Coverity analysis defect 137537: Wrapper object use after free

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Duplicate
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: Internal Code
    • Serverless
    • ALL
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Wrapper object use after free
      src/mongo/db/repl/tenant_file_importer_service.cpp

      A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed
      /src/mongo/db/repl/tenant_file_importer_service.cpp:214: WRAPPER_ESCAPE 137537 Calling "get" which extracts wrapped state from local "uniqueOpCtx".
      /src/mongo/db/repl/tenant_file_importer_service.cpp:214: WRAPPER_ESCAPE 137537 Assigning: "opCtx" = "uniqueOpCtx.get()".
      /src/mongo/db/repl/tenant_file_importer_service.cpp:229: WRAPPER_ESCAPE 137537 The internal representation of local "uniqueOpCtx" escapes into "this->_opCtx", but is destroyed when it exits scope.

        1. Screenshot 2023-04-07 at 9.57.25 AM.png
          105 kB
          Kyle Suarez

              Assignee:
              [DO NOT USE] Backlog - Server Serverless (Inactive)
              Reporter:
              Coverity Collector User
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: