Topic expiry task loads the whole JDBC topic store into the heap on PostgreSQL (AMQ-6067 fix is ineffective with pgjdbc)
Los mantenedores suelen responder en 1 día
@papinifrancesco ya está trabajando en esto.
Desde el 2/10/2026.
- #2634 de @papinifrancesco — abierto
Evaluación
- Dificultad
- 4/5
- Tiempo estimado
- 3-5 días
- Aptitud para principiantes
- 48/100
- Tipo de issue
- Error
- Claridad
- Bastante claro
- Estado de actividad
- Activo
- Stack tecnológico
- java, postgresql
- Área
- backend, databases, performance
Línea de trabajo
Start with Topic.java, JDBCMessageStore.java, and DefaultJDBCAdapter.java at the referenced expiry and recovery paths. Run the linked synthetic PostgreSQL reproduction, then compare the JDBC recovery behavior with the bounded KahaDB path and existing setMaxRows calls. Done means topic expiry no longer loads the full JDBC result set and remains bounded by maxExpirePageSize.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
Summary
With the JDBC persistence adapter, the periodic topic expiry task (Topic.expireMessagesTask, every expireMessagesPeriod, default 30 s) falls back to Topic.doBrowse(). That calls JDBCMessageStore.recover() → DefaultJDBCAdapter.doRecover(), which runs
SELECT ID, MSG FROM ACTIVEMQ_MSGS WHERE CONTAINER=? ORDER BY ID
with no setMaxRows() and no fetch size. AMQ-6067 made the recovery listener stop after maxExpirePageSize (400) messages. That is enough for drivers that stream rows, but the PostgreSQL driver reads the entire result set into memory inside executeQuery(), before the first rs.next(). On PostgreSQL, every run therefore loads every stored message of the topic (the whole durable-subscription backlog) into the heap, only to use 400 of them.
Reproduction: https://github.com/papinifrancesco/activemq-jdbc-topic-expiry-oom reproduces it on 6.2.10 and 6.3.2, with synthetic data, heap dumps and a one-click GitHub Actions workflow (details below).
Environment
- ActiveMQ 6.2.6 when it happened; the same code is in 6.2.10 and 6.3.2 (references below)
- JDBC persistence adapter on PostgreSQL (pgjdbc 42.7.x, commons-dbcp2), default statements and table names
- One topic with a durable subscription whose consumer fell behind during a bulk load: ~347,000 persistent messages of ~5 KB stored
- JVM heap ≈ 2.4 GB, default
expireMessagesPeriod, no message sets a TTL
What happened
The broker stopped with java.lang.OutOfMemoryError: Java heap space. In the heap dump (Eclipse MAT, Leak Suspects), 69% of the heap (1.78 GB) was one ArrayList local to the thread ActiveMQ BrokerService[activemq] Task-614, holding 346,764 org.postgresql.core.Tuple (693,531 byte[]). Stack of that thread (line numbers from 6.2.6):
org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2387)
org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:372)
org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:517)
org.postgresql.jdbc.PgPreparedStatement.executeQuery(PgPreparedStatement.java:137)
org.apache.commons.dbcp2.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:123)
org.apache.activemq.store.jdbc.adapter.DefaultJDBCAdapter.doRecover(DefaultJDBCAdapter.java:406)
org.apache.activemq.store.jdbc.JDBCMessageStore.recover(JDBCMessageStore.java:279)
org.apache.activemq.store.ProxyTopicMessageStore.recover(ProxyTopicMessageStore.java:63)
org.apache.activemq.broker.region.Topic.doBrowse(Topic.java:678)
org.apache.activemq.broker.region.Topic.lambda$new$2(Topic.java:920)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
The thread is still inside executeQuery(), receiving tuples: the listener's hasSpace() check (AMQ-6067) never gets a chance to stop it.
Reproduction (synthetic, public)
https://github.com/papinifrancesco/activemq-jdbc-topic-expiry-oom uses only the official binary distributions, a stock PostgreSQL 17 and the broker's own activemq consumer / activemq producer CLI. A GitHub Actions workflow runs four cases. Each run offers 200,000 × 5 KB persistent messages, no TTL, to a topic with one offline durable subscriber, on a 1 GB heap:
| ActiveMQ | Store | expireMessagesPeriod |
Result |
|---|---|---|---|
| 6.2.10 | JDBC / PostgreSQL | default | OutOfMemoryError at ~86k stored rows, Failed to browse Topic WARN, browse caught 3× in DefaultJDBCAdapter.doRecover |
| 6.3.2 | JDBC / PostgreSQL | default | OutOfMemoryError at ~89k stored rows, broker exits, same stack |
| 6.2.10 | JDBC / PostgreSQL | 0 |
all 200,000 rows stored, no OOM |
| 6.2.10 | KahaDB | default | no OOM |
- Run: https://github.com/papinifrancesco/activemq-jdbc-topic-expiry-oom/actions/runs/36845523696
- Evidence, including both heap dumps and a MAT Leak Suspects report: https://github.com/papinifrancesco/activemq-jdbc-topic-expiry-oom/releases/tag/evidence-2026-10-01
MAT on the 6.2.10 dump: thread ActiveMQ BrokerService[repro] Task-3 retains 53.8% of the heap in 54,343 org.postgresql.core.Tuple objects. Its stack is the same as above (Topic.lambda$new$2:950 → Topic.doBrowse:691 → JDBCMessageStore.recover:279 → DefaultJDBCAdapter.doRecover:406 → executeQuery). Most of the remaining heap (28%) was the durable subscription's pending cache. We capped that separately with a topic memoryLimit; it is not part of this report.
Code references (6.3.2; same code on activemq-6.2.x)
Topic.java:930usesstore.recoverExpired(...)only whenstore.getType() == StoreType.KAHADB(added by AMQ-9698). Any other store takesTopic.java:980-982:doBrowse(new InsertionCountList<>(), getMaxExpirePageSize()). Onactivemq-6.2.xthese are lines 898 and 950.DefaultJDBCAdapter.java:399-404:doRecoverrunsfindAllMessagesStatementwith no limit. The other recovery queries in the same class do limit it:setMaxRows(...)at lines 433, 593, 627 and 1068.JDBCMessageStore.java:274-296: thehasSpace()check per row (AMQ-6067) runs afterexecuteQuery()has returned.- Both JDBC files have the same line numbers on
activemq-6.2.x.
Why the AMQ-6067 fix does not cover PostgreSQL
AMQ-6067 was reported on Oracle, whose driver streams rows (default fetch size 10), so stopping after 400 rows fixed it there. pgjdbc buffers the whole result set unless the connection is not in autocommit mode and a fetch size is set (pgjdbc docs, "Getting results based on a cursor"). doRecover sets no fetch size, and the stack above shows the driver buffering the full result set. MySQL Connector/J also buffers full result sets by default, so it is probably affected too; we have not tested it.
Expected behaviour
The expiry browse of a JDBC topic store reads at most maxExpirePageSize rows, as it effectively does with KahaDB.
Possible fixes (for discussion)
- Give
doRecovera limit and calls.setMaxRows(limit), like the other recovery methods.doBrowsealready knowsmax. - Implement
recoverExpiredfor the JDBC store with a bounded query on the existing indexed column (ACTIVEMQ_MSGS_EIDX), e.g.... WHERE CONTAINER=? AND EXPIRATION > 0 AND EXPIRATION < ?. The fallback would then be unnecessary, and a topic whose messages have no TTL would return zero rows. - At least, skip the browse when no stored message of the topic has
EXPIRATION > 0.
Workaround
expireMessagesPeriod="0" on the topic policyEntry. Expired messages are still discarded at dispatch (PrefetchSubscription.dispatchPending). They are no longer removed while a durable subscriber is offline, though: the JDBC cleanup (doDeleteOldMessages) only deletes acknowledged rows.
The production heap dump cannot be shared, because it contains customer data. The reproduction above gives the same stack and the same retention pattern with synthetic data only.
- Lenguaje dominante
- Java
- Estrellas
- 2.5k
- Forks
- 1.5k
- Merge medio
- 21 h 38 min
- PR fusionados (30 d)
- 81
Preparar el entorno
Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de apache/activemq
-
HttpMaxFrameSizeTest.sendOversizedMessageTest() passes silently when maxFrameSize is not enforcedAbierto
Dificultad 1/5 Menos de una hora Aptitud para principiantes 90/100
apache/activemq#2706 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
Treat socketBufferSize=0 as OS default without logging a warningPosiblemente ocupada @mwashburn2 la tomó hace 7 días. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100
Los mantenedores suelen responder en 1 día
-
ServerSessionImpl gets stuck if the WorkManager encounteres a RejectedExecutionExceptionPosiblemente ocupada Un pull request vinculado a esta issue está abierto o ya se fusionó. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 67/100
apache/activemq#2647 · 5 comentarios ·
Los mantenedores suelen responder en 1 día
-
AmqpMessage.reject() throws "Can't release non-received message." (copy-paste from release())Posiblemente ocupada @dimitribekale la tomó hace 6 días. Abierto
Dificultad 1/5 Menos de una hora Aptitud para principiantes 95/100
apache/activemq#2623 · 5 comentarios ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 74/100
apache/activemq#2558 · 2 comentarios ·
Los mantenedores suelen responder en 1 día
Todos los issues de apache/activemq
Issues similares
-
staticAssetsPath follows symlinks outside the directory on WindowsPosiblemente ocupada @ybelMekk la tomó hoy. Abiertobug security findings
Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100
navikt/mock-oauth2-server#1132 ·
Los mantenedores suelen responder en 1 día
-
agent:working follow-up
Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100
Sanne/incus-spawn#1683 · 2 comentarios ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100
checkstyle/checkstyle#22210 ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 67/100
google/error-prone#6239 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
[Failing Test]: BigqueryClient.queryUnflattened fails BigQuery ITs on a transient 503Posiblemente ocupada @mxtymoshyk la tomó hoy. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 77/100
Los mantenedores suelen responder en 1 día