Skip to content

Conversation

manuel-alvarez-alvarez
Copy link
Member

@manuel-alvarez-alvarez manuel-alvarez-alvarez commented Oct 8, 2025

What Does This Do

Ignores constructor call sites when there is no corresponding DUP instruction following a NEW. This can occur when the created instance is immediately discarded and never used in the code.

Motivation

We've received an escalation related to a verification error:

Attempt to pop empty stack.
Current Frame:
bci: @24
flags: { }
locals: { 'java/lang/String', 'java/lang/String' }
stack: { uninitialized 10, '[Ljava/lang/Object;' }

The issue is caused by stack manipulation operations performed by IAST when applying call site advices. In the case of constructors, the instrumentation expects a DUP instruction to follow the NEW operation. However, in this particular instance, the bytecode sequence was:

new java/net/URI
aload 1
invokespecial java/net/URI.<init>(Ljava/lang/String;)V

Since the created instance is immediately discarded by the Java code, we can safely ignore these call sites.

Additional Notes

As a future improvement, we could revisit this logic and explore applying call site advices to this case as well.

Contributor Checklist

Jira ticket: APMS-17315

@manuel-alvarez-alvarez manuel-alvarez-alvarez requested a review from a team as a code owner October 8, 2025 12:26
@manuel-alvarez-alvarez manuel-alvarez-alvarez added the type: bug Bug report and fix label Oct 8, 2025
@manuel-alvarez-alvarez manuel-alvarez-alvarez added the comp: asm iast Application Security Management (IAST) label Oct 8, 2025
@datadog-datadog-prod-us1
Copy link
Contributor

datadog-datadog-prod-us1 bot commented Oct 8, 2025

🎯 Code Coverage
Patch Coverage: 0.00%
Total Coverage: 63.37% (+3.67%)

View detailed report

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 8a8fdc8 | Docs | Was this helpful? Give us feedback!

@pr-commenter
Copy link

pr-commenter bot commented Oct 8, 2025

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/fix-iast-url-callsite
git_commit_date 1759924549 1759926011
git_commit_sha a56894b 8a8fdc8
release_version 1.55.0-SNAPSHOT~a56894b54b 1.55.0-SNAPSHOT~8a8fdc8a7d
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1759927745 1759927745
ci_job_id 1169217353 1169217353
ci_pipeline_id 78712580 78712580
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-dlk32v68 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-dlk32v68 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 60 metrics, 5 unstable metrics.

Startup time reports for insecure-bank
gantt
    title insecure-bank - global startup overhead: candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.023 s) : 0, 1022670
Total [baseline] (8.695 s) : 0, 8694656
Agent [candidate] (1.019 s) : 0, 1018582
Total [candidate] (8.679 s) : 0, 8678868
section iast
Agent [baseline] (1.147 s) : 0, 1147450
Total [baseline] (9.294 s) : 0, 9293564
Agent [candidate] (1.156 s) : 0, 1156131
Total [candidate] (9.322 s) : 0, 9321998
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.023 s -
Agent iast 1.147 s 124.78 ms (12.2%)
Total tracing 8.695 s -
Total iast 9.294 s 598.908 ms (6.9%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.019 s -
Agent iast 1.156 s 137.549 ms (13.5%)
Total tracing 8.679 s -
Total iast 9.322 s 643.129 ms (7.4%)
gantt
    title insecure-bank - break down per module: candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.476 ms) : 0, 1476
crashtracking [candidate] (1.463 ms) : 0, 1463
BytebuddyAgent [baseline] (697.65 ms) : 0, 697650
BytebuddyAgent [candidate] (694.059 ms) : 0, 694059
GlobalTracer [baseline] (242.837 ms) : 0, 242837
GlobalTracer [candidate] (242.166 ms) : 0, 242166
AppSec [baseline] (32.615 ms) : 0, 32615
AppSec [candidate] (32.466 ms) : 0, 32466
Debugger [baseline] (6.39 ms) : 0, 6390
Debugger [candidate] (6.398 ms) : 0, 6398
Remote Config [baseline] (707.311 µs) : 0, 707
Remote Config [candidate] (701.055 µs) : 0, 701
Telemetry [baseline] (9.243 ms) : 0, 9243
Telemetry [candidate] (9.198 ms) : 0, 9198
Flare Poller [baseline] (10.498 ms) : 0, 10498
Flare Poller [candidate] (11.049 ms) : 0, 11049
section iast
crashtracking [baseline] (1.458 ms) : 0, 1458
crashtracking [candidate] (1.471 ms) : 0, 1471
BytebuddyAgent [baseline] (812.956 ms) : 0, 812956
BytebuddyAgent [candidate] (819.146 ms) : 0, 819146
GlobalTracer [baseline] (231.035 ms) : 0, 231035
GlobalTracer [candidate] (232.628 ms) : 0, 232628
AppSec [baseline] (35.156 ms) : 0, 35156
AppSec [candidate] (35.163 ms) : 0, 35163
Debugger [baseline] (6.051 ms) : 0, 6051
Debugger [candidate] (6.12 ms) : 0, 6120
Remote Config [baseline] (615.822 µs) : 0, 616
Remote Config [candidate] (624.301 µs) : 0, 624
Telemetry [baseline] (8.418 ms) : 0, 8418
Telemetry [candidate] (8.674 ms) : 0, 8674
Flare Poller [baseline] (4.184 ms) : 0, 4184
Flare Poller [candidate] (4.255 ms) : 0, 4255
IAST [baseline] (26.348 ms) : 0, 26348
IAST [candidate] (26.569 ms) : 0, 26569
Loading
Startup time reports for petclinic
gantt
    title petclinic - global startup overhead: candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.021 s) : 0, 1020551
Total [baseline] (10.765 s) : 0, 10764684
Agent [candidate] (1.018 s) : 0, 1017546
Total [candidate] (10.658 s) : 0, 10657680
section appsec
Agent [baseline] (1.201 s) : 0, 1201343
Total [baseline] (10.975 s) : 0, 10975277
Agent [candidate] (1.208 s) : 0, 1207967
Total [candidate] (11.012 s) : 0, 11011940
section iast
Agent [baseline] (1.15 s) : 0, 1150199
Total [baseline] (10.985 s) : 0, 10984503
Agent [candidate] (1.149 s) : 0, 1148770
Total [candidate] (10.935 s) : 0, 10935189
section profiling
Agent [baseline] (1.162 s) : 0, 1162100
Total [baseline] (11.048 s) : 0, 11047824
Agent [candidate] (1.16 s) : 0, 1159785
Total [candidate] (11.073 s) : 0, 11072518
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.021 s -
Agent appsec 1.201 s 180.793 ms (17.7%)
Agent iast 1.15 s 129.648 ms (12.7%)
Agent profiling 1.162 s 141.549 ms (13.9%)
Total tracing 10.765 s -
Total appsec 10.975 s 210.592 ms (2.0%)
Total iast 10.985 s 219.819 ms (2.0%)
Total profiling 11.048 s 283.139 ms (2.6%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.018 s -
Agent appsec 1.208 s 190.42 ms (18.7%)
Agent iast 1.149 s 131.224 ms (12.9%)
Agent profiling 1.16 s 142.239 ms (14.0%)
Total tracing 10.658 s -
Total appsec 11.012 s 354.26 ms (3.3%)
Total iast 10.935 s 277.509 ms (2.6%)
Total profiling 11.073 s 414.838 ms (3.9%)
gantt
    title petclinic - break down per module: candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.461 ms) : 0, 1461
crashtracking [candidate] (1.452 ms) : 0, 1452
BytebuddyAgent [baseline] (695.907 ms) : 0, 695907
BytebuddyAgent [candidate] (693.141 ms) : 0, 693141
GlobalTracer [baseline] (242.298 ms) : 0, 242298
GlobalTracer [candidate] (242.186 ms) : 0, 242186
AppSec [baseline] (32.231 ms) : 0, 32231
AppSec [candidate] (32.425 ms) : 0, 32425
Debugger [baseline] (6.412 ms) : 0, 6412
Debugger [candidate] (6.402 ms) : 0, 6402
Remote Config [baseline] (706.555 µs) : 0, 707
Remote Config [candidate] (698.814 µs) : 0, 699
Telemetry [baseline] (9.129 ms) : 0, 9129
Telemetry [candidate] (9.192 ms) : 0, 9192
Flare Poller [baseline] (11.17 ms) : 0, 11170
Flare Poller [candidate] (10.865 ms) : 0, 10865
section appsec
crashtracking [baseline] (1.495 ms) : 0, 1495
crashtracking [candidate] (1.48 ms) : 0, 1480
BytebuddyAgent [baseline] (722.869 ms) : 0, 722869
BytebuddyAgent [candidate] (727.714 ms) : 0, 727714
GlobalTracer [baseline] (236.006 ms) : 0, 236006
GlobalTracer [candidate] (237.138 ms) : 0, 237138
AppSec [baseline] (175.0 ms) : 0, 175000
AppSec [candidate] (175.914 ms) : 0, 175914
Debugger [baseline] (6.131 ms) : 0, 6131
Debugger [candidate] (6.18 ms) : 0, 6180
Remote Config [baseline] (650.933 µs) : 0, 651
Remote Config [candidate] (651.846 µs) : 0, 652
Telemetry [baseline] (9.237 ms) : 0, 9237
Telemetry [candidate] (8.491 ms) : 0, 8491
Flare Poller [baseline] (3.942 ms) : 0, 3942
Flare Poller [candidate] (3.988 ms) : 0, 3988
IAST [baseline] (24.806 ms) : 0, 24806
IAST [candidate] (25.06 ms) : 0, 25060
section iast
crashtracking [baseline] (1.462 ms) : 0, 1462
crashtracking [candidate] (1.455 ms) : 0, 1455
BytebuddyAgent [baseline] (814.638 ms) : 0, 814638
BytebuddyAgent [candidate] (813.987 ms) : 0, 813987
GlobalTracer [baseline] (231.627 ms) : 0, 231627
GlobalTracer [candidate] (231.182 ms) : 0, 231182
AppSec [baseline] (35.121 ms) : 0, 35121
AppSec [candidate] (34.983 ms) : 0, 34983
Debugger [baseline] (6.091 ms) : 0, 6091
Debugger [candidate] (6.108 ms) : 0, 6108
Remote Config [baseline] (621.946 µs) : 0, 622
Remote Config [candidate] (618.34 µs) : 0, 618
Telemetry [baseline] (8.584 ms) : 0, 8584
Telemetry [candidate] (8.576 ms) : 0, 8576
Flare Poller [baseline] (4.21 ms) : 0, 4210
Flare Poller [candidate] (4.223 ms) : 0, 4223
IAST [baseline] (26.467 ms) : 0, 26467
IAST [candidate] (26.314 ms) : 0, 26314
section profiling
crashtracking [baseline] (1.432 ms) : 0, 1432
crashtracking [candidate] (1.431 ms) : 0, 1431
BytebuddyAgent [baseline] (721.426 ms) : 0, 721426
BytebuddyAgent [candidate] (719.901 ms) : 0, 719901
GlobalTracer [baseline] (217.976 ms) : 0, 217976
GlobalTracer [candidate] (217.477 ms) : 0, 217477
AppSec [baseline] (32.713 ms) : 0, 32713
AppSec [candidate] (32.596 ms) : 0, 32596
Debugger [baseline] (6.428 ms) : 0, 6428
Debugger [candidate] (6.423 ms) : 0, 6423
Remote Config [baseline] (702.114 µs) : 0, 702
Remote Config [candidate] (688.733 µs) : 0, 689
Telemetry [baseline] (16.513 ms) : 0, 16513
Telemetry [candidate] (15.76 ms) : 0, 15760
Flare Poller [baseline] (4.164 ms) : 0, 4164
Flare Poller [candidate] (4.98 ms) : 0, 4980
ProfilingAgent [baseline] (107.318 ms) : 0, 107318
ProfilingAgent [candidate] (106.868 ms) : 0, 106868
Profiling [baseline] (108.699 ms) : 0, 108699
Profiling [candidate] (108.675 ms) : 0, 108675
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/fix-iast-url-callsite
git_commit_date 1759924549 1759926011
git_commit_sha a56894b 8a8fdc8
release_version 1.55.0-SNAPSHOT~a56894b54b 1.55.0-SNAPSHOT~8a8fdc8a7d
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1759927414 1759927414
ci_job_id 1169217354 1169217354
ci_pipeline_id 78712580 78712580
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-as5zxe84 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-as5zxe84 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 2 performance regressions! Performance is the same for 9 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:insecure-bank:tracing:high_load worse
[+268.876µs; +518.425µs] or [+3.561%; +6.867%]
unstable
[-102.668op/s; +42.668op/s] or [-16.740%; +6.957%]
7.944ms 583.312op/s 7.550ms 613.312op/s
scenario:load:insecure-bank:no_agent:high_load worse
[+86.832µs; +197.196µs] or [+2.030%; +4.611%]
unstable
[-157.139op/s; +89.826op/s] or [-14.648%; +8.373%]
4.419ms 1039.125op/s 4.277ms 1072.781op/s
scenario:load:insecure-bank:iast_FULL:high_load better
[-1.642ms; -1.001ms] or [-10.560%; -6.433%]
unstable
[-8.412op/s; +63.537op/s] or [-2.806%; +21.192%]
14.232ms 327.375op/s 15.553ms 299.812op/s
Request duration reports for insecure-bank
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.277 ms) : 4225, 4329
.   : milestone, 4277,
iast (9.712 ms) : 9548, 9877
.   : milestone, 9712,
iast_FULL (15.553 ms) : 15235, 15871
.   : milestone, 15553,
iast_GLOBAL (11.209 ms) : 11005, 11413
.   : milestone, 11209,
profiling (8.98 ms) : 8841, 9118
.   : milestone, 8980,
tracing (7.55 ms) : 7431, 7669
.   : milestone, 7550,
section candidate
no_agent (4.419 ms) : 4368, 4470
.   : milestone, 4419,
iast (9.474 ms) : 9315, 9633
.   : milestone, 9474,
iast_FULL (14.232 ms) : 13955, 14508
.   : milestone, 14232,
iast_GLOBAL (10.899 ms) : 10705, 11093
.   : milestone, 10899,
profiling (8.894 ms) : 8742, 9047
.   : milestone, 8894,
tracing (7.944 ms) : 7831, 8057
.   : milestone, 7944,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.277 ms [4.225 ms, 4.329 ms] -
iast 9.712 ms [9.548 ms, 9.877 ms] 5.436 ms (127.1%)
iast_FULL 15.553 ms [15.235 ms, 15.871 ms] 11.276 ms (263.7%)
iast_GLOBAL 11.209 ms [11.005 ms, 11.413 ms] 6.932 ms (162.1%)
profiling 8.98 ms [8.841 ms, 9.118 ms] 4.703 ms (110.0%)
tracing 7.55 ms [7.431 ms, 7.669 ms] 3.273 ms (76.5%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.419 ms [4.368 ms, 4.47 ms] -
iast 9.474 ms [9.315 ms, 9.633 ms] 5.055 ms (114.4%)
iast_FULL 14.232 ms [13.955 ms, 14.508 ms] 9.813 ms (222.1%)
iast_GLOBAL 10.899 ms [10.705 ms, 11.093 ms] 6.48 ms (146.6%)
profiling 8.894 ms [8.742 ms, 9.047 ms] 4.476 ms (101.3%)
tracing 7.944 ms [7.831 ms, 8.057 ms] 3.525 ms (79.8%)
Request duration reports for petclinic
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b
    dateFormat X
    axisFormat %s
section baseline
no_agent (38.096 ms) : 37786, 38405
.   : milestone, 38096,
appsec (48.704 ms) : 48279, 49130
.   : milestone, 48704,
code_origins (44.024 ms) : 43656, 44392
.   : milestone, 44024,
iast (45.019 ms) : 44649, 45390
.   : milestone, 45019,
profiling (49.739 ms) : 49296, 50181
.   : milestone, 49739,
tracing (44.854 ms) : 44463, 45245
.   : milestone, 44854,
section candidate
no_agent (37.376 ms) : 37074, 37679
.   : milestone, 37376,
appsec (48.777 ms) : 48341, 49214
.   : milestone, 48777,
code_origins (45.178 ms) : 44791, 45565
.   : milestone, 45178,
iast (46.236 ms) : 45844, 46628
.   : milestone, 46236,
profiling (49.968 ms) : 49512, 50424
.   : milestone, 49968,
tracing (46.049 ms) : 45648, 46450
.   : milestone, 46049,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 38.096 ms [37.786 ms, 38.405 ms] -
appsec 48.704 ms [48.279 ms, 49.13 ms] 10.609 ms (27.8%)
code_origins 44.024 ms [43.656 ms, 44.392 ms] 5.929 ms (15.6%)
iast 45.019 ms [44.649 ms, 45.39 ms] 6.924 ms (18.2%)
profiling 49.739 ms [49.296 ms, 50.181 ms] 11.643 ms (30.6%)
tracing 44.854 ms [44.463 ms, 45.245 ms] 6.758 ms (17.7%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 37.376 ms [37.074 ms, 37.679 ms] -
appsec 48.777 ms [48.341 ms, 49.214 ms] 11.401 ms (30.5%)
code_origins 45.178 ms [44.791 ms, 45.565 ms] 7.802 ms (20.9%)
iast 46.236 ms [45.844 ms, 46.628 ms] 8.86 ms (23.7%)
profiling 49.968 ms [49.512 ms, 50.424 ms] 12.592 ms (33.7%)
tracing 46.049 ms [45.648 ms, 46.45 ms] 8.673 ms (23.2%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/fix-iast-url-callsite
git_commit_date 1759924549 1759926011
git_commit_sha a56894b 8a8fdc8
release_version 1.55.0-SNAPSHOT~a56894b54b 1.55.0-SNAPSHOT~8a8fdc8a7d
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1759927974 1759927974
ci_job_id 1169217355 1169217355
ci_pipeline_id 78712580 78712580
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-oj7vhrn5 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-oj7vhrn5 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.483 ms) : 1471, 1494
.   : milestone, 1483,
appsec (3.736 ms) : 3516, 3956
.   : milestone, 3736,
iast (2.217 ms) : 2153, 2280
.   : milestone, 2217,
iast_GLOBAL (2.258 ms) : 2194, 2322
.   : milestone, 2258,
profiling (2.076 ms) : 2023, 2129
.   : milestone, 2076,
tracing (2.034 ms) : 1984, 2083
.   : milestone, 2034,
section candidate
no_agent (1.482 ms) : 1470, 1493
.   : milestone, 1482,
appsec (3.722 ms) : 3501, 3943
.   : milestone, 3722,
iast (2.217 ms) : 2153, 2281
.   : milestone, 2217,
iast_GLOBAL (2.252 ms) : 2188, 2316
.   : milestone, 2252,
profiling (2.068 ms) : 2009, 2126
.   : milestone, 2068,
tracing (2.038 ms) : 1988, 2088
.   : milestone, 2038,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.483 ms [1.471 ms, 1.494 ms] -
appsec 3.736 ms [3.516 ms, 3.956 ms] 2.253 ms (152.0%)
iast 2.217 ms [2.153 ms, 2.28 ms] 734.234 µs (49.5%)
iast_GLOBAL 2.258 ms [2.194 ms, 2.322 ms] 775.427 µs (52.3%)
profiling 2.076 ms [2.023 ms, 2.129 ms] 593.158 µs (40.0%)
tracing 2.034 ms [1.984 ms, 2.083 ms] 550.973 µs (37.2%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.482 ms [1.47 ms, 1.493 ms] -
appsec 3.722 ms [3.501 ms, 3.943 ms] 2.24 ms (151.2%)
iast 2.217 ms [2.153 ms, 2.281 ms] 735.27 µs (49.6%)
iast_GLOBAL 2.252 ms [2.188 ms, 2.316 ms] 770.479 µs (52.0%)
profiling 2.068 ms [2.009 ms, 2.126 ms] 585.95 µs (39.5%)
tracing 2.038 ms [1.988 ms, 2.088 ms] 556.326 µs (37.5%)
Execution time for biojava
gantt
    title biojava - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~8a8fdc8a7d, baseline=1.55.0-SNAPSHOT~a56894b54b
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.33 s) : 15330000, 15330000
.   : milestone, 15330000,
appsec (15.087 s) : 15087000, 15087000
.   : milestone, 15087000,
iast (18.444 s) : 18444000, 18444000
.   : milestone, 18444000,
iast_GLOBAL (18.279 s) : 18279000, 18279000
.   : milestone, 18279000,
profiling (15.39 s) : 15390000, 15390000
.   : milestone, 15390000,
tracing (15.243 s) : 15243000, 15243000
.   : milestone, 15243000,
section candidate
no_agent (14.904 s) : 14904000, 14904000
.   : milestone, 14904000,
appsec (15.111 s) : 15111000, 15111000
.   : milestone, 15111000,
iast (18.752 s) : 18752000, 18752000
.   : milestone, 18752000,
iast_GLOBAL (18.248 s) : 18248000, 18248000
.   : milestone, 18248000,
profiling (15.118 s) : 15118000, 15118000
.   : milestone, 15118000,
tracing (15.308 s) : 15308000, 15308000
.   : milestone, 15308000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.33 s [15.33 s, 15.33 s] -
appsec 15.087 s [15.087 s, 15.087 s] -243.0 ms (-1.6%)
iast 18.444 s [18.444 s, 18.444 s] 3.114 s (20.3%)
iast_GLOBAL 18.279 s [18.279 s, 18.279 s] 2.949 s (19.2%)
profiling 15.39 s [15.39 s, 15.39 s] 60.0 ms (0.4%)
tracing 15.243 s [15.243 s, 15.243 s] -87.0 ms (-0.6%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.904 s [14.904 s, 14.904 s] -
appsec 15.111 s [15.111 s, 15.111 s] 207.0 ms (1.4%)
iast 18.752 s [18.752 s, 18.752 s] 3.848 s (25.8%)
iast_GLOBAL 18.248 s [18.248 s, 18.248 s] 3.344 s (22.4%)
profiling 15.118 s [15.118 s, 15.118 s] 214.0 ms (1.4%)
tracing 15.308 s [15.308 s, 15.308 s] 404.0 ms (2.7%)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp: asm iast Application Security Management (IAST) type: bug Bug report and fix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant