Details
-
Bug
-
Resolution: Fixed
-
Major - P3
-
None
-
None
-
None
-
(copied to CRM)
Description
When parsing BSON with a codewscope type we subtract 1 from the code string length. If it is 0 we underflow. (bson-iter.c:1410)
if (length) {
|
memcpy (&len, iter->raw + iter->d2, sizeof (len));
|
*length = BSON_UINT32_FROM_LE (len) - 1;
|
}
|