Increase IAST propagation to StringBuffer setLength #8128

Mariovido · 2024-12-23T09:59:38Z

What Does This Do

This adds the instrumentation to propagate the taint values through the following methods of StringBuffer:

setLength(int)

Motivation

Increase propagation of StringBuffer methods.

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-55367

…intedobjects

pr-commenter · 2024-12-23T10:39:42Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	`46b5986`	`d78ac81`
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1734952281	1734952281
ci_job_id	748074444	748074444
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 58 metrics, 5 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1050402
Total [baseline] (10.368 s) : 0, 10367852
Agent [candidate] (1.053 s) : 0, 1053111
Total [candidate] (10.361 s) : 0, 10360510
section appsec
Agent [baseline] (1.191 s) : 0, 1191104
Total [baseline] (10.743 s) : 0, 10742705
Agent [candidate] (1.187 s) : 0, 1186673
Total [candidate] (10.717 s) : 0, 10717075
section iast
Agent [baseline] (1.177 s) : 0, 1176890
Total [baseline] (10.965 s) : 0, 10964589
Agent [candidate] (1.186 s) : 0, 1186293
Total [candidate] (11.039 s) : 0, 11038879
section profiling
Agent [baseline] (1.274 s) : 0, 1273820
Total [baseline] (10.803 s) : 0, 10802862
Agent [candidate] (1.28 s) : 0, 1279993
Total [candidate] (10.823 s) : 0, 10823012

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.05 s	-
Agent	appsec	1.191 s	140.703 ms (13.4%)
Agent	iast	1.177 s	126.489 ms (12.0%)
Agent	profiling	1.274 s	223.418 ms (21.3%)
Total	tracing	10.368 s	-
Total	appsec	10.743 s	374.853 ms (3.6%)
Total	iast	10.965 s	596.737 ms (5.8%)
Total	profiling	10.803 s	435.01 ms (4.2%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.053 s	-
Agent	appsec	1.187 s	133.562 ms (12.7%)
Agent	iast	1.186 s	133.183 ms (12.6%)
Agent	profiling	1.28 s	226.882 ms (21.5%)
Total	tracing	10.361 s	-
Total	appsec	10.717 s	356.565 ms (3.4%)
Total	iast	11.039 s	678.368 ms (6.5%)
Total	profiling	10.823 s	462.502 ms (4.5%)

gantt
    title petclinic - break down per module: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (710.707 ms) : 0, 710707
BytebuddyAgent [candidate] (711.834 ms) : 0, 711834
GlobalTracer [baseline] (254.947 ms) : 0, 254947
GlobalTracer [candidate] (255.864 ms) : 0, 255864
AppSec [baseline] (57.137 ms) : 0, 57137
AppSec [candidate] (58.601 ms) : 0, 58601
Remote Config [baseline] (698.023 µs) : 0, 698
Remote Config [candidate] (686.877 µs) : 0, 687
Telemetry [baseline] (12.024 ms) : 0, 12024
Telemetry [candidate] (11.111 ms) : 0, 11111
section appsec
BytebuddyAgent [baseline] (732.878 ms) : 0, 732878
BytebuddyAgent [candidate] (729.997 ms) : 0, 729997
GlobalTracer [baseline] (253.282 ms) : 0, 253282
GlobalTracer [candidate] (252.793 ms) : 0, 252793
AppSec [baseline] (171.659 ms) : 0, 171659
AppSec [candidate] (170.241 ms) : 0, 170241
Remote Config [baseline] (672.252 µs) : 0, 672
Remote Config [candidate] (655.681 µs) : 0, 656
Telemetry [baseline] (8.034 ms) : 0, 8034
Telemetry [candidate] (8.299 ms) : 0, 8299
IAST [baseline] (19.274 ms) : 0, 19274
IAST [candidate] (19.439 ms) : 0, 19439
section iast
BytebuddyAgent [baseline] (826.518 ms) : 0, 826518
BytebuddyAgent [candidate] (835.255 ms) : 0, 835255
GlobalTracer [baseline] (246.85 ms) : 0, 246850
GlobalTracer [candidate] (247.767 ms) : 0, 247767
AppSec [baseline] (58.032 ms) : 0, 58032
AppSec [candidate] (57.917 ms) : 0, 57917
Remote Config [baseline] (669.259 µs) : 0, 669
Remote Config [candidate] (661.021 µs) : 0, 661
Telemetry [baseline] (8.471 ms) : 0, 8471
Telemetry [candidate] (8.501 ms) : 0, 8501
IAST [baseline] (21.471 ms) : 0, 21471
IAST [candidate] (21.153 ms) : 0, 21153
section profiling
BytebuddyAgent [baseline] (702.878 ms) : 0, 702878
BytebuddyAgent [candidate] (705.363 ms) : 0, 705363
GlobalTracer [baseline] (370.953 ms) : 0, 370953
GlobalTracer [candidate] (373.269 ms) : 0, 373269
AppSec [baseline] (54.211 ms) : 0, 54211
AppSec [candidate] (54.539 ms) : 0, 54539
Remote Config [baseline] (663.866 µs) : 0, 664
Remote Config [candidate] (658.251 µs) : 0, 658
Telemetry [baseline] (7.884 ms) : 0, 7884
Telemetry [candidate] (8.016 ms) : 0, 8016
ProfilingAgent [baseline] (95.39 ms) : 0, 95390
ProfilingAgent [candidate] (96.159 ms) : 0, 96159
Profiling [baseline] (95.414 ms) : 0, 95414
Profiling [candidate] (96.182 ms) : 0, 96182

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1050017
Total [baseline] (8.582 s) : 0, 8582077
Agent [candidate] (1.049 s) : 0, 1048806
Total [candidate] (8.6 s) : 0, 8599743
section iast
Agent [baseline] (1.189 s) : 0, 1189203
Total [baseline] (9.21 s) : 0, 9209878
Agent [candidate] (1.179 s) : 0, 1179449
Total [candidate] (9.169 s) : 0, 9169245
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.175 s) : 0, 1175215
Total [baseline] (9.189 s) : 0, 9188520
Agent [candidate] (1.177 s) : 0, 1177021
Total [candidate] (9.192 s) : 0, 9191664
section iast_TELEMETRY_OFF
Agent [baseline] (1.17 s) : 0, 1170284
Total [baseline] (9.148 s) : 0, 9148332
Agent [candidate] (1.174 s) : 0, 1173981
Total [candidate] (9.172 s) : 0, 9171739

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.05 s	-
Agent	iast	1.189 s	139.187 ms (13.3%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.175 s	125.199 ms (11.9%)
Agent	iast_TELEMETRY_OFF	1.17 s	120.267 ms (11.5%)
Total	tracing	8.582 s	-
Total	iast	9.21 s	627.801 ms (7.3%)
Total	iast_HARDCODED_SECRET_DISABLED	9.189 s	606.443 ms (7.1%)
Total	iast_TELEMETRY_OFF	9.148 s	566.255 ms (6.6%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	iast	1.179 s	130.643 ms (12.5%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.177 s	128.215 ms (12.2%)
Agent	iast_TELEMETRY_OFF	1.174 s	125.175 ms (11.9%)
Total	tracing	8.6 s	-
Total	iast	9.169 s	569.502 ms (6.6%)
Total	iast_HARDCODED_SECRET_DISABLED	9.192 s	591.92 ms (6.9%)
Total	iast_TELEMETRY_OFF	9.172 s	571.996 ms (6.7%)

gantt
    title insecure-bank - break down per module: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (709.545 ms) : 0, 709545
BytebuddyAgent [candidate] (709.939 ms) : 0, 709939
GlobalTracer [baseline] (255.721 ms) : 0, 255721
GlobalTracer [candidate] (255.742 ms) : 0, 255742
AppSec [baseline] (58.32 ms) : 0, 58320
AppSec [candidate] (56.332 ms) : 0, 56332
Remote Config [baseline] (690.616 µs) : 0, 691
Remote Config [candidate] (683.038 µs) : 0, 683
Telemetry [baseline] (10.941 ms) : 0, 10941
Telemetry [candidate] (11.169 ms) : 0, 11169
section iast
BytebuddyAgent [baseline] (838.795 ms) : 0, 838795
BytebuddyAgent [candidate] (831.279 ms) : 0, 831279
GlobalTracer [baseline] (247.128 ms) : 0, 247128
GlobalTracer [candidate] (245.183 ms) : 0, 245183
AppSec [baseline] (57.581 ms) : 0, 57581
AppSec [candidate] (57.779 ms) : 0, 57779
Remote Config [baseline] (667.93 µs) : 0, 668
Remote Config [candidate] (641.303 µs) : 0, 641
Telemetry [baseline] (8.567 ms) : 0, 8567
Telemetry [candidate] (8.529 ms) : 0, 8529
IAST [baseline] (21.357 ms) : 0, 21357
IAST [candidate] (21.036 ms) : 0, 21036
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (826.318 ms) : 0, 826318
BytebuddyAgent [candidate] (827.599 ms) : 0, 827599
GlobalTracer [baseline] (245.826 ms) : 0, 245826
GlobalTracer [candidate] (246.299 ms) : 0, 246299
AppSec [baseline] (58.014 ms) : 0, 58014
AppSec [candidate] (57.87 ms) : 0, 57870
Remote Config [baseline] (656.345 µs) : 0, 656
Remote Config [candidate] (651.062 µs) : 0, 651
Telemetry [baseline] (8.407 ms) : 0, 8407
Telemetry [candidate] (8.484 ms) : 0, 8484
IAST [baseline] (21.178 ms) : 0, 21178
IAST [candidate] (21.155 ms) : 0, 21155
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (822.86 ms) : 0, 822860
BytebuddyAgent [candidate] (825.316 ms) : 0, 825316
GlobalTracer [baseline] (245.528 ms) : 0, 245528
GlobalTracer [candidate] (246.316 ms) : 0, 246316
AppSec [baseline] (57.406 ms) : 0, 57406
AppSec [candidate] (57.726 ms) : 0, 57726
Remote Config [baseline] (652.251 µs) : 0, 652
Remote Config [candidate] (635.749 µs) : 0, 636
Telemetry [baseline] (8.345 ms) : 0, 8345
Telemetry [candidate] (8.254 ms) : 0, 8254
IAST [baseline] (20.688 ms) : 0, 20688
IAST [candidate] (20.781 ms) : 0, 20781

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2024-12-23T10:42:03	2024-12-23T10:49:01
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	`46b5986`	`d78ac81`
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020
start_time	2024-12-23T10:41:50	2024-12-23T10:48:47

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1734951293	1734951293
ci_job_id	748074445	748074445
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics.

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (381.373 µs) : 361, 402
.   : milestone, 381,
iast (487.826 µs) : 466, 509
.   : milestone, 488,
iast_FULL (655.098 µs) : 633, 677
.   : milestone, 655,
iast_GLOBAL (516.08 µs) : 495, 537
.   : milestone, 516,
iast_HARDCODED_SECRET_DISABLED (495.311 µs) : 474, 517
.   : milestone, 495,
iast_INACTIVE (454.309 µs) : 433, 475
.   : milestone, 454,
iast_TELEMETRY_OFF (479.888 µs) : 458, 502
.   : milestone, 480,
tracing (447.789 µs) : 427, 469
.   : milestone, 448,
section candidate
no_agent (369.931 µs) : 350, 390
.   : milestone, 370,
iast (489.923 µs) : 468, 511
.   : milestone, 490,
iast_FULL (654.2 µs) : 632, 676
.   : milestone, 654,
iast_GLOBAL (519.696 µs) : 498, 541
.   : milestone, 520,
iast_HARDCODED_SECRET_DISABLED (500.995 µs) : 479, 523
.   : milestone, 501,
iast_INACTIVE (451.809 µs) : 431, 473
.   : milestone, 452,
iast_TELEMETRY_OFF (485.006 µs) : 464, 506
.   : milestone, 485,
tracing (444.859 µs) : 423, 467
.   : milestone, 445,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	381.373 µs [360.909 µs, 401.837 µs]	-
iast	487.826 µs [466.485 µs, 509.167 µs]	106.453 µs (27.9%)
iast_FULL	655.098 µs [633.398 µs, 676.798 µs]	273.725 µs (71.8%)
iast_GLOBAL	516.08 µs [494.687 µs, 537.474 µs]	134.707 µs (35.3%)
iast_HARDCODED_SECRET_DISABLED	495.311 µs [473.528 µs, 517.095 µs]	113.938 µs (29.9%)
iast_INACTIVE	454.309 µs [433.137 µs, 475.481 µs]	72.936 µs (19.1%)
iast_TELEMETRY_OFF	479.888 µs [458.137 µs, 501.638 µs]	98.515 µs (25.8%)
tracing	447.789 µs [426.845 µs, 468.733 µs]	66.416 µs (17.4%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	369.931 µs [350.306 µs, 389.557 µs]	-
iast	489.923 µs [468.379 µs, 511.468 µs]	119.992 µs (32.4%)
iast_FULL	654.2 µs [632.494 µs, 675.905 µs]	284.268 µs (76.8%)
iast_GLOBAL	519.696 µs [498.115 µs, 541.276 µs]	149.765 µs (40.5%)
iast_HARDCODED_SECRET_DISABLED	500.995 µs [479.004 µs, 522.986 µs]	131.064 µs (35.4%)
iast_INACTIVE	451.809 µs [430.624 µs, 472.995 µs]	81.878 µs (22.1%)
iast_TELEMETRY_OFF	485.006 µs [463.59 µs, 506.422 µs]	115.075 µs (31.1%)
tracing	444.859 µs [423.005 µs, 466.713 µs]	74.928 µs (20.3%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.363 ms) : 1344, 1383
.   : milestone, 1363,
appsec (1.753 ms) : 1731, 1776
.   : milestone, 1753,
appsec_no_iast (1.742 ms) : 1718, 1767
.   : milestone, 1742,
iast (1.496 ms) : 1472, 1519
.   : milestone, 1496,
profiling (1.519 ms) : 1495, 1544
.   : milestone, 1519,
tracing (1.488 ms) : 1463, 1513
.   : milestone, 1488,
section candidate
no_agent (1.347 ms) : 1327, 1366
.   : milestone, 1347,
appsec (1.753 ms) : 1728, 1778
.   : milestone, 1753,
appsec_no_iast (1.737 ms) : 1712, 1762
.   : milestone, 1737,
iast (1.487 ms) : 1465, 1510
.   : milestone, 1487,
profiling (1.497 ms) : 1473, 1521
.   : milestone, 1497,
tracing (1.498 ms) : 1472, 1524
.   : milestone, 1498,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.363 ms [1.344 ms, 1.383 ms]	-
appsec	1.753 ms [1.731 ms, 1.776 ms]	390.127 µs (28.6%)
appsec_no_iast	1.742 ms [1.718 ms, 1.767 ms]	379.186 µs (27.8%)
iast	1.496 ms [1.472 ms, 1.519 ms]	132.351 µs (9.7%)
profiling	1.519 ms [1.495 ms, 1.544 ms]	155.797 µs (11.4%)
tracing	1.488 ms [1.463 ms, 1.513 ms]	124.42 µs (9.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.347 ms [1.327 ms, 1.366 ms]	-
appsec	1.753 ms [1.728 ms, 1.778 ms]	406.532 µs (30.2%)
appsec_no_iast	1.737 ms [1.712 ms, 1.762 ms]	390.211 µs (29.0%)
iast	1.487 ms [1.465 ms, 1.51 ms]	140.68 µs (10.4%)
profiling	1.497 ms [1.473 ms, 1.521 ms]	150.131 µs (11.1%)
tracing	1.498 ms [1.472 ms, 1.524 ms]	151.339 µs (11.2%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	`46b5986`	`d78ac81`
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1734951862	1734951862
ci_job_id	748074446	748074446
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.473 ms) : 1461, 1484
.   : milestone, 1473,
appsec (2.352 ms) : 2310, 2393
.   : milestone, 2352,
iast (2.093 ms) : 2040, 2146
.   : milestone, 2093,
iast_GLOBAL (2.133 ms) : 2080, 2186
.   : milestone, 2133,
profiling (1.965 ms) : 1922, 2007
.   : milestone, 1965,
tracing (1.937 ms) : 1896, 1978
.   : milestone, 1937,
section candidate
no_agent (1.478 ms) : 1467, 1490
.   : milestone, 1478,
appsec (2.349 ms) : 2307, 2390
.   : milestone, 2349,
iast (2.094 ms) : 2041, 2147
.   : milestone, 2094,
iast_GLOBAL (2.141 ms) : 2087, 2194
.   : milestone, 2141,
profiling (1.964 ms) : 1921, 2007
.   : milestone, 1964,
tracing (1.94 ms) : 1900, 1981
.   : milestone, 1940,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.473 ms [1.461 ms, 1.484 ms]	-
appsec	2.352 ms [2.31 ms, 2.393 ms]	879.006 µs (59.7%)
iast	2.093 ms [2.04 ms, 2.146 ms]	620.03 µs (42.1%)
iast_GLOBAL	2.133 ms [2.08 ms, 2.186 ms]	660.58 µs (44.9%)
profiling	1.965 ms [1.922 ms, 2.007 ms]	492.328 µs (33.4%)
tracing	1.937 ms [1.896 ms, 1.978 ms]	464.265 µs (31.5%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.478 ms [1.467 ms, 1.49 ms]	-
appsec	2.349 ms [2.307 ms, 2.39 ms]	870.577 µs (58.9%)
iast	2.094 ms [2.041 ms, 2.147 ms]	615.803 µs (41.7%)
iast_GLOBAL	2.141 ms [2.087 ms, 2.194 ms]	662.344 µs (44.8%)
profiling	1.964 ms [1.921 ms, 2.007 ms]	485.781 µs (32.9%)
tracing	1.94 ms [1.9 ms, 1.981 ms]	462.004 µs (31.3%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.88 s) : 14880000, 14880000
.   : milestone, 14880000,
appsec (15.068 s) : 15068000, 15068000
.   : milestone, 15068000,
iast (19.023 s) : 19023000, 19023000
.   : milestone, 19023000,
iast_GLOBAL (17.632 s) : 17632000, 17632000
.   : milestone, 17632000,
profiling (15.305 s) : 15305000, 15305000
.   : milestone, 15305000,
tracing (14.761 s) : 14761000, 14761000
.   : milestone, 14761000,
section candidate
no_agent (15.21 s) : 15210000, 15210000
.   : milestone, 15210000,
appsec (15.18 s) : 15180000, 15180000
.   : milestone, 15180000,
iast (19.055 s) : 19055000, 19055000
.   : milestone, 19055000,
iast_GLOBAL (17.927 s) : 17927000, 17927000
.   : milestone, 17927000,
profiling (14.924 s) : 14924000, 14924000
.   : milestone, 14924000,
tracing (14.812 s) : 14812000, 14812000
.   : milestone, 14812000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.88 s [14.88 s, 14.88 s]	-
appsec	15.068 s [15.068 s, 15.068 s]	188.0 ms (1.3%)
iast	19.023 s [19.023 s, 19.023 s]	4.143 s (27.8%)
iast_GLOBAL	17.632 s [17.632 s, 17.632 s]	2.752 s (18.5%)
profiling	15.305 s [15.305 s, 15.305 s]	425.0 ms (2.9%)
tracing	14.761 s [14.761 s, 14.761 s]	-119.0 ms (-0.8%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.21 s [15.21 s, 15.21 s]	-
appsec	15.18 s [15.18 s, 15.18 s]	-30.0 ms (-0.2%)
iast	19.055 s [19.055 s, 19.055 s]	3.845 s (25.3%)
iast_GLOBAL	17.927 s [17.927 s, 17.927 s]	2.717 s (17.9%)
profiling	14.924 s [14.924 s, 14.924 s]	-286.0 ms (-1.9%)
tracing	14.812 s [14.812 s, 14.812 s]	-398.0 ms (-2.6%)

Add support for stringbuffer in setlength and add remove method to ta…

e2345c2

…intedobjects

Mariovido added type: enhancement comp: asm iast Application Security Management (IAST) labels Dec 23, 2024

Mariovido added 5 commits December 23, 2024 11:02

Remove return boolean of the remove TaintedMap method

2939389

Rename untaint to clearTaint

1ea7765

Add tests for new method in TaintedObjects

a623305

Remove clearTaint method and replace for existing one called clear

daba6bd

Remove unused test

d78ac81

Mariovido marked this pull request as ready for review December 23, 2024 11:33

Mariovido requested review from a team as code owners December 23, 2024 11:33

Mariovido requested review from smola and manuel-alvarez-alvarez December 23, 2024 11:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Increase IAST propagation to StringBuffer setLength #8128

Increase IAST propagation to StringBuffer setLength #8128

Mariovido commented Dec 23, 2024 •

edited

Loading

pr-commenter bot commented Dec 23, 2024 •

edited

Loading

Increase IAST propagation to StringBuffer setLength #8128

Are you sure you want to change the base?

Increase IAST propagation to StringBuffer setLength #8128

Conversation

Mariovido commented Dec 23, 2024 • edited Loading

What Does This Do

Motivation

Additional Notes

Contributor Checklist

pr-commenter bot commented Dec 23, 2024 • edited Loading

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Mariovido commented Dec 23, 2024 •

edited

Loading

pr-commenter bot commented Dec 23, 2024 •

edited

Loading