Details
-
Bug
-
Resolution: Works as Designed
-
Major - P3
-
None
-
None
-
None
-
ALL
-
Execution Team 2022-10-17, Execution Team 2022-10-31, Execution Team 2022-11-14
Description
Wrapper object use after free
A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed
/src/mongo/db/timeseries/bucket_compression.cpp:304: WRAPPER_ESCAPE 122379 Calling "get" which extracts wrapped state from local "tamperedData".
/src/mongo/db/timeseries/bucket_compression.cpp:306: WRAPPER_ESCAPE 122379 The internal representation of local "tamperedData" escapes into "measurements.front().timeField", but is destroyed when it exits scope.