Details
-
Bug
-
Resolution: Fixed
-
Major - P3
-
4.4.0, 5.0.0-rc7
-
Fully Compatible
-
ALL
-
v5.3, v5.0, v4.4
-
Service Arch 2021-10-04, Service Arch 2021-12-13, Service Arch 2022-1-10, Service Arch 2022-1-24
-
20
-
3
Description
cbState->callback is modified without holding ThreadPoolTaskExecutor::_mutex in ThreadPoolTaskExecutor::runCallbackExhaust(). This is memory unsafe because cbState->callback is also modified in the exhaust codepath's RemoteCommandOnReplyFn upon task cancellation. This issue has been observed to cause server crashes when shutting down a replica set monitor due to a partially initialized TaskExecutor::CallbackFn callback being invoked.
Attachments
Issue Links
- is related to
-
SERVER-58221 Stress test for ThreadPoolTaskExecutor for concurrency coverage
-
- Closed
-
-
SERVER-62396 Add a non-deterministic variant for `ThreadPoolTaskExecutor` tests
-
- Backlog
-
-
-
- Closed
-