Enterprise OS
/
Board
/
Sprint 14
/
FLT-460
FLT-460
Depot sync worker crashes on malformed odometry frame
Description
Sync worker on depot-relay-03 throws an unhandled deserialization exception when it receives an odometry frame with a negative wheel-tick delta. This crashes the worker pod and stalls the whole sync queue for that depot until a manual restart.
- Reproduced on firmware v4.2.1 units after a cold GPS reacquire
- Confirmed 6 depots affected in the last 72 hours
- Proposed fix: validate frame bounds before decode, quarantine bad frames instead of dropping the worker
Subtasks
1 / 3 complete
FLT-460b
Add frame-bounds validation to the odometry parser
FLT-460c
Write integration test covering malformed-frame quarantine path
Attachments
relay-03-crashdump-2026-07-22.log
Drop files here or click to upload
Comments · 5
History
RK
Pulled the crash dump from relay-03 - confirmed it's a signed/unsigned mismatch in the delta parser, not a firmware issue. Patch incoming today.
JT
Should we also add a circuit breaker so one bad frame can't take down the whole queue again? Filed
FLT-457 for the retry/backoff piece - tracking that separately.MS
+1 on the breaker. Pairing with Rahul this afternoon to land both the parser fix and the quarantine logic together.
RK
PR up:
sync/fix-odometry-bounds-check. Added a FrameQuarantineQueue - bad frames get parked with a TTL instead of killing the worker. Subtask FLT-460b done, tests in FLT-460c still needed.AL
Reviewed the PR - logic looks solid. Left two inline comments about edge cases around the TTL flush window. Nothing blocking, should be good to merge after those are addressed.
DB
Add a comment...Send
In Progress
▾
Details
Assignee
RK
Rahul KapoorReporter
JT
Jordan TranPriority
Highest
Story points
5
Sprint
Sprint 14
Labels
bug
P0-hotfix
Linked Issues
Blocks
FLT-457
Retry queue with exponential backoff
Relates to
FLT-421
Onboarding checklist depot admin
Created
Updated