Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-18086

canonical_query_test helper parseNormalize() keeps pointers to memory inside freed BSONObj

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 3.1.5
    • Querying
    • Fully Compatible
    • ALL
    • Quint Iteration 5

    Description

      The parseNormalize() helper in canonical_query_test.cpp returns a MatchExpression created from a temporary BSONObj, which is not valid.

      Note that the tests in this file happen to not examine the BSONElement members of the returned MatchExpression objects (which is how this issue went undetected).

      Attachments

        Issue Links

          Activity

            People

              qingyang.chen Qingyang Chen
              rassi J Rassi
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: