Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-24128

Namespace parsing in commands code must reject embedded null bytes

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical - P2
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.5.1
    • Component/s: MapReduce, Write Ops
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Operating System:
      ALL
    • Sprint:
      Query 2016-11-21, Query 2016-12-12, Query 2017-01-23
    • Linked BF Score:
      0

      Description

      A BSONElement of type String has a pointer+length implementation and therefore may contain an embedded null byte. However, in parsing we often interpret the string as null terminated, resulting in a different namespace that is considered valid later in the execution of the command. Such operations should fail with a useful message during parsing.

        Attachments

          Issue Links

          is duplicated by

          Task - A task that needs to be done. SERVER-26858 Remove explain_cmd_invalid_namespace.js from sharding_last_stable_mongos_and_mixed_shards blacklist

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-24389 Fix or remove Command::parseNs()

          • Major - P3 - Major loss of function.
          • Open

            Activity

              People

              Assignee:
              david.storch David Storch
              Reporter:
              david.storch David Storch
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: