new(libsinsp): add debug information for corrupted (mismatched len) events

[LucaGuerra]

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind feature

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area libsinsp

Does this PR require a change in the driver versions?

No

What this PR does / why we need it:

For falcosecurity/falco#3275 , one option is to add a debug print when we find this kind of issue. This can help us debug the driver in case something unexpected happen. Also, add a test for a corrupted string in an event.

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

new(libsinsp): add debug information for corrupted (mismatched len) events

[LucaGuerra]

/milestone 0.18.0

but if we make a patch release it would be 0.17.x IMO

[Andreagit97]

Just a comment about the severity but it' s almost the same in the end

[poiana]

LGTM label has been added.

Git tree hash: c3ae361bfc6448c801416c8bca7a24e5e4e04b1c

[github-actions]

Perf diff from master - unit tests

     3.97%     +1.99%  [.] sinsp_evt::get_type
     4.37%     +1.06%  [.] sinsp_parser::process_event
     2.84%     +0.99%  [.] sinsp_thread_manager::get_thread_ref
     4.64%     -0.94%  [.] next
     4.56%     -0.83%  [.] std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release
     1.53%     -0.82%  [.] scap_next
     3.97%     -0.73%  [.] gzfile_read
     2.24%     -0.73%  [.] sinsp::fetch_next_event
     1.80%     -0.52%  [.] libsinsp::sinsp_suppress::process_event
     1.48%     -0.50%  [.] 0x00000000000e83b0

Perf diff from master - scap file

     7.29%     +8.54%  [.] sinsp_evt_formatter::tostring_withformat
    14.35%     -6.65%  [.] sinsp_filter_check_event::extract_single
    10.24%     -4.10%  [.] std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_construct<char*>
    14.38%     -2.65%  [.] std::_Hashtable<long, std::pair<long const, std::shared_ptr<sinsp_threadinfo> >, std::allocator<std::pair<long const, std::shared_ptr<sinsp_threadinfo> > >, std::__detail::_Select1st, std::equal_to<long>, std::hash<long>, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<false, false, true> >::_M_find_before_node
     7.17%     +2.42%  [.] sinsp_filter_check::extract_nocache
     3.65%     +2.34%  [.] sinsp_filter_check::tostring
     3.65%     +2.31%  [.] sinsp_filter_check::get_field_info
     3.27%     +2.14%  [.] std::_Hashtable<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::unordered_map<unsigned int, scap_userinfo, std::hash<unsigned int>, std::equal_to<unsigned int>, std::allocator<std::pair<unsigned int const, scap_userinfo> > > >, std::allocator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, std::unordered_map<unsigned int, scap_userinfo, std::hash<unsigned int>, std::equal_to<unsigned int>, std::allocator<std::pair<unsigned int const, scap_userinfo> > > > >, std::__detail::_Select1st, std::equal_to<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::hash<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::__detail::_Mod_range_hashing, std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy, std::__detail::_Hashtable_traits<true, false, true> >::find
    10.72%     -2.10%  [.] next
     3.62%     -0.25%  [.] std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_construct<char const*>

Heap diff from master - unit tests

total runtime: -0.09s.
calls to allocation functions: -1626 (18477/s)
temporary memory allocations: -149 (1693/s)
peak heap memory consumption: -402B
peak RSS (including heaptrack overhead): 0B
total memory leaked: 0B

Heap diff from master - scap file

total runtime: 0.01s.
calls to allocation functions: -1 (-83/s)
temporary memory allocations: 0 (0/s)
peak heap memory consumption: 0B
peak RSS (including heaptrack overhead): 0B
total memory leaked: 0B

[Andreagit97]

/approve

[poiana]

LGTM label has been added.

Git tree hash: dee23d70f6cccdcc2f02d5915ca0e6cc5b442fc4

[FedeDP]

/approve

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Andreagit97, FedeDP, LucaGuerra

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Andreagit97,FedeDP,LucaGuerra]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[FedeDP]

/milestone 0.17.3