Segmentation fault when mongoc_read_concern_destroy()

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Done
    • Priority: Critical - P2
    • None
    • Affects Version/s: 1.3.3, 1.3.4
    • Component/s: libmongoc
    • Environment:
      Gentoo Linux X86_64
      gcc-4.9.3
      jemalloc-3.6.0
      mongo-c-driver-1.3.4
      libbson-1.3.4
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Sometimes mongoc_read_concern_destroy() triggers a segmentation fault:

      mongoc_cursor_t *cursor = mongoc_collection_find(...);
      // then call mongoc_cursor_more() and mongoc_cursor_next()
      mongoc_cursor_destroy(cursor);

      mongoc_cursor_destroy() calls mongoc_read_concern_destroy(), and the later crashes at bson_free (read_concern->level)

            Assignee:
            A. Jesse Jiryu Davis
            Reporter:
            Peng Xie
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: