On 17/4/20 6:14 μ.μ., Imre Samu wrote:
> it killed my 200+ days uptime FreeBSD box :( .
> As I describe above, those attachments are nowhere as files.
> They are email attachments. Also we got about half TB of them.

it is possible - that  some image is a "decompression bomb" ?

/"Because of the efficient compression method used in Portable Network Graphics (PNG) files, a small PNG file can expand tremendously, acting as a "decompression bomb". *Malformed PNG chunks can consume a large amount of CPU and wall-clock time and large amounts of memory, up to all memory available on a system, causing a Denial of Service (DoS).* Libpng-1.4.1 has been revised to use less CPU time and memory, and provides functions that applications can use to further defend against such files."/
https://libpng.sourceforge.io/decompression_bombs.html
https://stackoverflow.com/questions/33602308/how-to-check-png-file-if-its-a-decompression-bomb

Regards,
 Imre


Thank you  a lot Imre. Great info.




Achilleas Mantzios <ach...@matrix.gatewaynet.com <mailto:ach...@matrix.gatewaynet.com>> ezt írta (időpont: 2020. ápr. 17., P, 16:39):

    On 17/4/20 4:09 μ.μ., Adam Brusselback wrote:

    Why not extract and store that metadata with the image rather
    than trying to extract it to filter on at query time? That way
    you can index your height and width columns to speed up that
    filtering if necessary.

    Yes I thought of that, but those are coming automatically from our
    mail server (via synonym), we have written an alias : a program
    that parses and stores emails. This is generic, I wouldn't like to
    add specific code (or specific columns) just for image
    attachments. However I dig the idea of the indexes.
    You may be able to write a wrapper for a command line tool like
    imagemagic or something so you can call that from a function to
    determine the size if you did want to stick with extracting that
    at query time.
    As I describe above, those attachments are nowhere as files. They
    are email attachments. Also we got about half TB of them.

Reply via email to