Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-41467

Integer overflow can trigger invariant during update in mongos

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 4.3.1
    • Affects Version/s: None
    • Component/s: None
    • Fully Compatible
    • ALL
    • Sharding 2019-07-15, Sharding 2019-07-29, Sharding 2019-08-12, Sharding 2019-08-26, Sharding 2019-09-23

      "n" is long long, but gets assigned to an int, under right circumstances, a number that big enough and doesn't fit int can be interpreted as a negative number and trigger this invariant:

      https://github.com/mongodb/mongo/blob/9d212e4f098ccf4821fd6a1acde60402373b70ee/src/mongo/s/commands/cluster_write_cmd.cpp#L119

            Assignee:
            randolph@mongodb.com Randolph Tan
            Reporter:
            randolph@mongodb.com Randolph Tan
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: