Redacting customer information when hide_user_data_from_log is true in rdb.c, networking.c, debug.c and t_hash #3872
Conversation
Signed-off-by: zackcam <zackcam@amazon.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (4)
🚧 Files skipped from review as they are similar to previous changes (4)
📝 WalkthroughWalkthroughThis PR redacts user/key/query contents from selected logs when server.hide_user_data_from_log is enabled, adjusting RDB save/load warnings, stream consumer-group reports, runtime debug key prints, networking QB-limit warnings, and a hash listpack diagnostic. ChangesLogging privacy redaction
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
src/rdb.c (1)
1221-1226: Request@core-teamarchitectural review.Changes to
rdb.crequire architectural review by the core team. As per coding guidelines: "Request@core-teamarchitectural review for changes to cluster*.c, replication.c, rdb.c, or aof.c"Also applies to: 3465-3471, 3516-3520
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@src/rdb.c` around lines 1221 - 1226, This change touches rdb.c (lines around server.hide_user_data_from_log and the serverLog calls) and therefore requires an explicit `@core-team` architectural review per project guidelines; update the PR description and/or add a top-level review request so the core team is notified (mention `@core-team` and note the modified symbols: server.hide_user_data_from_log and the serverLog warning messages that print key/db/rdbver) and ensure you include the other affected hunks (around the same file at the other occurrences referenced) in the review request.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@src/rdb.c`:
- Around line 1221-1226: This change touches rdb.c (lines around
server.hide_user_data_from_log and the serverLog calls) and therefore requires
an explicit `@core-team` architectural review per project guidelines; update the
PR description and/or add a top-level review request so the core team is
notified (mention `@core-team` and note the modified symbols:
server.hide_user_data_from_log and the serverLog warning messages that print
key/db/rdbver) and ensure you include the other affected hunks (around the same
file at the other occurrences referenced) in the review request.
|
Actionable comments posted: 0 |
|
Actionable comments posted: 0 |
Signed-off-by: zackcam <zackcam@amazon.com>
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## unstable #3872 +/- ##
============================================
- Coverage 76.69% 76.53% -0.16%
============================================
Files 162 162
Lines 80679 80694 +15
============================================
- Hits 61874 61760 -114
- Misses 18805 18934 +129
🚀 New features to boost your workflow:
|
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
…n rdb.c, networking.c, debug.c and t_hash (#3872) Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files Made simple if else in order to distinguish for read ability --------- Signed-off-by: zackcam <zackcam@amazon.com>
# Backport sweep for 9.1 Automated cherry-picks from PRs marked "To be backported". ## Applied | Source PR | Title | Detail | |---|---|---| | #3743 | Fix buffered_reply assert in HFE commands with module keyspace notifications | cherry-picked in a prior sweep | | #3766 | Fix flaky block_keyspace_notification test for HGETDEL notify race | cherry-picked in a prior sweep | | #3800 | Fix heap-use-after-free in ACL LOAD when client free is deferred | cherry-picked in a prior sweep | | #3723 | Fix double-finish and RESP reply violation in cluster slot migration | cherry-picked in a prior sweep | | #3872 | Redacting customer information when hide_user_data_from_log is true in rdb.c, networking.c, debug.c and t_hash | cherry-picked in a prior sweep | | #3846 | Fix use-after-free in VM_RegisterClusterMessageReceiver | cherry-picked in a prior sweep | | #3806 | Add ALL_DBS flag to CLUSTER FLUSHSLOT for database-level ACL | cherry-picked in a prior sweep | | #3847 | Harden SENTINEL commands and config rewrite against control-character injection | | | #3801 | Validate every DB clause in COPY against ACL db= permissions | | | #3851 | Replace AUTOMATION_PAT with Valkeyrie Bot GitHub App token | | | #3848 | Fix cluster AUX-field control-character and delimiter injection | | | #3544 | Revert "IO-Threads redesign cleanup work (#3544)" | cherry-picked in a prior sweep | | #3888 | Report exact dbid for COPY in ACL LOG when db= access is denied | conflicts resolved by Claude Code | | #3942 | Fix shard_id format specifier in UPDATE message log | | | #3941 | Avoid random() % 0 undefined behaviour when cluster-node-timeout < 30 | | --- *Generated by valkey-ci-agent using Claude Code.* --------- Signed-off-by: Binbin <binloveplay1314@qq.com> Signed-off-by: Ran Shidlansik <ranshid@amazon.com> Signed-off-by: chx9 <lovelypiska@outlook.com> Signed-off-by: zackcam <zackcam@amazon.com> Signed-off-by: Eran Ifrah <eifrah@amazon.com> Signed-off-by: Jules Lasarte <lasartej@amazon.com> Signed-off-by: jjuleslasarte <jules.lasarte@gmail.com> Signed-off-by: akash kumar <akumdev@amazon.com> Co-authored-by: Binbin <binloveplay1314@qq.com> Co-authored-by: Ran Shidlansik <ranshid@amazon.com> Co-authored-by: lovelypiska <lovelypiska@outlook.com> Co-authored-by: zackcam <zackcam@amazon.com> Co-authored-by: eifrah-aws <eifrah@amazon.com> Co-authored-by: jjuleslasarte <jules.lasarte@gmail.com> Co-authored-by: Jules Lasarte <lasartej@amazon.com> Co-authored-by: Akash Kumar <45854686+akashkgit@users.noreply.github.com>
Removing logging key names when hide_user_data_from_log is true in rdb.c file as well as networking.c, t_hash.c and debug.c files
Made simple if else in order to distinguish for read ability