127
.   : milestone, 47689,
tracing (44.774 ms) : 44408, 45140
.   : milestone, 44774,
section candidate
no_agent (38.054 ms) : 37753, 38355
.   : milestone, 38054,
appsec (46.974 ms) : 46559, 47390
.   : milestone, 46974,
code_origins (44.31 ms) : 43951, 44670
.   : milestone, 44310,
iast (44.789 ms) : 44397, 45181
.   : milestone, 44789,
profiling (46.508 ms) : 46069, 46947
.   : milestone, 46508,
tracing (47.529 ms) : 47108, 47950
.   : milestone, 47529,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	35.866 ms [35.575 ms, 36.157 ms]	-
appsec	44.505 ms [44.119 ms, 44.892 ms]	8.639 ms (24.1%)
code_origins	46.405 ms [45.997 ms, 46.812 ms]	10.539 ms (29.4%)
iast	46.738 ms [46.331 ms, 47.145 ms]	10.872 ms (30.3%)
profiling	47.689 ms [47.251 ms, 48.127 ms]	11.823 ms (33.0%)
tracing	44.774 ms [44.408 ms, 45.14 ms]	8.908 ms (24.8%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	38.054 ms [37.753 ms, 38.355 ms]	-
appsec	46.974 ms [46.559 ms, 47.39 ms]	8.92 ms (23.4%)
code_origins	44.31 ms [43.951 ms, 44.67 ms]	6.256 ms (16.4%)
iast	44.789 ms [44.397 ms, 45.181 ms]	6.735 ms (17.7%)
profiling	46.508 ms [46.069 ms, 46.947 ms]	8.454 ms (22.2%)
tracing	47.529 ms [47.108 ms, 47.95 ms]	9.475 ms (24.9%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/backport-pr-9355
git_commit_date	1755006834	1755007177
git_commit_sha	`ef2e9f0`	`1e4b598`
release_version	1.53.0-SNAPSHOT~ef2e9f03e6	1.53.0-SNAPSHOT~1e4b598bd3

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1755009242	1755009242
ci_job_id	1076184453	1076184453
ci_pipeline_id	73418730	73418730
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-buy0ntov 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-buy0ntov 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.482 ms) : 1471, 1494
.   : milestone, 1482,
appsec (3.71 ms) : 3492, 3928
.   : milestone, 3710,
iast (2.225 ms) : 2162, 2288
.   : milestone, 2225,
iast_GLOBAL (2.264 ms) : 2201, 2328
.   : milestone, 2264,
profiling (2.071 ms) : 2019, 2123
.   : milestone, 2071,
tracing (2.03 ms) : 1981, 2079
.   : milestone, 2030,
section candidate
no_agent (1.484 ms) : 1472, 1495
.   : milestone, 1484,
appsec (3.684 ms) : 3467, 3900
.   : milestone, 3684,
iast (2.22 ms) : 2157, 2283
.   : milestone, 2220,
iast_GLOBAL (2.265 ms) : 2201, 2328
.   : milestone, 2265,
profiling (2.063 ms) : 2012, 2114
.   : milestone, 2063,
tracing (2.033 ms) : 1985, 2082
.   : milestone, 2033,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.482 ms [1.471 ms, 1.494 ms]	-
appsec	3.71 ms [3.492 ms, 3.928 ms]	2.228 ms (150.3%)
iast	2.225 ms [2.162 ms, 2.288 ms]	742.555 µs (50.1%)
iast_GLOBAL	2.264 ms [2.201 ms, 2.328 ms]	781.819 µs (52.7%)
profiling	2.071 ms [2.019 ms, 2.123 ms]	589.053 µs (39.7%)
tracing	2.03 ms [1.981 ms, 2.079 ms]	547.286 µs (36.9%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.484 ms [1.472 ms, 1.495 ms]	-
appsec	3.684 ms [3.467 ms, 3.9 ms]	2.2 ms (148.3%)
iast	2.22 ms [2.157 ms, 2.283 ms]	736.218 µs (49.6%)
iast_GLOBAL	2.265 ms [2.201 ms, 2.328 ms]	780.878 µs (52.6%)
profiling	2.063 ms [2.012 ms, 2.114 ms]	579.474 µs (39.1%)
tracing	2.033 ms [1.985 ms, 2.082 ms]	549.736 µs (37.1%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~1e4b598bd3, baseline=1.53.0-SNAPSHOT~ef2e9f03e6
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.607 s) : 15607000, 15607000
.   : milestone, 15607000,
appsec (14.913 s) : 14913000, 14913000
.   : milestone, 14913000,
iast (18.383 s) : 18383000, 18383000
.   : milestone, 18383000,
iast_GLOBAL (18.128 s) : 18128000, 18128000
.   : milestone, 18128000,
profiling (15.531 s) : 15531000, 15531000
.   : milestone, 15531000,
tracing (15.012 s) : 15012000, 15012000
.   : milestone, 15012000,
section candidate
no_agent (15.546 s) : 15546000, 15546000
.   : milestone, 15546000,
appsec (14.74 s) : 14740000, 14740000
.   : milestone, 14740000,
iast (18.606 s) : 18606000, 18606000
.   : milestone, 18606000,
iast_GLOBAL (18.138 s) : 18138000, 18138000
.   : milestone, 18138000,
profiling (15.246 s) : 15246000, 15246000
.   : milestone, 15246000,
tracing (15.08 s) : 15080000, 15080000
.   : milestone, 15080000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.607 s [15.607 s, 15.607 s]	-
appsec	14.913 s [14.913 s, 14.913 s]	-694.0 ms (-4.4%)
iast	18.383 s [18.383 s, 18.383 s]	2.776 s (17.8%)
iast_GLOBAL	18.128 s [18.128 s, 18.128 s]	2.521 s (16.2%)
profiling	15.531 s [15.531 s, 15.531 s]	-76.0 ms (-0.5%)
tracing	15.012 s [15.012 s, 15.012 s]	-595.0 ms (-3.8%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.546 s [15.546 s, 15.546 s]	-
appsec	14.74 s [14.74 s, 14.74 s]	-806.0 ms (-5.2%)
iast	18.606 s [18.606 s, 18.606 s]	3.06 s (19.7%)
iast_GLOBAL	18.138 s [18.138 s, 18.138 s]	2.592 s (16.7%)
profiling	15.246 s [15.246 s, 15.246 s]	-300.0 ms (-1.9%)
tracing	15.08 s [15.08 s, 15.08 s]	-466.0 ms (-3.0%)

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [org.mockito:mockito-core](https://github.com/mockito/mockito) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `5.18.0` -> `5.19.0` | | [com.google.api-client:google-api-client](https://github.com/googleapis/google-api-java-client) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.8.0` -> `2.8.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.52.0` -> `1.52.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:regions](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | --- ### Release Notes <details> <summary>mockito/mockito (org.mockito:mockito-core)</summary> ### [`v5.19.0`](https://github.com/mockito/mockito/releases/tag/v5.19.0) <sup><sup>*Changelog generated by [Shipkit Changelog Gradle Plugin](https://github.com/shipkit/shipkit-changelog)*</sup></sup> ##### 5.19.0 - 2025-08-15 - [37 commit(s)](mockito/mockito@v5.18.0...v5.19.0) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot\[bot], juyeop - feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708) - Bump actions/checkout from 4 to 5 [(#3707)](mockito/mockito#3707) - build: Allow overriding 'Created-By' for reproducible builds [(#3704)](mockito/mockito#3704) - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 [(#3703)](mockito/mockito#3703) - Bump androidx.test:runner from 1.6.2 to 1.7.0 [(#3697)](mockito/mockito#3697) - Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 [(#3694)](mockito/mockito#3694) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 [(#3693)](mockito/mockito#3693) - Bump junit-jupiter from 5.13.3 to 5.13.4 [(#3691)](mockito/mockito#3691) - Bump com.gradle.develocity from 4.0.2 to 4.1 [(#3689)](mockito/mockito#3689) - Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 [(#3688)](mockito/mockito#3688) - Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 [(#3686)](mockito/mockito#3686) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 [(#3685)](mockito/mockito#3685) - Bump junit-jupiter from 5.13.2 to 5.13.3 [(#3684)](mockito/mockito#3684) - Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 [(#3683)](mockito/mockito#3683) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 [(#3682)](mockito/mockito#3682) - Only run release after both Java and Android tests have finished [(#3681)](mockito/mockito#3681) - Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 [(#3680)](mockito/mockito#3680) - Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 [(#3679)](mockito/mockito#3679) - Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 [(#3678)](mockito/mockito#3678) - Can no longer publish snapshot releases [(#3677)](mockito/mockito#3677) - Update Gradle to 8.14.2 [(#3676)](mockito/mockito#3676) - Bump errorprone from 2.23.0 to 2.39.0 [(#3674)](mockito/mockito#3674) - Correct Junit docs link [(#3672)](mockito/mockito#3672) - Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 [(#3670)](mockito/mockito#3670) - Bump junit-jupiter from 5.13.1 to 5.13.2 [(#3669)](mockito/mockito#3669) - Bump bytebuddy from 1.17.5 to 1.17.6 [(#3668)](mockito/mockito#3668) - Bump junit-jupiter from 5.12.2 to 5.13.1 [(#3666)](mockito/mockito#3666) - Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.21 to 2.2.0 [(#3665)](mockito/mockito#3665) - Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 1.0.0 [(#3661)](mockito/mockito#3661) - Bump org.junit.platform:junit-platform-launcher from 1.11.4 to 1.12.2 [(#3660)](mockito/mockito#3660) - Add JDK21 sequenced collections for ReturnsEmptyValues [(#3659)](mockito/mockito#3659) - Bump com.gradle.develocity from 3.19.1 to 4.0.2 [(#3658)](mockito/mockito#3658) - Bump ru.vyarus:gradle-animalsniffer-plugin from 1.7.2 to 2.0.1 [(#3657)](mockito/mockito#3657) - Bump org.eclipse.platform:org.eclipse.osgi from 3.22.0 to 3.23.0 [(#3656)](mockito/mockito#3656) - Bump org.codehaus.groovy:groovy from 3.0.23 to 3.0.24 [(#3655)](mockito/mockito#3655) - Bump junit-jupiter from 5.11.4 to 5.12.2 [(#3653)](mockito/mockito#3653) - Reproducible Build: need to inject JDK distribution details to rebuild [(#3563)](mockito/mockito#3563) </details> <details> <summary>googleapis/google-api-java-client (com.google.api-client:google-api-client)</summary> ### [`v2.8.1`](https://github.com/googleapis/google-api-java-client/blob/HEAD/CHANGELOG.md#281-2025-08-14) ##### Bug Fixes - **deps:** Update project.http.version to v2 ([#2598](googleapis/google-api-java-client#2598)) ([4874da1](googleapis/google-api-java-client@4874da1)) </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.52.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.52.1): 1.52.1 ### Components #### Application Security Management (WAF) - 🐛 Fix NullPointerException log in AppSec ([#9356](DataDog/dd-trace-java#9356) - [@jandro996](https://github.com/jandro996)) #### Continuous Integration Visibility - ✨⚡ Do not follow symlinks by default when building repository index ([#9322](DataDog/dd-trace-java#9322) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) #### GraalVM native-image - 🐛 Update GraalVM config to reflect TempLocationManager's new package ([#9338](DataDog/dd-trace-java#9338) - [@luneo7](https://github.com/luneo7) - thanks for the contribution!) #### Profiling - 🐛 Properly handle trace agent IPv6 URL in profiling ([#9339](DataDog/dd-trace-java#9339) - [@jbachorik](https://github.com/jbachorik)) #### Realtime User Monitoring - ✨ Support async servlet for RUM injection ([#9343](DataDog/dd-trace-java#9343) - [@amarziali](https://github.com/amarziali)) - 🐛 Improve RUM injection matching and avoid truncating responses ([#9342](DataDog/dd-trace-java#9342) - [@amarziali](https://github.com/amarziali)) - ✨ Make rum injector stream/writer more resilient to errors ([#9340](DataDog/dd-trace-java#9340) - [@amarziali](https://github.com/amarziali)) #### Tracer core - 🐛 Avoid NPE on featureDiscovery creation ([#9354](DataDog/dd-trace-java#9354) - [@amarziali](https://github.com/amarziali)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 74bf02ba96add7578dbd1f225449c2f86de0c99d

jandro996 requested a review from a team as a code owner August 12, 2025 14:01

jandro996 requested a review from smola August 12, 2025 14:01

jandro996 added the type: bug Bug report and fix label Aug 12, 2025

jandro996 requested a review from robertpi August 12, 2025 14:01

jandro996 added the comp: asm waf Application Security Management (WAF) label Aug 12, 2025

jandro996 requested review from PerfectSlayer and amarziali August 12, 2025 14:03

amarziali approved these changes Aug 12, 2025

View reviewed changes

jandro996 enabled auto-merge (squash) August 12, 2025 14:06

jandro996 disabled auto-merge August 12, 2025 14:06

jandro996 enabled auto-merge (squash) August 12, 2025 14:07

jandro996 merged commit 8777b20 into release/v1.52.x Aug 12, 2025
506 checks passed

jandro996 deleted the alejandro.gonzalez/backport-pr-9355 branch August 12, 2025 14:49

github-actions bot added this to the 1.52.1 milestone Aug 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🍒 9355 - Fix NullPointerException log in AppSec #9356

🍒 9355 - Fix NullPointerException log in AppSec #9356

Uh oh!

jandro996 commented Aug 12, 2025 •

edited

Loading

Uh oh!

datadog-official bot commented Aug 12, 2025 •

edited by datadog-datadog-prod-us1 bot

Loading

Uh oh!

pr-commenter bot commented Aug 12, 2025

Uh oh!

Uh oh!

Uh oh!

🍒 9355 - Fix NullPointerException log in AppSec #9356

🍒 9355 - Fix NullPointerException log in AppSec #9356

Uh oh!

Conversation

jandro996 commented Aug 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

datadog-official bot commented Aug 12, 2025 • edited by datadog-datadog-prod-us1 bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pr-commenter bot commented Aug 12, 2025

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Uh oh!

Uh oh!

jandro996 commented Aug 12, 2025 •

edited

Loading

datadog-official bot commented Aug 12, 2025 •

edited by datadog-datadog-prod-us1 bot

Loading