Skip to content

Sync main-alt with upstream Parca - #2

Open
alexon1234 wants to merge 46 commits into
main-altfrom
sync/main-alt-upstream
Open

Sync main-alt with upstream Parca#2
alexon1234 wants to merge 46 commits into
main-altfrom
sync/main-alt-upstream

Conversation

@alexon1234

Copy link
Copy Markdown

Summary

  • Sync main-alt with parca-dev/parca main through upstream commit 87579dc.
  • Preserve Tinybird's three ClickHouse patches:
    • querier bounds/null safety
    • ClickHouse native compression
    • Python/interpreter frame decoding fix

Validation

  • go test ./pkg/clickhouse ./pkg/parca

The merge is intentionally non-rebasing so the fork-only commits remain identifiable.

gnurizen and others added 30 commits May 28, 2026 10:25
 - @parca/web@0.16.1045
 - @parca/profile@0.19.154
* GPU tooltip improvement

* [pre-commit.ci lite] apply automatic fixes

---------

Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com>
 - @parca/web@0.16.1046
 - @parca/profile@0.19.155
Signed-off-by: Stefan Büringer buringerst@vmware.com

Signed-off-by: Stefan Büringer buringerst@vmware.com
 - @parca/web@0.16.1047
 - @parca/components@0.16.421
 - @parca/profile@0.19.156
* Nuqs state updates pushed to history when chosen

* [pre-commit.ci lite] apply automatic fixes

---------

Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com>
 - @parca/web@0.16.1048
 - @parca/profile@0.19.157
…ev#6370)

* External sumby value handled properly in the query state

* Linter fix
 - @parca/web@0.16.1049
 - @parca/components@0.16.422
 - @parca/profile@0.19.158
 - @parca/web@0.16.1050
 - @parca/profile@0.19.159
…v#6374)

* Using nuqs default options to enforce history behaviour

* [pre-commit.ci lite] apply automatic fixes

* touch

* [pre-commit.ci lite] apply automatic fixes

---------

Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com>
 - @parca/web@0.16.1051
 - @parca/components@0.16.423
 - @parca/profile@0.19.160
 - @parca/web@0.16.1052
 - @parca/profile@0.19.161
 - @parca/web@0.16.1053
 - @parca/profile@0.19.162
…arca-dev#6376)

ValidatePprofProfile runs on the WriteRaw ingest path, so it sees
attacker-influenced pprof bytes. Two crashes are reachable there.

First, period_type is an optional field and comes across as a nil
*ValueType when omitted. Every other pointer in the validator is
nil-checked, but the period_type branch dereferences p.PeriodType
directly, so a profile that simply leaves it out panics inside the
validator. Guard it like the rest.

Second, the string-table index checks use > len(StringTable). String
indices are 0-based, so the only valid values are 0..len-1 and an index
equal to len passes the check but is one past the end. Downstream code
(MetaFromPprof, LabelsFromSample) then indexes it and panics. Switch the
eleven 0-based string-index checks to >=. The 1-based id checks
(mapping/function/location) are left as > since len is a valid id there.

Adds a table-driven test covering an omitted period_type and an index
equal to the string-table length for both the sample-type and
period-type paths.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
 - @parca/web@0.16.1054
 - @parca/components@0.16.424
 - @parca/profile@0.19.163
…ca-dev#6378)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…arca-dev#6358)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
….7 [security] (parca-dev#6379)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…y] (parca-dev#6382)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…ty] (parca-dev#6380)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…rca-dev#6381)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…rity] (parca-dev#6383)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…urity] (parca-dev#6384)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot and others added 16 commits July 27, 2026 10:41
….2 [security] (parca-dev#6386)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…curity] (parca-dev#6385)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…curity] (parca-dev#6388)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…y] (parca-dev#6390)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…ev#6394)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 - @parca/web@0.16.1055
…arca-dev#6395)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…ev#6396)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 - @parca/web@0.16.1056
…ev#6397)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 - @parca/web@0.16.1057
…arca-dev#6399)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
….4 [security] (parca-dev#6398)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…curity] (parca-dev#6400)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants