Untrusted loop bound
An attacker could control the number of times the loop iterates. An unscrutinized value from an untrusted source used as a loop bound
/src/mongo/db/mongod_main.cpp:892: TAINTED_SCALAR 119556 Calling function "operator >>" taints argument "pid".
/src/mongo/db/mongod_main.cpp:893: TAINTED_SCALAR 119556 Checking lower bounds of signed scalar "pid" by taking the true branch of "pid > 9999".
- related to
-
SERVER-61494 Fix "mongod --shutdown" to check size of "mongod.lock" instead of existence
- Closed