Fix panic caused by invalid spanId with b3 propagator

open-telemetry / opentelemetry-go-contrib

Collection of extensions for OpenTelemetry-Go.

https://opentelemetry.io/

Apache License 2.0

1.08k stars 505 forks source link

Closed Cirilla-zmh closed 2 weeks ago

Cirilla-zmh commented 2 weeks ago

When using the b3 single propagator, the presence of an invalid spanId in the request can trigger a panic.

The panic occurs due to an array index out-of-bounds error when parsing the SpanID without proper length checks for invalid spanIds.

Added a length check for SpanID to prevent this panic by ensuring spanIds are of valid length before processing.

linux-foundation-easycla[bot] commented 2 weeks ago

:x: The email address for the commit (6a7d0fdfb12c5d5f339d1ad7eed56a700746d422) is not linked to the GitHub account, preventing the EasyCLA check. Consult this Help Article and GitHub Help to resolve. (To view the commit's email address, add .patch at the end of this PR page's URL.) For further assistance with EasyCLA, please submit a support request ticket.