-
Type:
Bug
-
Resolution: Works as Designed
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Labels:
-
ALL
-
Execution Team 2022-10-17, Execution Team 2022-10-31, Execution Team 2022-11-14
Wrapper object use after free
A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed
/src/mongo/db/timeseries/bucket_compression.cpp:304: WRAPPER_ESCAPE 122379 Calling "get" which extracts wrapped state from local "tamperedData".
/src/mongo/db/timeseries/bucket_compression.cpp:306: WRAPPER_ESCAPE 122379 The internal representation of local "tamperedData" escapes into "measurements.front().timeField", but is destroyed when it exits scope.
