tree 9d89161610354fddc97b57b3f4e81755d677a898
parent 68bdbb24fe493638d937120c08927398604c55af
author Miraç Vuslat Başaran <miracvbasaran@gmail.com> 1627388431 +0200
committer GitHub <noreply@github.com> 1627388431 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJg//oPCRBK7hj4Ov3rIwAA4zwIADsj2znaf8aLt9kju0Xvkt8Z
 eJTLddD1spPPSQVEe6w70uooNl1mxisrWyRKZl24UIeKtPQXYAv0Evp3GwR7cQwy
 kQGbn3/mdNy2Zqlq+zqYhn8auPkGSSauH22lyB2ZqramYfTV2puCljx5h/8f+P/e
 x1evIzssAp3a71dubLyYGwIEeWSrIxa5n0Azmj4Sd2JrLsztQCYK+9x0024E7aiS
 D28MbfMbwI9r5lld0BMoshRhRhcIofC/xlnshaVk99KIi7kHU1t9durLyvqnaB6g
 /ljBkjFkisvrZAvIUj4zLuTCGqGKFxbs3ZpQDhobdF6735Sx40QqiDh3QyOx4jU=
 =dG+1
 -----END PGP SIGNATURE-----
 

Fix a rare privacy bug in DistinctPerKey in Privacy on Beam. (#84)

The bug occurred when there are outlier users in the input that
contribute to many partitions and/or to many values AND the
values contributed are the same as values from other users (the second
part is critical, if the contributed values only come from a single user
then the bug does not occur). Then, the output might not have be DP due
to incorrect contribution bounding. See the comments in the newly added
tests for concrete examples of when/how the bug used to occur.

This is cherry-picked from the main branch commit
e149618d032f97b476fecc5839a278cc680def08.

This commit includes a minor change compared to the one on the main
branch: It removes the error output for kv.Codec.Encode/Decode
functions used in aggregations.go since the error output for these
functions weren't implemented in v1.0.0.