[SERVER-30720] Integer overflow in SharedBuffer::grow_reallocate - MongoDB Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major - P3
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.4.11, 3.5.12
Component/s: Internal Code
Labels:
None

Backwards Compatibility:
Fully Compatible
Operating System:
ALL
Backport Requested:

v3.4, v3.2, v3.0
Sprint:
Query 2017-08-21, Query 2017-09-11
Case:
Linked BF Score:
15

Description

When the minSize parameter greater than 1 GB is passed to the grow_reallocate function then the while loop inside the function causes integer overflow and loops forever.

Attachments

Activity

People

Assignee:: Martin Neupauer

Reporter:: Martin Neupauer

Participants:: Githook User, Martin Neupauer

Votes:: 0 Vote for this issue

Watchers:: 11 Start watching this issue

Dates

Created:: Aug 17 2017 06:34:52 PM UTC

Updated:: Apr 06 2018 04:13:59 PM UTC

Resolved:: Aug 18 2017 04:45:15 PM UTC