in_splunk: fix the invalid data format response when submitting valid data.

[pwhelan]

Summary

The in_splunk plugin is responding with {"text": "Invalid data format"} even when submitting valid payloads.

---

Fluent Bit is licensed under Apache 2.0, by submitting this pull request I understand that this code will be released under the terms of that license.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch pwhelan-fix-in-splunk-invalid-data-format-http1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cosmo0920]

Ah, we need to resolve CI Fuzz task failure.

[pwhelan]

Ah, we need to resolve CI Fuzz task failure.

The bug seems to be a memory leak when encountering an extremely hard to reproduce parsing error for CLIST or SLIST options. Despite that I did manage to reproduce it artificially and have a fix for it. I am opening a separate set of PRs for that fix.

[cosmo0920]

Got it. Then we need to handle them at first.

[pwhelan]

Got it. Then we need to handle them at first.

I've done the best I can here:

• engine: fix memory leaks with parse error handling in parse_string_map_to_list. #10943
• engine: fix memory leaks with parse error handling in parse_string_map_to_list (backport of #10943). #10944

The memory leaks in the fuzzers seem to happen sporadically, I left some comments about it in #10944.