Additional info: I have an "Update contact" job in the worker queue that has been stuck for 6 days. The contact is: hexbear.net/u/Florn
As I've noticed previously, this is a contact with an animated GIF as an avatar. Every time this happened, blocking the contact, and deleting the job from the worker queue, fixes the problem.
Recently, Google announced a security issue in Google Chrome, titled "Heap buffer overflow in WebP in Google Chrome." Initially, it seemed like just another bug in the popular web browser.
@FeralRobots I doubt it. The common factor is apparently genuine accounts with animated avatars, and it's now happened several times. I think the Friendica worker has some sort of size limit for avatars, and when one exceeds it, it's not failing gracefully, but instead bunging up the system.
PSA, guys, yes, your animated GIF avatars are lovely. Also, the Fediverse consists of thousands of servers, many of which are self hosted. Consider whether your avatar which goes on for megabyte upon megabyte is maybe a little bit antisocial?
So my suspicion was right: it's animated GIF avatars which are causing this. However, rather than fail gracefully, I'm left with a zombie worker job which seems to persist forever.
Sarah Brown
in reply to Sarah Brown • •Additional info: I have an "Update contact" job in the worker queue that has been stuck for 6 days. The contact is: hexbear.net/u/Florn
As I've noticed previously, this is a contact with an animated GIF as an avatar. Every time this happened, blocking the contact, and deleting the job from the worker queue, fixes the problem.
This is happening on both 2024.03 and 2024.08
Friendica Support reshared this.
FeralRobots
in reply to Sarah Brown • • •blog.cloudflare.com/uncovering…
Uncovering the Hidden WebP vulnerability: a tale of a CVE with much bigger implications than it originally seemed
The Cloudflare BlogFriendica Support reshared this.
Sarah Brown
in reply to FeralRobots • •@FeralRobots I doubt it. The common factor is apparently genuine accounts with animated avatars, and it's now happened several times. I think the Friendica worker has some sort of size limit for avatars, and when one exceeds it, it's not failing gracefully, but instead bunging up the system.
PSA, guys, yes, your animated GIF avatars are lovely. Also, the Fediverse consists of thousands of servers, many of which are self hosted. Consider whether your avatar which goes on for megabyte upon megabyte is maybe a little bit antisocial?
FeralRobots likes this.
Friendica Support reshared this.
FeralRobots
in reply to Sarah Brown • • •Friendica Support reshared this.
Sarah Brown
in reply to FeralRobots • •@FeralRobots Have now had to block and purge 6 people because of it. Wonder if any of them are wondering what they've done wrong?
Guys, you're crashing my server!
Friendica Support reshared this.
Sarah Brown
in reply to FeralRobots • •FeralRobots likes this.
Friendica Support reshared this.
Sarah Brown
in reply to Sarah Brown • •FeralRobots likes this.
Friendica Support reshared this.
Sarah Brown
in reply to Sarah Brown • •Further update: Confirmed that purging the contact makes the error go away.
Maybe this is a problem with avatar graphics that are too large, and it just keeps trying forever rather than backing off gracefully?
Friendica Support reshared this.
Sarah Brown
in reply to Sarah Brown • •OK, more digging. It's failing in line 231 of /var/www/html/src/Object/Image.php.
Which is this:
So my suspicion was right: it's animated GIF avatars which are causing this. However, rather than fail gracefully, I'm left with a zombie worker job which seems to persist forever.
Friendica Support reshared this.
Adam
in reply to Sarah Brown • • •Friendica Support reshared this.