Skip to content

Use primitive types for RMI context payload serialization#10935

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom
bbujon/rmi
Mar 23, 2026
Merged

Use primitive types for RMI context payload serialization#10935
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom
bbujon/rmi

Conversation

@PerfectSlayer
Copy link
Contributor

@PerfectSlayer PerfectSlayer commented Mar 23, 2026 •
edited
Loading

What Does This Do

This PR replaces the context payload object serialization by primitive types.

Motivation

Avoid using ObjectInputStream.readObject.
From ObjectInputStream Javadoc:

Warning: Deserialization of untrusted data is inherently dangerous and should be avoided. Untrusted data should be carefully validated according to the "Serialization and Deserialization" section of the Secure Coding Guidelines for Java SE. Serialization Filtering describes best practices for defensive use of serial filters.

Additional Notes

Contributor Checklist

Jira ticket: VULN-59292

Note: Once your PR is ready to merge, add it to the merge queue by commenting /merge. /merge -c cancels the queue request. /merge -f --reason "reason" skips all merge queue checks; please use this judiciously, as some checks do not run at the PR-level. For more information, see this doc.

@PerfectSlayer PerfectSlayer requested review from a team as code owners March 23, 2026 14:46
@PerfectSlayer PerfectSlayer requested review from bric3 and removed request for a team March 23, 2026 14:46
@PerfectSlayer PerfectSlayer added type: bug Bug report and fix inst: others All other instrumentations tag: security Security related changes labels Mar 23, 2026
@PerfectSlayer PerfectSlayer changed the title Bbujon/rmi Use primitive types for RMI context payload serialization Mar 23, 2026
This was referenced Mar 23, 2026
Open
Merged
@pr-commenter
Copy link

pr-commenter bot commented Mar 23, 2026

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master bbujon/rmi
git_commit_date 1774271887 1774276845
git_commit_sha 1916c90 a0089d4
release_version 1.61.0-SNAPSHOT~1916c9079d 1.61.0-SNAPSHOT~a0089d4caf
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1774279191 1774279191
ci_job_id 1530625091 1530625091
ci_pipeline_id 104003043 104003043
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-wb0b7ol2 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-wb0b7ol2 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 62 metrics, 9 unstable metrics.

Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.059 s) : 0, 1058590
Total [baseline] (11.036 s) : 0, 11036364
Agent [candidate] (1.058 s) : 0, 1057665
Total [candidate] (11.01 s) : 0, 11010174
section appsec
Agent [baseline] (1.264 s) : 0, 1263762
Total [baseline] (11.162 s) : 0, 11162231
Agent [candidate] (1.247 s) : 0, 1247165
Total [candidate] (11.146 s) : 0, 11146424
section iast
Agent [baseline] (1.227 s) : 0, 1227190
Total [baseline] (11.291 s) : 0, 11290537
Agent [candidate] (1.229 s) : 0, 1228963
Total [candidate] (11.278 s) : 0, 11278383
section profiling
Agent [baseline] (1.183 s) : 0, 1183323
Total [baseline] (10.972 s) : 0, 10971538
Agent [candidate] (1.183 s) : 0, 1182725
Total [candidate] (10.988 s) : 0, 10987527
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.059 s -
Agent appsec 1.264 s 205.172 ms (19.4%)
Agent iast 1.227 s 168.599 ms (15.9%)
Agent profiling 1.183 s 124.732 ms (11.8%)
Total tracing 11.036 s -
Total appsec 11.162 s 125.867 ms (1.1%)
Total iast 11.291 s 254.173 ms (2.3%)
Total profiling 10.972 s -64.826 ms (-0.6%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.058 s -
Agent appsec 1.247 s 189.5 ms (17.9%)
Agent iast 1.229 s 171.299 ms (16.2%)
Agent profiling 1.183 s 125.06 ms (11.8%)
Total tracing 11.01 s -
Total appsec 11.146 s 136.25 ms (1.2%)
Total iast 11.278 s 268.21 ms (2.4%)
Total profiling 10.988 s -22.647 ms (-0.2%) 
gantt
    title petclinic - break down per module: candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.203 ms) : 0, 1203
crashtracking [candidate] (1.191 ms) : 0, 1191
BytebuddyAgent [baseline] (629.498 ms) : 0, 629498
BytebuddyAgent [candidate] (629.037 ms) : 0, 629037
AgentMeter [baseline] (29.366 ms) : 0, 29366
AgentMeter [candidate] (29.329 ms) : 0, 29329
GlobalTracer [baseline] (256.759 ms) : 0, 256759
GlobalTracer [candidate] (256.557 ms) : 0, 256557
AppSec [baseline] (31.698 ms) : 0, 31698
AppSec [candidate] (31.675 ms) : 0, 31675
Debugger [baseline] (60.483 ms) : 0, 60483
Debugger [candidate] (60.405 ms) : 0, 60405
Remote Config [baseline] (584.61 µs) : 0, 585
Remote Config [candidate] (588.053 µs) : 0, 588
Telemetry [baseline] (8.041 ms) : 0, 8041
Telemetry [candidate] (8.013 ms) : 0, 8013
Flare Poller [baseline] (4.998 ms) : 0, 4998
Flare Poller [candidate] (4.969 ms) : 0, 4969
section appsec
crashtracking [baseline] (1.222 ms) : 0, 1222
crashtracking [candidate] (1.187 ms) : 0, 1187
BytebuddyAgent [baseline] (668.852 ms) : 0, 668852
BytebuddyAgent [candidate] (659.504 ms) : 0, 659504
AgentMeter [baseline] (12.214 ms) : 0, 12214
AgentMeter [candidate] (12.108 ms) : 0, 12108
GlobalTracer [baseline] (261.512 ms) : 0, 261512
GlobalTracer [candidate] (258.322 ms) : 0, 258322
AppSec [baseline] (179.428 ms) : 0, 179428
AppSec [candidate] (177.468 ms) : 0, 177468
Debugger [baseline] (66.86 ms) : 0, 66860
Debugger [candidate] (65.697 ms) : 0, 65697
Remote Config [baseline] (632.28 µs) : 0, 632
Remote Config [candidate] (628.399 µs) : 0, 628
Telemetry [baseline] (8.303 ms) : 0, 8303
Telemetry [candidate] (8.324 ms) : 0, 8324
Flare Poller [baseline] (3.585 ms) : 0, 3585
Flare Poller [candidate] (3.534 ms) : 0, 3534
IAST [baseline] (24.622 ms) : 0, 24622
IAST [candidate] (24.198 ms) : 0, 24198
section iast
crashtracking [baseline] (1.193 ms) : 0, 1193
crashtracking [candidate] (1.194 ms) : 0, 1194
BytebuddyAgent [baseline] (795.004 ms) : 0, 795004
BytebuddyAgent [candidate] (796.863 ms) : 0, 796863
AgentMeter [baseline] (11.403 ms) : 0, 11403
AgentMeter [candidate] (11.43 ms) : 0, 11430
GlobalTracer [baseline] (246.935 ms) : 0, 246935
GlobalTracer [candidate] (247.486 ms) : 0, 247486
AppSec [baseline] (26.484 ms) : 0, 26484
AppSec [candidate] (27.316 ms) : 0, 27316
Debugger [baseline] (71.508 ms) : 0, 71508
Debugger [candidate] (70.151 ms) : 0, 70151
Remote Config [baseline] (537.227 µs) : 0, 537
Remote Config [candidate] (551.396 µs) : 0, 551
Telemetry [baseline] (9.299 ms) : 0, 9299
Telemetry [candidate] (9.202 ms) : 0, 9202
Flare Poller [baseline] (3.431 ms) : 0, 3431
Flare Poller [candidate] (3.389 ms) : 0, 3389
IAST [baseline] (25.325 ms) : 0, 25325
IAST [candidate] (25.293 ms) : 0, 25293
section profiling
ProfilingAgent [baseline] (93.561 ms) : 0, 93561
ProfilingAgent [candidate] (93.176 ms) : 0, 93176
crashtracking [baseline] (1.178 ms) : 0, 1178
crashtracking [candidate] (1.167 ms) : 0, 1167
BytebuddyAgent [baseline] (683.677 ms) : 0, 683677
BytebuddyAgent [candidate] (683.145 ms) : 0, 683145
AgentMeter [baseline] (9.049 ms) : 0, 9049
AgentMeter [candidate] (8.991 ms) : 0, 8991
GlobalTracer [baseline] (215.516 ms) : 0, 215516
GlobalTracer [candidate] (215.64 ms) : 0, 215640
AppSec [baseline] (32.041 ms) : 0, 32041
AppSec [candidate] (32.166 ms) : 0, 32166
Debugger [baseline] (64.964 ms) : 0, 64964
Debugger [candidate] (65.94 ms) : 0, 65940
Remote Config [baseline] (556.783 µs) : 0, 557
Remote Config [candidate] (563.264 µs) : 0, 563
Telemetry [baseline] (7.694 ms) : 0, 7694
Telemetry [candidate] (7.67 ms) : 0, 7670
Flare Poller [baseline] (4.21 ms) : 0, 4210
Flare Poller [candidate] (3.406 ms) : 0, 3406
Profiling [baseline] (94.125 ms) : 0, 94125
Profiling [candidate] (93.732 ms) : 0, 93732
Loading
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.066 s) : 0, 1066108
Total [baseline] (8.843 s) : 0, 8842526
Agent [candidate] (1.06 s) : 0, 1059567
Total [candidate] (8.824 s) : 0, 8824338
section iast
Agent [baseline] (1.225 s) : 0, 1224742
Total [baseline] (9.538 s) : 0, 9537512
Agent [candidate] (1.244 s) : 0, 1244203
Total [candidate] (9.551 s) : 0, 9550968
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.066 s -
Agent iast 1.225 s 158.635 ms (14.9%)
Total tracing 8.843 s -
Total iast 9.538 s 694.986 ms (7.9%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.06 s -
Agent iast 1.244 s 184.636 ms (17.4%)
Total tracing 8.824 s -
Total iast 9.551 s 726.63 ms (8.2%) 
gantt
    title insecure-bank - break down per module: candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.229 ms) : 0, 1229
crashtracking [candidate] (1.195 ms) : 0, 1195
BytebuddyAgent [baseline] (633.932 ms) : 0, 633932
BytebuddyAgent [candidate] (629.449 ms) : 0, 629449
AgentMeter [baseline] (29.563 ms) : 0, 29563
AgentMeter [candidate] (29.458 ms) : 0, 29458
GlobalTracer [baseline] (258.58 ms) : 0, 258580
GlobalTracer [candidate] (257.339 ms) : 0, 257339
AppSec [baseline] (32.032 ms) : 0, 32032
AppSec [candidate] (31.77 ms) : 0, 31770
Debugger [baseline] (59.991 ms) : 0, 59991
Debugger [candidate] (59.653 ms) : 0, 59653
Remote Config [baseline] (588.161 µs) : 0, 588
Remote Config [candidate] (586.277 µs) : 0, 586
Telemetry [baseline] (10.438 ms) : 0, 10438
Telemetry [candidate] (9.696 ms) : 0, 9696
Flare Poller [baseline] (3.577 ms) : 0, 3577
Flare Poller [candidate] (4.364 ms) : 0, 4364
section iast
crashtracking [baseline] (1.211 ms) : 0, 1211
crashtracking [candidate] (1.222 ms) : 0, 1222
BytebuddyAgent [baseline] (794.821 ms) : 0, 794821
BytebuddyAgent [candidate] (809.282 ms) : 0, 809282
AgentMeter [baseline] (11.362 ms) : 0, 11362
AgentMeter [candidate] (11.98 ms) : 0, 11980
GlobalTracer [baseline] (246.721 ms) : 0, 246721
GlobalTracer [candidate] (249.866 ms) : 0, 249866
IAST [baseline] (25.339 ms) : 0, 25339
IAST [candidate] (25.593 ms) : 0, 25593
AppSec [baseline] (26.472 ms) : 0, 26472
AppSec [candidate] (26.735 ms) : 0, 26735
Debugger [baseline] (66.404 ms) : 0, 66404
Debugger [candidate] (68.813 ms) : 0, 68813
Remote Config [baseline] (529.276 µs) : 0, 529
Remote Config [candidate] (528.477 µs) : 0, 528
Telemetry [baseline] (11.757 ms) : 0, 11757
Telemetry [candidate] (10.207 ms) : 0, 10207
Flare Poller [baseline] (4.085 ms) : 0, 4085
Flare Poller [candidate] (3.654 ms) : 0, 3654
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master bbujon/rmi
git_commit_date 1774271887 1774276845
git_commit_sha 1916c90 a0089d4
release_version 1.61.0-SNAPSHOT~1916c9079d 1.61.0-SNAPSHOT~a0089d4caf
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1774279737 1774279737
ci_job_id 1530625097 1530625097
ci_pipeline_id 104003043 104003043
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-19kg7f8l 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-19kg7f8l 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 1 performance regressions! Performance is the same for 20 metrics, 15 unstable metrics.

scenario Δ mean agg_http_req_duration_p50 Δ mean agg_http_req_duration_p95 Δ mean throughput candidate mean agg_http_req_duration_p50 candidate mean agg_http_req_duration_p95 candidate mean throughput baseline mean agg_http_req_duration_p50 baseline mean agg_http_req_duration_p95 baseline mean throughput
scenario:load:insecure-bank:iast_GLOBAL:high_load unsure
[+50.098µs; +183.094µs] or [+1.796%; +6.563%]		 worse
[+176.313µs; +637.045µs] or [+2.243%; +8.106%]		 unstable
[-195.025op/s; +81.962op/s] or [-15.046%; +6.323%]		 2.907ms 8.266ms 1239.656op/s 2.790ms 7.859ms 1296.188op/s
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d
    dateFormat X
    axisFormat %s
section baseline
no_agent (17.951 ms) : 17767, 18135
.   : milestone, 17951,
appsec (18.295 ms) : 18110, 18481
.   : milestone, 18295,
code_origins (18.134 ms) : 17950, 18319
.   : milestone, 18134,
iast (17.709 ms) : 17531, 17887
.   : milestone, 17709,
profiling (19.908 ms) : 19711, 20104
.   : milestone, 19908,
tracing (17.96 ms) : 17781, 18139
.   : milestone, 17960,
section candidate
no_agent (17.156 ms) : 16984, 17328
.   : milestone, 17156,
appsec (18.606 ms) : 18410, 18803
.   : milestone, 18606,
code_origins (17.491 ms) : 17320, 17661
.   : milestone, 17491,
iast (17.823 ms) : 17647, 17998
.   : milestone, 17823,
profiling (20.525 ms) : 20322, 20729
.   : milestone, 20525,
tracing (17.796 ms) : 17620, 17973
.   : milestone, 17796,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 17.951 ms [17.767 ms, 18.135 ms] -
appsec 18.295 ms [18.11 ms, 18.481 ms] 344.483 µs (1.9%)
code_origins 18.134 ms [17.95 ms, 18.319 ms] 183.634 µs (1.0%)
iast 17.709 ms [17.531 ms, 17.887 ms] -241.967 µs (-1.3%)
profiling 19.908 ms [19.711 ms, 20.104 ms] 1.957 ms (10.9%)
tracing 17.96 ms [17.781 ms, 18.139 ms] 9.112 µs (0.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 17.156 ms [16.984 ms, 17.328 ms] -
appsec 18.606 ms [18.41 ms, 18.803 ms] 1.45 ms (8.5%)
code_origins 17.491 ms [17.32 ms, 17.661 ms] 334.362 µs (1.9%)
iast 17.823 ms [17.647 ms, 17.998 ms] 666.357 µs (3.9%)
profiling 20.525 ms [20.322 ms, 20.729 ms] 3.369 ms (19.6%)
tracing 17.796 ms [17.62 ms, 17.973 ms] 640.084 µs (3.7%)
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.235 ms) : 1222, 1248
.   : milestone, 1235,
iast (3.186 ms) : 3143, 3230
.   : milestone, 3186,
iast_FULL (5.706 ms) : 5649, 5763
.   : milestone, 5706,
iast_GLOBAL (3.537 ms) : 3483, 3591
.   : milestone, 3537,
profiling (2.116 ms) : 2096, 2135
.   : milestone, 2116,
tracing (1.794 ms) : 1779, 1809
.   : milestone, 1794,
section candidate
no_agent (1.198 ms) : 1187, 1210
.   : milestone, 1198,
iast (3.127 ms) : 3085, 3170
.   : milestone, 3127,
iast_FULL (5.874 ms) : 5816, 5933
.   : milestone, 5874,
iast_GLOBAL (3.702 ms) : 3645, 3759
.   : milestone, 3702,
profiling (2.29 ms) : 2268, 2312
.   : milestone, 2290,
tracing (1.868 ms) : 1852, 1884
.   : milestone, 1868,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.235 ms [1.222 ms, 1.248 ms] -
iast 3.186 ms [3.143 ms, 3.23 ms] 1.952 ms (158.1%)
iast_FULL 5.706 ms [5.649 ms, 5.763 ms] 4.471 ms (362.1%)
iast_GLOBAL 3.537 ms [3.483 ms, 3.591 ms] 2.302 ms (186.5%)
profiling 2.116 ms [2.096 ms, 2.135 ms] 880.724 µs (71.3%)
tracing 1.794 ms [1.779 ms, 1.809 ms] 559.364 µs (45.3%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.198 ms [1.187 ms, 1.21 ms] -
iast 3.127 ms [3.085 ms, 3.17 ms] 1.929 ms (161.0%)
iast_FULL 5.874 ms [5.816 ms, 5.933 ms] 4.676 ms (390.2%)
iast_GLOBAL 3.702 ms [3.645 ms, 3.759 ms] 2.504 ms (208.9%)
profiling 2.29 ms [2.268 ms, 2.312 ms] 1.092 ms (91.1%)
tracing 1.868 ms [1.852 ms, 1.884 ms] 670.071 µs (55.9%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master bbujon/rmi
git_commit_date 1774271887 1774276845
git_commit_sha 1916c90 a0089d4
release_version 1.61.0-SNAPSHOT~1916c9079d 1.61.0-SNAPSHOT~a0089d4caf
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1774279401 1774279401
ci_job_id 1530625104 1530625104
ci_pipeline_id 104003043 104003043
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-tyk11dbm 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-tyk11dbm 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.484 ms) : 1473, 1496
.   : milestone, 1484,
appsec (3.815 ms) : 3594, 4036
.   : milestone, 3815,
iast (2.275 ms) : 2205, 2344
.   : milestone, 2275,
iast_GLOBAL (2.304 ms) : 2234, 2374
.   : milestone, 2304,
profiling (2.131 ms) : 2074, 2189
.   : milestone, 2131,
tracing (2.074 ms) : 2020, 2128
.   : milestone, 2074,
section candidate
no_agent (1.478 ms) : 1466, 1489
.   : milestone, 1478,
appsec (3.695 ms) : 3484, 3906
.   : milestone, 3695,
iast (2.262 ms) : 2192, 2332
.   : milestone, 2262,
iast_GLOBAL (2.305 ms) : 2236, 2375
.   : milestone, 2305,
profiling (2.108 ms) : 2051, 2164
.   : milestone, 2108,
tracing (2.073 ms) : 2019, 2127
.   : milestone, 2073,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.484 ms [1.473 ms, 1.496 ms] -
appsec 3.815 ms [3.594 ms, 4.036 ms] 2.331 ms (157.0%)
iast 2.275 ms [2.205 ms, 2.344 ms] 790.268 µs (53.2%)
iast_GLOBAL 2.304 ms [2.234 ms, 2.374 ms] 819.945 µs (55.2%)
profiling 2.131 ms [2.074 ms, 2.189 ms] 647.038 µs (43.6%)
tracing 2.074 ms [2.02 ms, 2.128 ms] 589.68 µs (39.7%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.478 ms [1.466 ms, 1.489 ms] -
appsec 3.695 ms [3.484 ms, 3.906 ms] 2.218 ms (150.1%)
iast 2.262 ms [2.192 ms, 2.332 ms] 784.339 µs (53.1%)
iast_GLOBAL 2.305 ms [2.236 ms, 2.375 ms] 827.957 µs (56.0%)
profiling 2.108 ms [2.051 ms, 2.164 ms] 630.209 µs (42.7%)
tracing 2.073 ms [2.019 ms, 2.127 ms] 595.17 µs (40.3%)
Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~a0089d4caf, baseline=1.61.0-SNAPSHOT~1916c9079d
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.408 s) : 15408000, 15408000
.   : milestone, 15408000,
appsec (15.047 s) : 15047000, 15047000
.   : milestone, 15047000,
iast (18.658 s) : 18658000, 18658000
.   : milestone, 18658000,
iast_GLOBAL (17.882 s) : 17882000, 17882000
.   : milestone, 17882000,
profiling (15.123 s) : 15123000, 15123000
.   : milestone, 15123000,
tracing (15.049 s) : 15049000, 15049000
.   : milestone, 15049000,
section candidate
no_agent (15.27 s) : 15270000, 15270000
.   : milestone, 15270000,
appsec (15.04 s) : 15040000, 15040000
.   : milestone, 15040000,
iast (18.457 s) : 18457000, 18457000
.   : milestone, 18457000,
iast_GLOBAL (17.794 s) : 17794000, 17794000
.   : milestone, 17794000,
profiling (14.949 s) : 14949000, 14949000
.   : milestone, 14949000,
tracing (15.093 s) : 15093000, 15093000
.   : milestone, 15093000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.408 s [15.408 s, 15.408 s] -
appsec 15.047 s [15.047 s, 15.047 s] -361.0 ms (-2.3%)
iast 18.658 s [18.658 s, 18.658 s] 3.25 s (21.1%)
iast_GLOBAL 17.882 s [17.882 s, 17.882 s] 2.474 s (16.1%)
profiling 15.123 s [15.123 s, 15.123 s] -285.0 ms (-1.8%)
tracing 15.049 s [15.049 s, 15.049 s] -359.0 ms (-2.3%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.27 s [15.27 s, 15.27 s] -
appsec 15.04 s [15.04 s, 15.04 s] -230.0 ms (-1.5%)
iast 18.457 s [18.457 s, 18.457 s] 3.187 s (20.9%)
iast_GLOBAL 17.794 s [17.794 s, 17.794 s] 2.524 s (16.5%)
profiling 14.949 s [14.949 s, 14.949 s] -321.0 ms (-2.1%)
tracing 15.093 s [15.093 s, 15.093 s] -177.0 ms (-1.2%)

@PerfectSlayer PerfectSlayer added this pull request to the merge queue Mar 23, 2026
@dd-octo-sts
Copy link
Contributor

dd-octo-sts bot commented Mar 23, 2026

/merge

@gh-worker-devflow-routing-ef8351
Copy link

gh-worker-devflow-routing-ef8351 bot commented Mar 23, 2026 •
edited
Loading

View all feedbacks in Devflow UI.

2026-03-23 18:06:20 UTC ℹ️ Start processing command /merge

2026-03-23 18:06:25 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in master is approximately 3h (p90).

2026-03-23 19:09:11 UTC ℹ️ MergeQueue: This merge request was merged

@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Mar 23, 2026
@gh-worker-dd-mergequeue-cf854d gh-worker-dd-mergequeue-cf854d bot merged commit 6be3218 into master Mar 23, 2026
748 of 753 checks passed
@gh-worker-dd-mergequeue-cf854d gh-worker-dd-mergequeue-cf854d bot deleted the bbujon/rmi branch March 23, 2026 19:09
@github-actions github-actions bot added this to the 1.61.0 milestone Mar 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ygree ygree ygree approved these changes

@sarahchen6 sarahchen6 sarahchen6 approved these changes

@bric3 bric3 Awaiting requested review from bric3 bric3 was automatically assigned from DataDog/apm-lang-platform-java

@manuel-alvarez-alvarez manuel-alvarez-alvarez Awaiting requested review from manuel-alvarez-alvarez manuel-alvarez-alvarez is a code owner automatically assigned from DataDog/apm-java

Assignees

No one assigned

Labels

inst: others All other instrumentations tag: security Security related changes type: bug Bug report and fix

Projects

None yet

Milestone

1.61.0

Development

Successfully merging this pull request may close these issues.

3 participants

@PerfectSlayer @ygree @sarahchen6