Bug Fixes
-
Code Security:
- Fixes critical memory safety issue in IAST when used with forked worker processes (MCP servers with Gunicorn and Uvicorn). Workers previously crashed with segmentation faults due to stale PyObject pointers in native taint maps after fork.
-
tracing:
- Resolves a potential deadlock when forking.
-
LLM Observability:
- Fixes an issue where the Google ADK integration would throw an
AttributeErrorwhen trying to access thenameordescriptionattributes of a tool.
- Fixes an issue where the Google ADK integration would throw an
-
AAP:
- This fix resolves an issue where the appsec layer was not compatible anymore with the lambda/serverless version of the tracer.
-
lib-injection:
- do not inject into the
gsutiltool
- do not inject into the
-
profiling:
- improve reliability when parsing an empty span.
- This fix resolves a critical issue where the Lock Profiler generated release samples for non-sampled lock acquires, resulting in inflated or negative (when integer overflows) lock hold times (e.g., "3.24k days per minute", "-970 days per minute"). This affected virtually all customers using sampling rates < 100% (which should be the majority).
- This fix prevents a use-after-free crash from the memory profiler on Python version 3.10 and 3.11. The previous attempt to fix this bug itself had a bug, which this fix addresses.
- Fixes a segmentation fault caused by accessing
frame.f_localswhile trying to retrieve class name of aPyFrameObject.