Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-40941

Images with very large dimensions cause thumbnail generation to OOME the instance

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      cntech.atlassian.net had a couple of thumbnail-related OOMEs. This is caused by a smallish png ~3.8MB but with a 26000x24000 dimension. You can easily reproduce the problem by just generating an image with a white background of that dimension.

      convert -size 26000x24000 xc:white oom.png
      

      Similar to JRA-40084, I think we should reject images above a configurable dimension, causing the image to be marked as thumbnailable=0

      Possible Solutions:

      • Thumber should reject images above a configurable dimension.

            [JRASERVER-40941] Images with very large dimensions cause thumbnail generation to OOME the instance

            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2835140 ] New: JAC Bug Workflow v3 [ 2925049 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JIRA Bug Workflow w Kanban v7 - Restricted [ 2563438 ] New: JAC Bug Workflow v2 [ 2835140 ]
            Ignat (Inactive) made changes -
            Workflow Original: JIRA Bug Workflow w Kanban v6 - Restricted [ 1543999 ] New: JIRA Bug Workflow w Kanban v7 - Restricted [ 2563438 ]
            Deleted Account (Inactive) made changes -
            Fix Version/s New: 1000.1112.0 [ 72809 ]
            Deleted Account (Inactive) made changes -
            Fix Version/s New: 2017-07-06-22-45-08_2017-07-06_6b55650941 [ 72686 ]
            jonah (Inactive) made changes -
            Description Original: [cntech.atlassian.net|http://zoome2.uc-inf.net/zoome/_design/zoome2/public/search.html#filter_params%5Binstance%5D=cntech.atlassian.net&filter_params%5Bcause%5D=&filter_params%5Bapplication%5D=&filter_params%5Bdays_ago%5D=30&filter_params%5Bquery_time%5D=1416293348308] had a couple of thumbnail-related OOMEs. This is caused by a smallish png ~3.8MB but with a 26000x24000 dimension. You can easily reproduce the problem by just generating an image with a white background of that dimension.

            {code}
            convert -size 26000x24000 xc:white oom.png
            {code}

            Similar to JRA-40084, I think we should reject images above a configurable dimension, causing the image to be marked as thumbnailable=0

            Possible Solutions:
            - Thumber should reject images above a configurable dimension.
            New: {panel:bgColor=#e7f4fa}
              *NOTE:* This bug report is for *JIRA Server*. Using *JIRA Cloud*? [See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-40941].
              {panel}

            [cntech.atlassian.net|http://zoome2.uc-inf.net/zoome/_design/zoome2/public/search.html#filter_params%5Binstance%5D=cntech.atlassian.net&filter_params%5Bcause%5D=&filter_params%5Bapplication%5D=&filter_params%5Bdays_ago%5D=30&filter_params%5Bquery_time%5D=1416293348308] had a couple of thumbnail-related OOMEs. This is caused by a smallish png ~3.8MB but with a 26000x24000 dimension. You can easily reproduce the problem by just generating an image with a white background of that dimension.

            {code}
            convert -size 26000x24000 xc:white oom.png
            {code}

            Similar to JRA-40084, I think we should reject images above a configurable dimension, causing the image to be marked as thumbnailable=0

            Possible Solutions:
            - Thumber should reject images above a configurable dimension.
            jonah (Inactive) made changes -
            Link New: This issue relates to JRACLOUD-40941 [ JRACLOUD-40941 ]
            Confluence Escalation Bot (Inactive) made changes -
            Labels Original: affects-cloud denial-of-service jira-ninjas security New: affects-cloud affects-server denial-of-service jira-ninjas security
            Confluence Escalation Bot (Inactive) made changes -
            Labels Original: denial-of-service jira-ninjas security New: affects-cloud denial-of-service jira-ninjas security
            Owen made changes -
            Workflow Original: JIRA Bug Workflow w Kanban v6 [ 769897 ] New: JIRA Bug Workflow w Kanban v6 - Restricted [ 1543999 ]

              ohernandez@atlassian.com Oswaldo Hernandez (Inactive)
              fakraemer fabs (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: