Skip to content

Fix ConcurrentModificationException error in AppsecRequestContext #9880

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 2 commits into
base: master
Choose a base branch
from
Draft

Fix ConcurrentModificationException error in AppsecRequestContext #9880

wants to merge 2 commits into from

Conversation

@jandro996
Copy link
Member

@jandro996 jandro996 commented Oct 29, 2025 •
edited
Loading

What Does This Do

Fixes ConcurrentModificationException when multiple threads concurrently access derivatives map during request processing.

Changes

Used ConcurrentHashMap with minimal locking:

  • Changed derivatives from HashMap to ConcurrentHashMap for thread-safe concurrent puts
  • Added derivativesSwapLock - only used for:
    a. Lazy initialization double-checked locking in reportDerivatives()
    b. Atomic swap operation in commitDerivatives()
  • No locks needed for close() or getDerivativeKeys() - ConcurrentHashMap handles these safely

Why this approach:

  • Minimal lock contention - lock only held during initialization and final swap
  • Lock-free concurrent updates in reportDerivatives() via ConcurrentHashMap
  • Atomic swap in commitDerivatives() prevents iteration over map being modified

Motivation

Error tracking report

Additional Notes

stacktrace

java.util.ConcurrentModificationException
  at java.base/java.util.HashMap$HashIterator.nextNode(Unknown Source)
  at java.base/java.util.HashMap$EntryIterator.next(Unknown Source)
  at java.base/java.util.HashMap$EntryIterator.next(Unknown Source)
  at com.datadog.appsec.gateway.AppSecRequestContext.commitDerivatives(AppSecRequestContext.java:944)
  at com.datadog.appsec.api.security.AppSecSpanPostProcessor.extractSchemas(AppSecSpanPostProcessor.java:87)
  at com.datadog.appsec.api.security.AppSecSpanPostProcessor.process(AppSecSpanPostProcessor.java:57)
  at datadog.trace.agent.common.writer.TraceProcessingWorker$TraceSerializingHandler.maybeTracePostProcessing(TraceProcessingWorker.java:270)
  at datadog.trace.agent.common.writer.TraceProcessingWorker$TraceSerializingHandler.onEvent(TraceProcessingWorker.java:187)
  at datadog.trace.agent.common.writer.TraceProcessingWorker$TraceSerializingHandler.consumeFromSecondaryQueue(TraceProcessingWorker.java:218)
  at datadog.trace.agent.common.writer.TraceProcessingWorker$TraceSerializingHandler.runDutyCycle(TraceProcessingWorker.java:174)
  at datadog.trace.agent.common.writer.TraceProcessingWorker$TraceSerializingHandler.run(TraceProcessingWorker.java:161)
  at java.base/java.lang.Thread.run(Unknown Source)

Contributor Checklist

Jira ticket: [PROJ-IDENT]

@jandro996 jandro996 added type: bug Bug report and fix tag: do not merge Do not merge changes comp: asm waf Application Security Management (WAF) labels Oct 29, 2025
@datadog-datadog-prod-us1
Copy link
Contributor

datadog-datadog-prod-us1 bot commented Oct 29, 2025 •
edited by datadog-official bot
Loading

🎯 Code Coverage
• Patch Coverage: 91.43%
• Total Coverage: 54.28% (-5.43%)

View detailed report

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: c710a79 | Docs | Datadog PR Page | Was this helpful? Give us feedback!

@pr-commenter
Copy link

pr-commenter bot commented Oct 29, 2025 •
edited
Loading

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-ConcurrentModificationException-error
git_commit_date 1762297540 1762347371
git_commit_sha 8db72c0 c710a79
release_version 1.56.0-SNAPSHOT~8db72c0988 1.56.0-SNAPSHOT~c710a79257
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1762349160 1762349160
ci_job_id 1216924898 1216924898
ci_pipeline_id 81311849 81311849
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-eyslcu75 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-eyslcu75 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 11 unstable metrics.

Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.056 s) : 0, 1055913
Total [baseline] (8.673 s) : 0, 8673111
Agent [candidate] (1.048 s) : 0, 1047582
Total [candidate] (8.674 s) : 0, 8674236
section iast
Agent [baseline] (1.177 s) : 0, 1177167
Total [baseline] (9.259 s) : 0, 9259182
Agent [candidate] (1.19 s) : 0, 1190472
Total [candidate] (9.311 s) : 0, 9310985
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.056 s -
Agent iast 1.177 s 121.254 ms (11.5%)
Total tracing 8.673 s -
Total iast 9.259 s 586.071 ms (6.8%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.048 s -
Agent iast 1.19 s 142.89 ms (13.6%)
Total tracing 8.674 s -
Total iast 9.311 s 636.749 ms (7.3%) 
gantt
    title insecure-bank - break down per module: candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.494 ms) : 0, 1494
crashtracking [candidate] (1.458 ms) : 0, 1458
BytebuddyAgent [baseline] (710.34 ms) : 0, 710340
BytebuddyAgent [candidate] (704.572 ms) : 0, 704572
GlobalTracer [baseline] (248.108 ms) : 0, 248108
GlobalTracer [candidate] (246.505 ms) : 0, 246505
AppSec [baseline] (32.662 ms) : 0, 32662
AppSec [candidate] (32.333 ms) : 0, 32333
Debugger [baseline] (6.485 ms) : 0, 6485
Debugger [candidate] (6.351 ms) : 0, 6351
Remote Config [baseline] (722.034 µs) : 0, 722
Remote Config [candidate] (708.257 µs) : 0, 708
Telemetry [baseline] (14.563 ms) : 0, 14563
Telemetry [candidate] (16.597 ms) : 0, 16597
Flare Poller [baseline] (6.558 ms) : 0, 6558
Flare Poller [candidate] (4.27 ms) : 0, 4270
section iast
crashtracking [baseline] (1.475 ms) : 0, 1475
crashtracking [candidate] (1.49 ms) : 0, 1490
BytebuddyAgent [baseline] (826.78 ms) : 0, 826780
BytebuddyAgent [candidate] (837.599 ms) : 0, 837599
GlobalTracer [baseline] (234.305 ms) : 0, 234305
GlobalTracer [candidate] (235.982 ms) : 0, 235982
IAST [baseline] (34.006 ms) : 0, 34006
IAST [candidate] (34.259 ms) : 0, 34259
AppSec [baseline] (26.981 ms) : 0, 26981
AppSec [candidate] (27.036 ms) : 0, 27036
Debugger [baseline] (6.015 ms) : 0, 6015
Debugger [candidate] (6.058 ms) : 0, 6058
Remote Config [baseline] (596.405 µs) : 0, 596
Remote Config [candidate] (590.091 µs) : 0, 590
Telemetry [baseline] (8.272 ms) : 0, 8272
Telemetry [candidate] (8.399 ms) : 0, 8399
Flare Poller [baseline] (4.123 ms) : 0, 4123
Flare Poller [candidate] (4.102 ms) : 0, 4102
Loading
Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.047 s) : 0, 1046731
Total [baseline] (10.833 s) : 0, 10832879
Agent [candidate] (1.047 s) : 0, 1046824
Total [candidate] (10.791 s) : 0, 10790757
section appsec
Agent [baseline] (1.225 s) : 0, 1225241
Total [baseline] (10.926 s) : 0, 10926211
Agent [candidate] (1.223 s) : 0, 1223434
Total [candidate] (10.934 s) : 0, 10934399
section iast
Agent [baseline] (1.18 s) : 0, 1179896
Total [baseline] (11.202 s) : 0, 11202054
Agent [candidate] (1.183 s) : 0, 1183232
Total [candidate] (11.196 s) : 0, 11195661
section profiling
Agent [baseline] (1.195 s) : 0, 1195278
Total [baseline] (10.873 s) : 0, 10872967
Agent [candidate] (1.203 s) : 0, 1202789
Total [candidate] (10.925 s) : 0, 10925374
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.047 s -
Agent appsec 1.225 s 178.51 ms (17.1%)
Agent iast 1.18 s 133.166 ms (12.7%)
Agent profiling 1.195 s 148.547 ms (14.2%)
Total tracing 10.833 s -
Total appsec 10.926 s 93.332 ms (0.9%)
Total iast 11.202 s 369.175 ms (3.4%)
Total profiling 10.873 s 40.088 ms (0.4%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.047 s -
Agent appsec 1.223 s 176.611 ms (16.9%)
Agent iast 1.183 s 136.408 ms (13.0%)
Agent profiling 1.203 s 155.966 ms (14.9%)
Total tracing 10.791 s -
Total appsec 10.934 s 143.642 ms (1.3%)
Total iast 11.196 s 404.904 ms (3.8%)
Total profiling 10.925 s 134.617 ms (1.2%) 
gantt
    title petclinic - break down per module: candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.461 ms) : 0, 1461
crashtracking [candidate] (1.465 ms) : 0, 1465
BytebuddyAgent [baseline] (703.725 ms) : 0, 703725
BytebuddyAgent [candidate] (704.365 ms) : 0, 704365
GlobalTracer [baseline] (246.416 ms) : 0, 246416
GlobalTracer [candidate] (246.25 ms) : 0, 246250
AppSec [baseline] (32.372 ms) : 0, 32372
AppSec [candidate] (32.215 ms) : 0, 32215
Debugger [baseline] (6.396 ms) : 0, 6396
Debugger [candidate] (6.356 ms) : 0, 6356
Remote Config [baseline] (725.261 µs) : 0, 725
Remote Config [candidate] (709.21 µs) : 0, 709
Telemetry [baseline] (15.154 ms) : 0, 15154
Telemetry [candidate] (15.696 ms) : 0, 15696
Flare Poller [baseline] (5.748 ms) : 0, 5748
Flare Poller [candidate] (4.969 ms) : 0, 4969
section appsec
crashtracking [baseline] (1.464 ms) : 0, 1464
crashtracking [candidate] (1.465 ms) : 0, 1465
BytebuddyAgent [baseline] (729.683 ms) : 0, 729683
BytebuddyAgent [candidate] (729.311 ms) : 0, 729311
GlobalTracer [baseline] (238.518 ms) : 0, 238518
GlobalTracer [candidate] (237.947 ms) : 0, 237947
IAST [baseline] (25.213 ms) : 0, 25213
IAST [candidate] (24.88 ms) : 0, 24880
AppSec [baseline] (175.971 ms) : 0, 175971
AppSec [candidate] (175.708 ms) : 0, 175708
Debugger [baseline] (6.111 ms) : 0, 6111
Debugger [candidate] (6.018 ms) : 0, 6018
Remote Config [baseline] (667.89 µs) : 0, 668
Remote Config [candidate] (648.896 µs) : 0, 649
Telemetry [baseline] (8.752 ms) : 0, 8752
Telemetry [candidate] (8.615 ms) : 0, 8615
Flare Poller [baseline] (3.934 ms) : 0, 3934
Flare Poller [candidate] (3.963 ms) : 0, 3963
section iast
crashtracking [baseline] (1.481 ms) : 0, 1481
crashtracking [candidate] (1.457 ms) : 0, 1457
BytebuddyAgent [baseline] (828.68 ms) : 0, 828680
BytebuddyAgent [candidate] (830.703 ms) : 0, 830703
GlobalTracer [baseline] (234.905 ms) : 0, 234905
GlobalTracer [candidate] (235.763 ms) : 0, 235763
IAST [baseline] (31.521 ms) : 0, 31521
IAST [candidate] (32.523 ms) : 0, 32523
AppSec [baseline] (29.458 ms) : 0, 29458
AppSec [candidate] (28.806 ms) : 0, 28806
Debugger [baseline] (6.022 ms) : 0, 6022
Debugger [candidate] (6.005 ms) : 0, 6005
Remote Config [baseline] (612.191 µs) : 0, 612
Remote Config [candidate] (605.13 µs) : 0, 605
Telemetry [baseline] (8.389 ms) : 0, 8389
Telemetry [candidate] (8.371 ms) : 0, 8371
Flare Poller [baseline] (4.098 ms) : 0, 4098
Flare Poller [candidate] (4.14 ms) : 0, 4140
section profiling
crashtracking [baseline] (1.497 ms) : 0, 1497
crashtracking [candidate] (1.471 ms) : 0, 1471
BytebuddyAgent [baseline] (730.379 ms) : 0, 730379
BytebuddyAgent [candidate] (736.253 ms) : 0, 736253
GlobalTracer [baseline] (222.406 ms) : 0, 222406
GlobalTracer [candidate] (223.455 ms) : 0, 223455
AppSec [baseline] (32.158 ms) : 0, 32158
AppSec [candidate] (32.409 ms) : 0, 32409
Debugger [baseline] (6.78 ms) : 0, 6780
Debugger [candidate] (9.107 ms) : 0, 9107
Remote Config [baseline] (720.764 µs) : 0, 721
Remote Config [candidate] (708.212 µs) : 0, 708
Telemetry [baseline] (16.25 ms) : 0, 16250
Telemetry [candidate] (13.774 ms) : 0, 13774
Flare Poller [baseline] (4.175 ms) : 0, 4175
Flare Poller [candidate] (4.175 ms) : 0, 4175
ProfilingAgent [baseline] (111.293 ms) : 0, 111293
ProfilingAgent [candidate] (111.63 ms) : 0, 111630
Profiling [baseline] (111.965 ms) : 0, 111965
Profiling [candidate] (112.298 ms) : 0, 112298
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-ConcurrentModificationException-error
git_commit_date 1762297540 1762347371
git_commit_sha 8db72c0 c710a79
release_version 1.56.0-SNAPSHOT~8db72c0988 1.56.0-SNAPSHOT~c710a79257
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1762349730 1762349730
ci_job_id 1216924899 1216924899
ci_pipeline_id 81311849 81311849
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-l8geycx4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-l8geycx4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 5 performance regressions! Performance is the same for 6 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:insecure-bank:profiling:high_load worse
[+146.140µs; +182.257µs] or [+7.740%; +9.653%]		 unstable
[-559.111op/s; +58.060op/s] or [-23.449%; +2.435%]		 2.052ms 2133.818op/s 1.888ms 2384.344op/s
scenario:load:insecure-bank:no_agent:high_load worse
[+57.395µs; +83.941µs] or [+4.755%; +6.955%]		 unstable
[-795.217op/s; +203.678op/s] or [-21.772%; +5.577%]		 1.278ms 3356.636op/s 1.207ms 3652.406op/s
scenario:load:insecure-bank:iast_FULL:high_load worse
[+278.841µs; +403.935µs] or [+4.945%; +7.164%]		 unstable
[-138.823op/s; +47.135op/s] or [-16.942%; +5.753%]		 5.980ms 773.531op/s 5.638ms 819.375op/s
scenario:load:insecure-bank:iast:high_load better
[-179.924µs; -87.975µs] or [-5.559%; -2.718%]		 unstable
[-174.218op/s; +203.633op/s] or [-12.324%; +14.405%]		 3.102ms 1428.364op/s 3.236ms 1413.656op/s
scenario:load:petclinic:no_agent:high_load worse
[+0.893ms; +1.306ms] or [+4.939%; +7.221%]		 unstable
[-42.735op/s; +13.235op/s] or [-16.558%; +5.128%]		 19.182ms 243.344op/s 18.082ms 258.094op/s
scenario:load:petclinic:code_origins:high_load worse
[+1.049ms; +1.442ms] or [+5.915%; +8.132%]		 unstable
[-44.277op/s; +9.777op/s] or [-16.832%; +3.717%]		 18.984ms 245.812op/s 17.738ms 263.062op/s
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.207 ms) : 1195, 1219
.   : milestone, 1207,
iast (3.236 ms) : 3192, 3281
.   : milestone, 3236,
iast_FULL (5.638 ms) : 5583, 5694
.   : milestone, 5638,
iast_GLOBAL (3.53 ms) : 3472, 3588
.   : milestone, 3530,
profiling (1.888 ms) : 1873, 1903
.   : milestone, 1888,
tracing (1.773 ms) : 1759, 1787
.   : milestone, 1773,
section candidate
no_agent (1.278 ms) : 1265, 1291
.   : milestone, 1278,
iast (3.102 ms) : 3062, 3143
.   : milestone, 3102,
iast_FULL (5.98 ms) : 5919, 6040
.   : milestone, 5980,
iast_GLOBAL (3.641 ms) : 3588, 3693
.   : milestone, 3641,
profiling (2.052 ms) : 2034, 2071
.   : milestone, 2052,
tracing (1.797 ms) : 1781, 1812
.   : milestone, 1797,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.207 ms [1.195 ms, 1.219 ms] -
iast 3.236 ms [3.192 ms, 3.281 ms] 2.029 ms (168.1%)
iast_FULL 5.638 ms [5.583 ms, 5.694 ms] 4.431 ms (367.1%)
iast_GLOBAL 3.53 ms [3.472 ms, 3.588 ms] 2.323 ms (192.5%)
profiling 1.888 ms [1.873 ms, 1.903 ms] 681.028 µs (56.4%)
tracing 1.773 ms [1.759 ms, 1.787 ms] 565.92 µs (46.9%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.278 ms [1.265 ms, 1.291 ms] -
iast 3.102 ms [3.062 ms, 3.143 ms] 1.825 ms (142.8%)
iast_FULL 5.98 ms [5.919 ms, 6.04 ms] 4.702 ms (368.0%)
iast_GLOBAL 3.641 ms [3.588 ms, 3.693 ms] 2.363 ms (184.9%)
profiling 2.052 ms [2.034 ms, 2.071 ms] 774.559 µs (60.6%)
tracing 1.797 ms [1.781 ms, 1.812 ms] 518.871 µs (40.6%)
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988
    dateFormat X
    axisFormat %s
section baseline
no_agent (18.082 ms) : 17900, 18265
.   : milestone, 18082,
appsec (18.623 ms) : 18430, 18816
.   : milestone, 18623,
code_origins (17.738 ms) : 17567, 17910
.   : milestone, 17738,
iast (17.463 ms) : 17290, 17635
.   : milestone, 17463,
profiling (18.806 ms) : 18619, 18993
.   : milestone, 18806,
tracing (17.705 ms) : 17528, 17882
.   : milestone, 17705,
section candidate
no_agent (19.182 ms) : 18981, 19383
.   : milestone, 19182,
appsec (18.586 ms) : 18395, 18776
.   : milestone, 18586,
code_origins (18.984 ms) : 18791, 19177
.   : milestone, 18984,
iast (17.638 ms) : 17463, 17814
.   : milestone, 17638,
profiling (19.133 ms) : 18939, 19328
.   : milestone, 19133,
tracing (17.703 ms) : 17524, 17882
.   : milestone, 17703,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.082 ms [17.9 ms, 18.265 ms] -
appsec 18.623 ms [18.43 ms, 18.816 ms] 540.407 µs (3.0%)
code_origins 17.738 ms [17.567 ms, 17.91 ms] -344.141 µs (-1.9%)
iast 17.463 ms [17.29 ms, 17.635 ms] -619.81 µs (-3.4%)
profiling 18.806 ms [18.619 ms, 18.993 ms] 723.636 µs (4.0%)
tracing 17.705 ms [17.528 ms, 17.882 ms] -377.844 µs (-2.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 19.182 ms [18.981 ms, 19.383 ms] -
appsec 18.586 ms [18.395 ms, 18.776 ms] -596.401 µs (-3.1%)
code_origins 18.984 ms [18.791 ms, 19.177 ms] -197.781 µs (-1.0%)
iast 17.638 ms [17.463 ms, 17.814 ms] -1.543 ms (-8.0%)
profiling 19.133 ms [18.939 ms, 19.328 ms] -48.47 µs (-0.3%)
tracing 17.703 ms [17.524 ms, 17.882 ms] -1.479 ms (-7.7%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Fix-ConcurrentModificationException-error
git_commit_date 1762297540 1762347371
git_commit_sha 8db72c0 c710a79
release_version 1.56.0-SNAPSHOT~8db72c0988 1.56.0-SNAPSHOT~c710a79257
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1762349376 1762349376
ci_job_id 1216924901 1216924901
ci_pipeline_id 81311849 81311849
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-2-6ugvvj0f 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-2-6ugvvj0f 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.45 s) : 15450000, 15450000
.   : milestone, 15450000,
appsec (15.256 s) : 15256000, 15256000
.   : milestone, 15256000,
iast (18.525 s) : 18525000, 18525000
.   : milestone, 18525000,
iast_GLOBAL (18.287 s) : 18287000, 18287000
.   : milestone, 18287000,
profiling (15.148 s) : 15148000, 15148000
.   : milestone, 15148000,
tracing (14.887 s) : 14887000, 14887000
.   : milestone, 14887000,
section candidate
no_agent (14.977 s) : 14977000, 14977000
.   : milestone, 14977000,
appsec (14.842 s) : 14842000, 14842000
.   : milestone, 14842000,
iast (18.53 s) : 18530000, 18530000
.   : milestone, 18530000,
iast_GLOBAL (18.057 s) : 18057000, 18057000
.   : milestone, 18057000,
profiling (14.704 s) : 14704000, 14704000
.   : milestone, 14704000,
tracing (15.068 s) : 15068000, 15068000
.   : milestone, 15068000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.45 s [15.45 s, 15.45 s] -
appsec 15.256 s [15.256 s, 15.256 s] -194.0 ms (-1.3%)
iast 18.525 s [18.525 s, 18.525 s] 3.075 s (19.9%)
iast_GLOBAL 18.287 s [18.287 s, 18.287 s] 2.837 s (18.4%)
profiling 15.148 s [15.148 s, 15.148 s] -302.0 ms (-2.0%)
tracing 14.887 s [14.887 s, 14.887 s] -563.0 ms (-3.6%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.977 s [14.977 s, 14.977 s] -
appsec 14.842 s [14.842 s, 14.842 s] -135.0 ms (-0.9%)
iast 18.53 s [18.53 s, 18.53 s] 3.553 s (23.7%)
iast_GLOBAL 18.057 s [18.057 s, 18.057 s] 3.08 s (20.6%)
profiling 14.704 s [14.704 s, 14.704 s] -273.0 ms (-1.8%)
tracing 15.068 s [15.068 s, 15.068 s] 91.0 ms (0.6%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.56.0-SNAPSHOT~c710a79257, baseline=1.56.0-SNAPSHOT~8db72c0988
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.475 ms) : 1463, 1486
.   : milestone, 1475,
appsec (3.688 ms) : 3469, 3907
.   : milestone, 3688,
iast (2.202 ms) : 2138, 2265
.   : milestone, 2202,
iast_GLOBAL (2.248 ms) : 2184, 2312
.   : milestone, 2248,
profiling (2.084 ms) : 2031, 2137
.   : milestone, 2084,
tracing (2.022 ms) : 1972, 2071
.   : milestone, 2022,
section candidate
no_agent (1.478 ms) : 1466, 1490
.   : milestone, 1478,
appsec (3.684 ms) : 3468, 3901
.   : milestone, 3684,
iast (2.207 ms) : 2143, 2271
.   : milestone, 2207,
iast_GLOBAL (2.254 ms) : 2190, 2318
.   : milestone, 2254,
profiling (2.044 ms) : 1993, 2095
.   : milestone, 2044,
tracing (2.028 ms) : 1978, 2077
.   : milestone, 2028,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.475 ms [1.463 ms, 1.486 ms] -
appsec 3.688 ms [3.469 ms, 3.907 ms] 2.213 ms (150.1%)
iast 2.202 ms [2.138 ms, 2.265 ms] 726.774 µs (49.3%)
iast_GLOBAL 2.248 ms [2.184 ms, 2.312 ms] 773.481 µs (52.4%)
profiling 2.084 ms [2.031 ms, 2.137 ms] 609.408 µs (41.3%)
tracing 2.022 ms [1.972 ms, 2.071 ms] 547.082 µs (37.1%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.478 ms [1.466 ms, 1.49 ms] -
appsec 3.684 ms [3.468 ms, 3.901 ms] 2.206 ms (149.3%)
iast 2.207 ms [2.143 ms, 2.271 ms] 729.125 µs (49.3%)
iast_GLOBAL 2.254 ms [2.19 ms, 2.318 ms] 775.583 µs (52.5%)
profiling 2.044 ms [1.993 ms, 2.095 ms] 566.078 µs (38.3%)
tracing 2.028 ms [1.978 ms, 2.077 ms] 549.516 µs (37.2%)

@jandro996 jandro996 marked this pull request as ready for review October 31, 2025 11:11
@jandro996 jandro996 requested a review from a team as a code owner October 31, 2025 11:11
@jandro996 jandro996 requested a review from smola October 31, 2025 11:11
@jandro996 jandro996 marked this pull request as draft October 31, 2025 11:48
@jandro996 jandro996 force-pushed the alejandro.gonzalez/Fix-ConcurrentModificationException-error branch from 526d702 to 86d3d3d Compare November 5, 2025 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@manuel-alvarez-alvarez manuel-alvarez-alvarez Awaiting requested review from manuel-alvarez-alvarez

@smola smola Awaiting requested review from smola smola is a code owner automatically assigned from DataDog/asm-java

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

comp: asm waf Application Security Management (WAF) tag: do not merge Do not merge changes type: bug Bug report and fix

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jandro996