in_kubernetes_events: fix OOB reads from non-NUL-terminated msgpack strings - #12180

Closed

zanarellidev wants to merge 53 commits into

fluent:masterfrom

zanarellidev:fix/k8s-events-msgpack-string-oob-read

Commits on Jul 29, 2026

bin: Provide a command line argument for FIPS verification

cosmo0920
authored and
edsiper
committed
out_s3: Add safe guard for FIPS compliance

cosmo0920
authored and
edsiper
committed
out_azure_blob: Block MD5 hash on fips enabled

cosmo0920
authored and
edsiper
committed
tests: runtime: Add a test case for sha256 hash with FIPS

cosmo0920
authored and
edsiper
committed
tests: internal: Compute an expected sha256 hash

cosmo0920
authored and
edsiper
committed
lib: Handle FIPS mode on initailize

cosmo0920
authored and
edsiper
committed
reload: Validate FIPS mode on reload

cosmo0920
authored and
edsiper
committed
hash: Teardown hash internal member correctly

cosmo0920
authored and
edsiper
committed
tests: internal: Add test case for FIPS compliant

cosmo0920
authored and
edsiper
committed
hmac: Teardown hmac contenxts cleanly

cosmo0920
authored and
edsiper
committed
in_lib: Adjust consuming mechanism to inprove throughput

cosmo0920
authored and
edsiper
committed
in_lib: Address a review comment

cosmo0920
authored and
edsiper
committed
in_lib: preserve partial records while draining input

cosmo0920
authored and
edsiper
committed
tests: runtime: isolate Loki mock server configuration
edsiper
committed
in_node_exporter_metrics: fix netstat file reads
edsiper
committed
build: plugins: Generate plugin defs on separated build directories

cosmo0920
authored and
edsiper
committed
in_process_exporter_metrics: Add cmt_expire() to flush stale metrics

piwai
authored and
edsiper
committed
tests: runtime: out_chronicle: Prevent resource races on checking results

cosmo0920
authored and
edsiper
committed
tests: runtime: out_http: Prevent resource races on checking results

cosmo0920
authored and
edsiper
committed
tests: runtime: Show errors on unpacking failures

cosmo0920
authored and
edsiper
committed
in_forward: batch Forward mode worker ingress
edsiper
committed
tests: integration: cover Forward mode worker batching
edsiper
committed
tests: integration: harden Forward worker assertions
edsiper
committed
in_tail: add Windows UTF-8 path encoding mode (#12020)

cosmo0920
and
Copilot
authored

Commits on Jul 30, 2026

opentelemetry: validate JSON array value type
edsiper
committed
tests: integration: cover invalid OTLP JSON array value
edsiper
committed
opentelemetry: validate JSON container value types
edsiper
committed
in_opentelemetry: remove unused JSON wrapper decoder
edsiper
committed
tests: integration: cover invalid OTLP JSON containers
edsiper
committed
input: Observe input rate per specified window range

cosmo0920
authored and
edsiper
committed
input_chunk: Observe input rate per specified window range

cosmo0920
authored and
edsiper
committed
tests: input_gate_rate: Add test cases for rate gate

cosmo0920
authored and
edsiper
committed
tests: integration: Add configurations for scenarios of rate_gate

cosmo0920
authored and
edsiper
committed
config_format: cf_yaml: Handle ignorable annotations

cosmo0920
authored and
edsiper
committed
tests: config_format_yaml: Add test cases for annotations

cosmo0920
authored and
edsiper
committed
parser: Handle long time on parsing until the limit of INT

cosmo0920
authored and
edsiper
committed
tests: parser: Add test cases for too long cases

cosmo0920
authored and
edsiper
committed
workflows: bump reviewdog/action-actionlint from 1.72.0 to 1.73.0

dependabot[bot]
authored and
patrick-stephens
committed
workflows: bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3

dependabot[bot]
authored and
patrick-stephens
committed
workflows: bump actions/checkout from 7.0.0 to 7.0.1

dependabot[bot]
authored and
patrick-stephens
committed
workflows: bump actions/setup-python from 6.3.0 to 7.0.0

dependabot[bot]
authored and
patrick-stephens
committed
out_kafka: Implement a capability to resolve remote avro schema

cosmo0920
authored and
edsiper
committed
tests: internal: Add a test case for resolving remote avro schema

cosmo0920
authored and
edsiper
committed
tests: integration: Add an integration test for resolving schema registry

cosmo0920
authored and
edsiper
committed
tests: integration: Skip an avro registry test if avro encoder is off

cosmo0920
authored and
edsiper
committed
in_kubernetes_events: bound watch connection lifetime
edsiper
committed
tests: integration: cover stalled kubernetes event watch
edsiper
committed
engine: fail startup when HTTP server cannot start
edsiper
committed
tests: integration: cover HTTP server bind failure
edsiper
committed
out_s3: require exact match for log_key

Vaibhav-C-S
authored and
edsiper
committed

Commits on Jul 31, 2026