Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-4719

crash on invalid BSON data when constructing BSONObj

    • Type: Icon: Bug Bug
    • Resolution: Incomplete
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: Internal Client
    • Environment:
      Linux 2.6.38-13-generic-pae #53-Ubuntu SMP i686 athlon i386 GNU/Linux
    • Linux

      ::mongo::BSONObj class has insufficient validation for bad data. This means that on some bad input it may crash. See the attached test case which shows an example bad data which demonstrates the problem - this is based on real data we've got from core dump in our application. See also the proposed fix for the code in the attached diff.

        1. bsonfix.patch
          1 kB
        2. bsonfix-nightly.patch
          1 kB
        3. core
          276 kB
        4. crash
          162 kB
        5. crash.cpp
          17 kB

            Assignee:
            milkie@mongodb.com Eric Milkie
            Reporter:
            serj Sergey
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: