mongoc_collection_find_indexes can return freed memory

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Done
    • Priority: Major - P3
    • 1.4.0
    • Affects Version/s: 1.1.11
    • Component/s: libmongoc
    • None
    • None
    • Fully Compatible
    • None
    • None
    • None
    • None
    • None
    • None

      mongoc_collection_find_indexes has special handling for two kinds of errors. If it encounters some other error, it returns a pointer to a freed mongoc_cursor_t. This sets up the caller for a use-after-free crash.

              Assignee:
              A. Jesse Jiryu Davis
              Reporter:
              A. Jesse Jiryu Davis
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: