fix: guard setTraceId against malformed trace IDs

Author: marcsanmi

lib/src/main/java/io/otel/pyroscope/PyroscopeOtelSpanProcessor.java

@@ -66,7 +66,11 @@ public void onStart(Context parentContext, ReadWriteSpan span) {
         // W3C trace ID is 32 hex chars (128 bits). Parse directly into two longs
         // to avoid the String#substring allocations on this hot path.
         String traceId = span.getSpanContext().getTraceId();
-        asprof.setTraceId(parseHex64(traceId, 0), parseHex64(traceId, 16));
+        try {
+            asprof.setTraceId(parseHex64(traceId, 0), parseHex64(traceId, 16));
+        } catch (NumberFormatException | IndexOutOfBoundsException e) {
+            asprof.setTraceId(0, 0);
+        }
     }
 
     @Override

otel-extension/src/main/java/io/otel/pyroscope/PyroscopeOtelSpanProcessor.java

@@ -52,7 +52,11 @@ public void onStart(Context parentContext, ReadWriteSpan span) {
 
         span.setAttribute(ATTRIBUTE_KEY_PROFILE_ID, strProfileId);
         api.setTracingContext(spanId, spanName);
-        api.setTraceId(span.getSpanContext().getTraceId());
+        try {
+            api.setTraceId(span.getSpanContext().getTraceId());
+        } catch (NumberFormatException | IndexOutOfBoundsException e) {
+            api.clearTraceId();
+        }
     }
 
     @Override