crash on invalid BSON data when constructing BSONObj

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Incomplete
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: Internal Client
    • Environment:
      Linux 2.6.38-13-generic-pae #53-Ubuntu SMP i686 athlon i386 GNU/Linux
    • Linux
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ::mongo::BSONObj class has insufficient validation for bad data. This means that on some bad input it may crash. See the attached test case which shows an example bad data which demonstrates the problem - this is based on real data we've got from core dump in our application. See also the proposed fix for the code in the attached diff.

        1. bsonfix.patch
          1 kB
          Sergey
        2. bsonfix-nightly.patch
          1 kB
          Pugachev Maxim
        3. core
          276 kB
          Sergey
        4. crash
          162 kB
          Sergey
        5. crash.cpp
          17 kB
          Sergey

              Assignee:
              Eric Milkie
              Reporter:
              Sergey
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: