ClientEncryption::createDataKey() may leak when processing masterKey option

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major - P3
    • 1.15.0
    • Affects Version/s: 1.7.0
    • Component/s: None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ClientEncryption::createDataKey() uses a stack-allocated bson_t for processing the "masterKey" option. This is never freed, which could lead to a leak if the document ever exceeds the internal limit and triggers dynamic allocation.

              Assignee:
              Jeremy Mikola
              Reporter:
              Jeremy Mikola
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: