ClientEncryption::createDataKey() may leak when processing masterKey option

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major - P3
    • 1.15.0
    • Affects Version/s: 1.7.0
    • Component/s: None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ClientEncryption::createDataKey() uses a stack-allocated bson_t for processing the "masterKey" option. This is never freed, which could lead to a leak if the document ever exceeds the internal limit and triggers dynamic allocation.

            Assignee:
            Jeremy Mikola
            Reporter:
            Jeremy Mikola
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: