Uploaded image for project: 'Drivers'
  1. Drivers
  2. DRIVERS-133

Drivers should not allow sending _ids with a key starting with $

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Component/s: None
    • Labels:
      None

      Description

      Raised this in as PYTHON-623 first, but after discussion with A. Jesse Jiryu Davis this should probably be a more general discussion amongst all drivers.

      See also related SERVER-12209 ticket where this issue came up.

      Sending a document with _id of extended JSON form to a primary will succeed but crash all secondaries immediately upon replication.

      {'_id': {'$oid': "52d0b971b3ba219fdeb4170e" } }

      Some drivers seem to validate for such cases (key starts with $ in nested sub-document) and reject the write, while others (I only tested with Python so far) don't. The behavior should be consistent.

      Another discussion point is whether these validations should happen on the driver or server side. Currently --objcheck seems not to protect the server from such _ids.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              barrie Barrie Segal
              Reporter:
              thomasr Thomas Rueckstiess
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: