bucket: avoid crashing on malformed expression (fix #3351)

[mmetc]

No description provided.

[github-actions]

@mmetc: There are no 'kind' label on this PR. You need a 'kind' label to generate the release automatically.

• /kind feature
• /kind enhancement
• /kind refactoring
• /kind fix
• /kind chore
• /kind dependencies

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[github-actions]

@mmetc: There are no area labels on this PR. You can add as many areas as you see fit.

• /area agent
• /area local-api
• /area cscli
• /area appsec
• /area security
• /area configuration

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[codecov]

Codecov Report

Attention: Patch coverage is 85.71429% with 3 lines in your changes missing coverage. Please review.

Project coverage is 59.34%. Comparing base (5260cf1) to head (d960f16).
Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
pkg/leakybucket/uniq.go	40.00%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3368      +/-   ##
==========================================
- Coverage   59.35%   59.34%   -0.02%     
==========================================
  Files         361      361              
  Lines       38954    38965      +11     
==========================================
  Hits        23123    23123              
- Misses      13906    13916      +10     
- Partials     1925     1926       +1     

Flag	Coverage Δ
bats	41.62% <23.80%> (-0.05%)	⬇️
unit-linux	33.64% <85.71%> (-0.02%)	⬇️
unit-windows	28.41% <85.71%> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[mmetc]

this has issues, we should compile on bucket load. see also #3371

[buixor]

should we also try to compile the uniq/distinct in func LoadBucket ? It will allow us to see it earlier. Otherwise, this can work