Skip to content

Fix NullPointerException in ObjectIntrospection #9878

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 3 commits into from
Oct 30, 2025
Merged

Fix NullPointerException in ObjectIntrospection #9878

merged 3 commits into from
Oct 30, 2025

Conversation

@jandro996
Copy link
Member

@jandro996 jandro996 commented Oct 29, 2025 •
edited by atlassian bot
Loading

What Does This Do

Added a null guard in ObjectIntrospection.checkStringLength so Jackson string values that resolve to null no longer trigger a NullPointerException during AppSec object conversion

Motivation

Error Tracking report

Additional Notes

stacktrace

java.lang.NullPointerException
  at com.datadog.appsec.event.data.ObjectIntrospection.checkStringLength(ObjectIntrospection.java:348)
  at com.datadog.appsec.event.data.ObjectIntrospection.doConversionJacksonNode(ObjectIntrospection.java:426)
  at com.datadog.appsec.event.data.ObjectIntrospection.doConversionJacksonNode(ObjectIntrospection.java:408)
  at com.datadog.appsec.event.data.ObjectIntrospection.doConversion(ObjectIntrospection.java:197)
  at com.datadog.appsec.event.data.ObjectIntrospection.guardedConversion(ObjectIntrospection.java:127)
  at com.datadog.appsec.event.data.ObjectIntrospection.doConversion(ObjectIntrospection.java:255)
  at com.datadog.appsec.event.data.ObjectIntrospection.guardedConversion(ObjectIntrospection.java:127)
  at com.datadog.appsec.event.data.ObjectIntrospection.convert(ObjectIntrospection.java:98)
  at com.datadog.appsec.event.data.ObjectIntrospection.convert(ObjectIntrospection.java:88)
  at com.datadog.appsec.gateway.GatewayBridge.onResponseBody(GatewayBridge.java:775)
  at datadog.trace.api.gateway.InstrumentationGateway$11.apply(InstrumentationGateway.java:361)
  at datadog.trace.api.gateway.InstrumentationGateway$11.apply(InstrumentationGateway.java:356)
  at (redacted: 13 frames)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:489)
  at (redacted)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:583)
  at (redacted: 130 frames)
  at java.lang.Thread.run(Thread.java:750)

Contributor Checklist

Jira ticket: [APPSEC-59848]

@jandro996 jandro996 added type: bug Bug report and fix comp: asm waf Application Security Management (WAF) labels Oct 29, 2025
@pr-commenter
Copy link

pr-commenter bot commented Oct 29, 2025 •
edited
Loading

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-NullPointerException-in-ObjectIntrospection
git_commit_date 1761764320 1761813069
git_commit_sha d86fe55 24a3254
release_version 1.55.0-SNAPSHOT~d86fe5521e 1.55.0-SNAPSHOT~24a32547c0
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1761815021 1761815021
ci_job_id 1206028851 1206028851
ci_pipeline_id 80708743 80708743
cpu_model Intel(R) Xeon(R) Platinum 8175M CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8175M CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-2-6hnn8ivm 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-2-6hnn8ivm 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 11 unstable metrics.

Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.059 s) : 0, 1059348
Total [baseline] (11.282 s) : 0, 11282165
Agent [candidate] (1.059 s) : 0, 1058592
Total [candidate] (11.22 s) : 0, 11220377
section appsec
Agent [baseline] (1.235 s) : 0, 1234649
Total [baseline] (11.306 s) : 0, 11305840
Agent [candidate] (1.243 s) : 0, 1243307
Total [candidate] (11.233 s) : 0, 11233159
section iast
Agent [baseline] (1.202 s) : 0, 1201941
Total [baseline] (11.447 s) : 0, 11446969
Agent [candidate] (1.196 s) : 0, 1195629
Total [candidate] (11.52 s) : 0, 11520355
section profiling
Agent [baseline] (1.201 s) : 0, 1200928
Total [baseline] (11.308 s) : 0, 11308318
Agent [candidate] (1.211 s) : 0, 1211163
Total [candidate] (11.404 s) : 0, 11404185
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.059 s -
Agent appsec 1.235 s 175.301 ms (16.5%)
Agent iast 1.202 s 142.593 ms (13.5%)
Agent profiling 1.201 s 141.58 ms (13.4%)
Total tracing 11.282 s -
Total appsec 11.306 s 23.674 ms (0.2%)
Total iast 11.447 s 164.804 ms (1.5%)
Total profiling 11.308 s 26.153 ms (0.2%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.059 s -
Agent appsec 1.243 s 184.715 ms (17.4%)
Agent iast 1.196 s 137.037 ms (12.9%)
Agent profiling 1.211 s 152.571 ms (14.4%)
Total tracing 11.22 s -
Total appsec 11.233 s 12.782 ms (0.1%)
Total iast 11.52 s 299.978 ms (2.7%)
Total profiling 11.404 s 183.808 ms (1.6%) 
gantt
    title petclinic - break down per module: candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.526 ms) : 0, 1526
crashtracking [candidate] (1.52 ms) : 0, 1520
BytebuddyAgent [baseline] (719.45 ms) : 0, 719450
BytebuddyAgent [candidate] (719.787 ms) : 0, 719787
GlobalTracer [baseline] (254.616 ms) : 0, 254616
GlobalTracer [candidate] (253.351 ms) : 0, 253351
AppSec [baseline] (33.557 ms) : 0, 33557
AppSec [candidate] (33.222 ms) : 0, 33222
Debugger [baseline] (6.759 ms) : 0, 6759
Debugger [candidate] (6.642 ms) : 0, 6642
Remote Config [baseline] (721.004 µs) : 0, 721
Remote Config [candidate] (705.707 µs) : 0, 706
Telemetry [baseline] (16.886 ms) : 0, 16886
Telemetry [candidate] (16.932 ms) : 0, 16932
Flare Poller [baseline] (4.389 ms) : 0, 4389
Flare Poller [candidate] (5.108 ms) : 0, 5108
section appsec
crashtracking [baseline] (1.523 ms) : 0, 1523
crashtracking [candidate] (1.552 ms) : 0, 1552
BytebuddyAgent [baseline] (743.288 ms) : 0, 743288
BytebuddyAgent [candidate] (748.885 ms) : 0, 748885
GlobalTracer [baseline] (243.766 ms) : 0, 243766
GlobalTracer [candidate] (246.267 ms) : 0, 246267
AppSec [baseline] (179.464 ms) : 0, 179464
AppSec [candidate] (179.413 ms) : 0, 179413
Debugger [baseline] (6.04 ms) : 0, 6040
Debugger [candidate] (6.015 ms) : 0, 6015
Remote Config [baseline] (652.077 µs) : 0, 652
Remote Config [candidate] (643.441 µs) : 0, 643
Telemetry [baseline] (8.679 ms) : 0, 8679
Telemetry [candidate] (8.552 ms) : 0, 8552
Flare Poller [baseline] (3.962 ms) : 0, 3962
Flare Poller [candidate] (3.947 ms) : 0, 3947
IAST [baseline] (25.965 ms) : 0, 25965
IAST [candidate] (26.575 ms) : 0, 26575
section iast
crashtracking [baseline] (1.533 ms) : 0, 1533
crashtracking [candidate] (1.521 ms) : 0, 1521
BytebuddyAgent [baseline] (850.371 ms) : 0, 850371
BytebuddyAgent [candidate] (843.678 ms) : 0, 843678
GlobalTracer [baseline] (243.971 ms) : 0, 243971
GlobalTracer [candidate] (244.677 ms) : 0, 244677
AppSec [baseline] (28.047 ms) : 0, 28047
AppSec [candidate] (28.812 ms) : 0, 28812
Debugger [baseline] (6.419 ms) : 0, 6419
Debugger [candidate] (6.48 ms) : 0, 6480
Remote Config [baseline] (635.515 µs) : 0, 636
Remote Config [candidate] (635.909 µs) : 0, 636
Telemetry [baseline] (8.914 ms) : 0, 8914
Telemetry [candidate] (8.875 ms) : 0, 8875
Flare Poller [baseline] (4.077 ms) : 0, 4077
Flare Poller [candidate] (4.134 ms) : 0, 4134
IAST [baseline] (36.3 ms) : 0, 36300
IAST [candidate] (35.242 ms) : 0, 35242
section profiling
crashtracking [baseline] (1.51 ms) : 0, 1510
crashtracking [candidate] (1.524 ms) : 0, 1524
BytebuddyAgent [baseline] (741.951 ms) : 0, 741951
BytebuddyAgent [candidate] (749.302 ms) : 0, 749302
GlobalTracer [baseline] (229.492 ms) : 0, 229492
GlobalTracer [candidate] (231.177 ms) : 0, 231177
AppSec [baseline] (33.278 ms) : 0, 33278
AppSec [candidate] (34.491 ms) : 0, 34491
Debugger [baseline] (14.75 ms) : 0, 14750
Debugger [candidate] (13.227 ms) : 0, 13227
Remote Config [baseline] (740.439 µs) : 0, 740
Remote Config [candidate] (720.155 µs) : 0, 720
Telemetry [baseline] (9.152 ms) : 0, 9152
Telemetry [candidate] (10.276 ms) : 0, 10276
Flare Poller [baseline] (4.275 ms) : 0, 4275
Flare Poller [candidate] (4.272 ms) : 0, 4272
ProfilingAgent [baseline] (109.889 ms) : 0, 109889
ProfilingAgent [candidate] (109.651 ms) : 0, 109651
Profiling [baseline] (110.567 ms) : 0, 110567
Profiling [candidate] (110.295 ms) : 0, 110295
Loading
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.056 s) : 0, 1056367
Total [baseline] (9.335 s) : 0, 9335064
Agent [candidate] (1.063 s) : 0, 1063187
Total [candidate] (9.294 s) : 0, 9293767
section iast
Agent [baseline] (1.195 s) : 0, 1195094
Total [baseline] (9.901 s) : 0, 9901335
Agent [candidate] (1.191 s) : 0, 1191493
Total [candidate] (9.898 s) : 0, 9897619
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.056 s -
Agent iast 1.195 s 138.727 ms (13.1%)
Total tracing 9.335 s -
Total iast 9.901 s 566.271 ms (6.1%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.063 s -
Agent iast 1.191 s 128.306 ms (12.1%)
Total tracing 9.294 s -
Total iast 9.898 s 603.851 ms (6.5%) 
gantt
    title insecure-bank - break down per module: candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.536 ms) : 0, 1536
crashtracking [candidate] (1.536 ms) : 0, 1536
BytebuddyAgent [baseline] (718.289 ms) : 0, 718289
BytebuddyAgent [candidate] (722.751 ms) : 0, 722751
GlobalTracer [baseline] (252.486 ms) : 0, 252486
GlobalTracer [candidate] (254.398 ms) : 0, 254398
AppSec [baseline] (33.235 ms) : 0, 33235
AppSec [candidate] (33.521 ms) : 0, 33521
Debugger [baseline] (6.643 ms) : 0, 6643
Debugger [candidate] (6.705 ms) : 0, 6705
Remote Config [baseline] (726.075 µs) : 0, 726
Remote Config [candidate] (715.358 µs) : 0, 715
Telemetry [baseline] (16.946 ms) : 0, 16946
Telemetry [candidate] (15.987 ms) : 0, 15987
Flare Poller [baseline] (5.135 ms) : 0, 5135
Flare Poller [candidate] (6.065 ms) : 0, 6065
section iast
crashtracking [baseline] (1.529 ms) : 0, 1529
crashtracking [candidate] (1.522 ms) : 0, 1522
BytebuddyAgent [baseline] (844.156 ms) : 0, 844156
BytebuddyAgent [candidate] (841.193 ms) : 0, 841193
GlobalTracer [baseline] (243.834 ms) : 0, 243834
GlobalTracer [candidate] (243.384 ms) : 0, 243384
AppSec [baseline] (29.845 ms) : 0, 29845
AppSec [candidate] (28.838 ms) : 0, 28838
Debugger [baseline] (6.432 ms) : 0, 6432
Debugger [candidate] (6.445 ms) : 0, 6445
Remote Config [baseline] (638.377 µs) : 0, 638
Remote Config [candidate] (643.426 µs) : 0, 643
Telemetry [baseline] (8.841 ms) : 0, 8841
Telemetry [candidate] (8.868 ms) : 0, 8868
Flare Poller [baseline] (4.105 ms) : 0, 4105
Flare Poller [candidate] (4.088 ms) : 0, 4088
IAST [baseline] (34.169 ms) : 0, 34169
IAST [candidate] (34.961 ms) : 0, 34961
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-NullPointerException-in-ObjectIntrospection
git_commit_date 1761764320 1761813069
git_commit_sha d86fe55 24a3254
release_version 1.55.0-SNAPSHOT~d86fe5521e 1.55.0-SNAPSHOT~24a32547c0
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1761815442 1761815442
ci_job_id 1206028852 1206028852
ci_pipeline_id 80708743 80708743
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-ygh7lrij 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-ygh7lrij 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 1 performance regressions! Performance is the same for 11 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:petclinic:no_agent:high_load worse
[+760.526µs; +1179.485µs] or [+4.072%; +6.316%]		 unstable
[-38.407op/s; +13.782op/s] or [-15.369%; +5.515%]		 19.646ms 237.594op/s 18.676ms 249.906op/s
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.203 ms) : 1191, 1215
.   : milestone, 1203,
iast (3.251 ms) : 3210, 3292
.   : milestone, 3251,
iast_FULL (5.786 ms) : 5730, 5843
.   : milestone, 5786,
iast_GLOBAL (3.685 ms) : 3631, 3739
.   : milestone, 3685,
profiling (2.026 ms) : 2008, 2044
.   : milestone, 2026,
tracing (1.775 ms) : 1760, 1790
.   : milestone, 1775,
section candidate
no_agent (1.201 ms) : 1189, 1213
.   : milestone, 1201,
iast (3.203 ms) : 3160, 3247
.   : milestone, 3203,
iast_FULL (5.786 ms) : 5728, 5843
.   : milestone, 5786,
iast_GLOBAL (3.614 ms) : 3553, 3675
.   : milestone, 3614,
profiling (2.064 ms) : 2045, 2082
.   : milestone, 2064,
tracing (1.782 ms) : 1767, 1796
.   : milestone, 1782,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.203 ms [1.191 ms, 1.215 ms] -
iast 3.251 ms [3.21 ms, 3.292 ms] 2.048 ms (170.3%)
iast_FULL 5.786 ms [5.73 ms, 5.843 ms] 4.583 ms (381.0%)
iast_GLOBAL 3.685 ms [3.631 ms, 3.739 ms] 2.482 ms (206.3%)
profiling 2.026 ms [2.008 ms, 2.044 ms] 822.695 µs (68.4%)
tracing 1.775 ms [1.76 ms, 1.79 ms] 571.975 µs (47.5%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.201 ms [1.189 ms, 1.213 ms] -
iast 3.203 ms [3.16 ms, 3.247 ms] 2.003 ms (166.8%)
iast_FULL 5.786 ms [5.728 ms, 5.843 ms] 4.585 ms (381.8%)
iast_GLOBAL 3.614 ms [3.553 ms, 3.675 ms] 2.413 ms (200.9%)
profiling 2.064 ms [2.045 ms, 2.082 ms] 862.629 µs (71.8%)
tracing 1.782 ms [1.767 ms, 1.796 ms] 580.708 µs (48.4%)
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e
    dateFormat X
    axisFormat %s
section baseline
no_agent (18.676 ms) : 18487, 18864
.   : milestone, 18676,
appsec (20.551 ms) : 20337, 20764
.   : milestone, 20551,
code_origins (18.569 ms) : 18379, 18759
.   : milestone, 18569,
iast (18.307 ms) : 18121, 18494
.   : milestone, 18307,
profiling (20.406 ms) : 20204, 20609
.   : milestone, 20406,
tracing (19.262 ms) : 19071, 19453
.   : milestone, 19262,
section candidate
no_agent (19.646 ms) : 19445, 19847
.   : milestone, 19646,
appsec (20.783 ms) : 20573, 20993
.   : milestone, 20783,
code_origins (18.68 ms) : 18493, 18866
.   : milestone, 18680,
iast (18.277 ms) : 18093, 18461
.   : milestone, 18277,
profiling (20.357 ms) : 20153, 20561
.   : milestone, 20357,
tracing (19.527 ms) : 19332, 19723
.   : milestone, 19527,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.676 ms [18.487 ms, 18.864 ms] -
appsec 20.551 ms [20.337 ms, 20.764 ms] 1.875 ms (10.0%)
code_origins 18.569 ms [18.379 ms, 18.759 ms] -106.45 µs (-0.6%)
iast 18.307 ms [18.121 ms, 18.494 ms] -368.356 µs (-2.0%)
profiling 20.406 ms [20.204 ms, 20.609 ms] 1.731 ms (9.3%)
tracing 19.262 ms [19.071 ms, 19.453 ms] 586.264 µs (3.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 19.646 ms [19.445 ms, 19.847 ms] -
appsec 20.783 ms [20.573 ms, 20.993 ms] 1.138 ms (5.8%)
code_origins 18.68 ms [18.493 ms, 18.866 ms] -966.106 µs (-4.9%)
iast 18.277 ms [18.093 ms, 18.461 ms] -1.369 ms (-7.0%)
profiling 20.357 ms [20.153 ms, 20.561 ms] 711.181 µs (3.6%)
tracing 19.527 ms [19.332 ms, 19.723 ms] -118.319 µs (-0.6%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-NullPointerException-in-ObjectIntrospection
git_commit_date 1761764320 1761813069
git_commit_sha d86fe55 24a3254
release_version 1.55.0-SNAPSHOT~d86fe5521e 1.55.0-SNAPSHOT~24a32547c0
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1761815107 1761815107
ci_job_id 1206028853 1206028853
ci_pipeline_id 80708743 80708743
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-3-n81r5c4c 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-3-n81r5c4c 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.655 s) : 15655000, 15655000
.   : milestone, 15655000,
appsec (15.233 s) : 15233000, 15233000
.   : milestone, 15233000,
iast (18.896 s) : 18896000, 18896000
.   : milestone, 18896000,
iast_GLOBAL (17.875 s) : 17875000, 17875000
.   : milestone, 17875000,
profiling (15.719 s) : 15719000, 15719000
.   : milestone, 15719000,
tracing (15.103 s) : 15103000, 15103000
.   : milestone, 15103000,
section candidate
no_agent (15.015 s) : 15015000, 15015000
.   : milestone, 15015000,
appsec (14.876 s) : 14876000, 14876000
.   : milestone, 14876000,
iast (18.406 s) : 18406000, 18406000
.   : milestone, 18406000,
iast_GLOBAL (18.382 s) : 18382000, 18382000
.   : milestone, 18382000,
profiling (15.247 s) : 15247000, 15247000
.   : milestone, 15247000,
tracing (15.301 s) : 15301000, 15301000
.   : milestone, 15301000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.655 s [15.655 s, 15.655 s] -
appsec 15.233 s [15.233 s, 15.233 s] -422.0 ms (-2.7%)
iast 18.896 s [18.896 s, 18.896 s] 3.241 s (20.7%)
iast_GLOBAL 17.875 s [17.875 s, 17.875 s] 2.22 s (14.2%)
profiling 15.719 s [15.719 s, 15.719 s] 64.0 ms (0.4%)
tracing 15.103 s [15.103 s, 15.103 s] -552.0 ms (-3.5%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.015 s [15.015 s, 15.015 s] -
appsec 14.876 s [14.876 s, 14.876 s] -139.0 ms (-0.9%)
iast 18.406 s [18.406 s, 18.406 s] 3.391 s (22.6%)
iast_GLOBAL 18.382 s [18.382 s, 18.382 s] 3.367 s (22.4%)
profiling 15.247 s [15.247 s, 15.247 s] 232.0 ms (1.5%)
tracing 15.301 s [15.301 s, 15.301 s] 286.0 ms (1.9%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~24a32547c0, baseline=1.55.0-SNAPSHOT~d86fe5521e
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.479 ms) : 1468, 1491
.   : milestone, 1479,
appsec (3.726 ms) : 3510, 3942
.   : milestone, 3726,
iast (2.217 ms) : 2153, 2281
.   : milestone, 2217,
iast_GLOBAL (2.261 ms) : 2196, 2325
.   : milestone, 2261,
profiling (2.091 ms) : 2038, 2145
.   : milestone, 2091,
tracing (2.042 ms) : 1993, 2091
.   : milestone, 2042,
section candidate
no_agent (1.477 ms) : 1466, 1489
.   : milestone, 1477,
appsec (3.723 ms) : 3505, 3941
.   : milestone, 3723,
iast (2.235 ms) : 2171, 2299
.   : milestone, 2235,
iast_GLOBAL (2.271 ms) : 2206, 2335
.   : milestone, 2271,
profiling (2.075 ms) : 2024, 2127
.   : milestone, 2075,
tracing (2.036 ms) : 1986, 2086
.   : milestone, 2036,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.479 ms [1.468 ms, 1.491 ms] -
appsec 3.726 ms [3.51 ms, 3.942 ms] 2.246 ms (151.8%)
iast 2.217 ms [2.153 ms, 2.281 ms] 737.65 µs (49.9%)
iast_GLOBAL 2.261 ms [2.196 ms, 2.325 ms] 781.138 µs (52.8%)
profiling 2.091 ms [2.038 ms, 2.145 ms] 611.939 µs (41.4%)
tracing 2.042 ms [1.993 ms, 2.091 ms] 562.536 µs (38.0%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.477 ms [1.466 ms, 1.489 ms] -
appsec 3.723 ms [3.505 ms, 3.941 ms] 2.245 ms (152.0%)
iast 2.235 ms [2.171 ms, 2.299 ms] 757.698 µs (51.3%)
iast_GLOBAL 2.271 ms [2.206 ms, 2.335 ms] 793.336 µs (53.7%)
profiling 2.075 ms [2.024 ms, 2.127 ms] 597.923 µs (40.5%)
tracing 2.036 ms [1.986 ms, 2.086 ms] 558.859 µs (37.8%)

@datadog-datadog-prod-us1
Copy link
Contributor

datadog-datadog-prod-us1 bot commented Oct 29, 2025 •
edited
Loading

🎯 Code Coverage
• Patch Coverage: 100.00%
• Total Coverage: 59.69% (-0.02%)

View detailed report

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 24a3254 | Docs | Datadog PR Page | Was this helpful? Give us feedback!

@jandro996 jandro996 marked this pull request as ready for review October 30, 2025 12:00
@jandro996 jandro996 requested a review from a team as a code owner October 30, 2025 12:00
@jandro996 jandro996 merged commit 3a5a7f8 into master Oct 30, 2025
541 checks passed
@jandro996 jandro996 deleted the alejandro.gonzalez/Fix-NullPointerException-in-ObjectIntrospection branch October 30, 2025 13:32
@github-actions github-actions bot added this to the 1.55.0 milestone Oct 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@manuel-alvarez-alvarez manuel-alvarez-alvarez manuel-alvarez-alvarez approved these changes

@robertpi robertpi Awaiting requested review from robertpi robertpi is a code owner automatically assigned from DataDog/asm-java

@smola smola Awaiting requested review from smola

Assignees

No one assigned

Labels

comp: asm waf Application Security Management (WAF) type: bug Bug report and fix

Projects

None yet

Milestone

1.55.0

Development

Successfully merging this pull request may close these issues.

3 participants

@jandro996 @manuel-alvarez-alvarez