Uploaded image for project: 'Drivers'
  1. Drivers
  2. DRIVERS-101

BSON cstring with null bytes should not be allowed

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical - P2
    • Resolution: Fixed
    • None
    • None
    • None

    Description

      The BSON spec defines two string types:

      • The "string" type is a sequence of bytes encoded with a length. This sequence can include null bytes since the length of the sequence is encoded.
      • The "cstring" type is a null terminated sequence of bytes. It is not encoded with a length. The sequence ends with a null byte so it can not include null bytes.

      This ticket is to validate that drivers do not allow sequences including null bytes wherever a cstring is required (e.g. document keys, database and collection name, regular expressions, ...)

      Attachments

        Issue Links

          depends on

          Task - A task that needs to be done. CXX-519 Ensure null bytes are not allowed within cstrings (keys, db/coll name, regex)

          • Major - P3 - Major loss of function.
          • Closed
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-7005 Documents containing keys with embedded null characters can be created

          • Critical - P2 - Crashes, loss of data, severe memory leak.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. JAVA-891 Document fields accept NULL characters

          • Major - P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. PHPC-891 BSON encoding should throw if PHP keys contain null bytes

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. RUBY-646 Ensure we check for null characters in strings and symbols used as keys

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. PHPC-721 Javascript constructor should throw if code contains null bytes

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. PHPC-724 Regex constructor should throw if pattern or flags contain null bytes

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Improvement - An improvement or enhancement to an existing feature or task. CSHARP-788 Strengthen checks for nulls in CStrings

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              barrie Barrie Segal
              barrie Barrie Segal
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: