Security Update Messages take a long time to be displayed

Created on 18 March 2014, over 10 years ago
Updated 1 September 2024, 3 months ago

I first found this issue in a Drupal 7 site I help maintain. I will use Drupal 8 dev line numbers below. It is not a bug, but a performance issue question.

Symptom: Any time an /admin page was accessed, I noticed the page load times could be 2-5 seconds, compared to other pages that were about a second.

After a lot of digging, I found the function update_page_build() in update.module (line 96) which makes the decision on whether to show the message or not. The switch statement has no default case. This means that any /admin page not in the first list ('additional nagging'), will always show the message.

While I understand wanting to display the nag message as often as possible, it seems a little excessive to slow down almost all of the /admin pages figuring out if the message should be displayed.

"Why is it so slow?" you ask. I tracked it down two factors: The number of modules on the site and the progressive slowness of an array_merge() function call in file_scan_directory() in file.inc (line 1197).

By the time file_scan_directory() gets done, it's cataloged 256 elements. I don't know if that is a lot, but it's at the top end for us.

In my limited understanding, array_merge() tends to get progressively slower the more elements are in the array.

My temporary solution is to change the switch statement to include a default case like this:

    switch (current_path()) {
      // These pages don't need additional nagging.
      case 'admin/appearance/update':
      case 'admin/appearance/install':
      case 'admin/modules/update':
      case 'admin/modules/install':
      case 'admin/reports/updates':
      case 'admin/reports/updates/update':
      case 'admin/reports/updates/install':
      case 'admin/reports/updates/settings':
      case 'admin/reports/status':
      case 'admin/update/ready':
        return;

      // If we are on the appearance or modules list, display a detailed report
      // of the update status.
      case 'admin/appearance':
      case 'admin/modules':
        $verbose = TRUE;
        break;
      default:
        return;

    }

This allows the nag message to only be displayed on admin/appearance and admin/modules pages. Perhaps this could be a configurable decision.

Another possible solution would be to replace the array_merge() in file.inc with another faster function. Example: http://www.bitbybit.dk/carsten/blog/?p=203

Just a thought...

πŸ› Bug report
Status

Closed: outdated

Version

11.0 πŸ”₯

Component
UpdateΒ  β†’

Last updated about 4 hours ago

  • Maintained by
  • πŸ‡ΊπŸ‡ΈUnited States @tedbow
  • πŸ‡ΊπŸ‡ΈUnited States @dww
Created by

πŸ‡ΊπŸ‡ΈUnited States dpearcefl

Live updates comments and jobs are added and updated live.
  • Performance

    It affects performance. It is often combined with the Needs profiling tag.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡³πŸ‡ΏNew Zealand quietone

    This issue was discovered with Drupal 7 10 years ago. There has been no further discussion here about the problem or any confirmation of the problem. And certainly not against a currently supported version of Drupal 10. This suggests that this is outdated.

    I think to continue here we need confirmation of the problem. Therefore, I am setting the status to Postponed (maintainer needs more info). If we don't receive additional information to help with the issue, it may be closed after three months.

    Thanks!

  • Status changed to Closed: outdated 3 months ago
  • πŸ‡³πŸ‡ΏNew Zealand quietone

    Confirmation that the problem still exists has not been supplied, therefore closing.

    Thanks!

Production build 0.71.5 2024