Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-68157

AuditEncryptionCompressionManager::encryptAndEncode should emit big BSON

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 6.0.3, 6.2.0-rc0
    • None
    • None
    • Fully Compatible
    • ALL
    • v6.1, v6.0
    • Security 2022-08-08, Security 2022-08-22, Security 2022-09-05

    Description

      BSON objects rendered into the audit log are permitted to exceed the 16MB size threshold. This requirement arises from the need to audit network requests which can exceed the object size. In order to override BSON size limits, template trait overrides can be passed to key serialization methods.

      AuditEncryptionCompressionManager::encryptAndEncode invokes BSONObjBuilder::obj without providing a trait. That means, we may attempt to encrypt big inputs, but enforce the 16MB limit on the size of the ciphertext.

      Attachments

        Activity

          People

            adam.rayner@mongodb.com Adam Rayner
            spencer.jackson@mongodb.com Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: