From 87be8b9c06e440be7144464c606be5f82e29092f Mon Sep 17 00:00:00 2001
From: Mirko Lazarevic <mirko.lazarevic@ibm.com>
Date: Mon, 12 Aug 2024 09:31:08 +0200
Subject: [PATCH] engine:enhanced byte order handling for timestamps

This change ensures correct byte order conversions for
timestamp fields within log event decoder and encoder.

Added FLB_TO_NATIVE_UINT32 in flb_endian.h. This function checks the
host machine's byte order and applies the necessary conversion for 32-bit
unsigned integers.

Co-authored-by: Bernhard Schmid <bernhard.schmid@de.ibm.com>
Signed-off-by: Mirko Lazarevic <mirko.lazarevic@ibm.com>
---
 include/fluent-bit/flb_byteswap.h      | 10 ++++++++++
 src/flb_log_event_decoder.c            |  4 ++--
 src/flb_log_event_encoder_primitives.c |  6 ++++--
 3 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/include/fluent-bit/flb_byteswap.h b/include/fluent-bit/flb_byteswap.h
index b166378b53f..e64ed941267 100644
--- a/include/fluent-bit/flb_byteswap.h
+++ b/include/fluent-bit/flb_byteswap.h
@@ -21,6 +21,7 @@
 #define FLB_BYTESWAP_H
 
 #include <stdint.h>
+#include <fluent-bit/flb_endian.h>
 
 #if defined(FLB_HAVE_WIN32_BYTESWAP)
 #include <stdlib.h>
@@ -102,4 +103,13 @@ static inline uint64_t FLB_BSWAP_64(uint64_t value)
 
 #endif
 
+static inline uint32_t FLB_UINT32_TO_HOST_BYTE_ORDER(uint32_t value)
+{
+    #if FLB_BYTE_ORDER == FLB_LITTLE_ENDIAN
+        return FLB_BSWAP_32(value);
+    #else
+        return value;
+    #endif
+}
+
 #endif
diff --git a/src/flb_log_event_decoder.c b/src/flb_log_event_decoder.c
index 3e8ca6e56d4..a63d674a12a 100644
--- a/src/flb_log_event_decoder.c
+++ b/src/flb_log_event_decoder.c
@@ -181,12 +181,12 @@ int flb_log_event_decoder_decode_timestamp(msgpack_object *input,
         }
 
         output->tm.tv_sec  = 
-            (int32_t) FLB_BSWAP_32(
+            (int32_t) FLB_UINT32_TO_HOST_BYTE_ORDER(
                         FLB_ALIGNED_DWORD_READ(
                             (unsigned char *) &input->via.ext.ptr[0]));
 
         output->tm.tv_nsec  = 
-            (int32_t) FLB_BSWAP_32(
+            (int32_t) FLB_UINT32_TO_HOST_BYTE_ORDER(
                         FLB_ALIGNED_DWORD_READ(
                             (unsigned char *) &input->via.ext.ptr[4]));
     }
diff --git a/src/flb_log_event_encoder_primitives.c b/src/flb_log_event_encoder_primitives.c
index dbcb4a4b808..954b7b5ea5b 100644
--- a/src/flb_log_event_encoder_primitives.c
+++ b/src/flb_log_event_encoder_primitives.c
@@ -22,6 +22,8 @@
 #include <fluent-bit/flb_byteswap.h>
 #include <stdarg.h>
 
+#define FLB_UINT32_TO_NETWORK_BYTE_ORDER(value) FLB_UINT32_TO_HOST_BYTE_ORDER(value)
+
 static inline \
 int translate_msgpack_encoder_result(int value)
 {
@@ -519,8 +521,8 @@ int flb_log_event_encoder_append_forward_v1_timestamp(
 {
     uint32_t value[2];
 
-    value[0] = FLB_BSWAP_32((uint32_t) timestamp->tm.tv_sec);
-    value[1] = FLB_BSWAP_32((uint32_t) timestamp->tm.tv_nsec);
+    value[0] = FLB_UINT32_TO_NETWORK_BYTE_ORDER((uint32_t) timestamp->tm.tv_sec);
+    value[1] = FLB_UINT32_TO_NETWORK_BYTE_ORDER((uint32_t) timestamp->tm.tv_nsec);
 
     return flb_log_event_encoder_append_ext(context, target_field,
                                             0, (char *) value, 8);