Uploaded image for project: 'PHP Driver: Extension'
  1. PHP Driver: Extension
  2. PHPC-2149

ClientEncryption::createDataKey() may leak when processing masterKey option

XMLWordPrintableJSON

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 1.15.0
    • Affects Version/s: 1.7.0
    • Component/s: None
    • None

      ClientEncryption::createDataKey() uses a stack-allocated bson_t for processing the "masterKey" option. This is never freed, which could lead to a leak if the document ever exceeds the internal limit and triggers dynamic allocation.

            Assignee:
            jmikola@mongodb.com Jeremy Mikola
            Reporter:
            jmikola@mongodb.com Jeremy Mikola
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: