Out-of-bounds read
Incorrect values read from a different memory region will cause incorrect computations. Out-of-bounds read from a buffer
/src/mongo/db/pipeline/expression.cpp:5648: OVERRUN 115640 Checking "inputType >= 0" implies that "inputType" is at least 0 on the true branch.
/src/mongo/db/pipeline/expression.cpp:5648: OVERRUN 115640 Checking "inputType <= mongo::JSTypeMax" implies that "inputType" is at least 20 on the false branch.
/src/mongo/db/pipeline/expression.cpp:5649: OVERRUN 115640 Checking "targetType >= 0" implies that "targetType" is at least 0 on the true branch.
/src/mongo/db/pipeline/expression.cpp:5649: OVERRUN 115640 Checking "targetType <= mongo::JSTypeMax" implies that "targetType" is between 0 and 19 (inclusive) on the true branch.