-
Type:
Bug
-
Resolution: Won't Do
-
Priority:
Major - P3
-
None
-
Affects Version/s: 8.0.0-rc0
-
Component/s: Internal Code
-
Query Execution
-
ALL
-
v8.0
-
QE 2024-04-29, QE 2024-05-13, QE 2024-05-27, QE 2024-06-10, QE 2024-06-24
Out-of-bounds read
Incorrect values read from a different memory region will cause incorrect computations. Out-of-bounds read from a buffer
/src/mongo/db/pipeline/expression.cpp:6664: OVERRUN 140350 Checking "inputType >= 0" implies that "inputType" is at least 0 on the true branch.
/src/mongo/db/pipeline/expression.cpp:6664: OVERRUN 140350 Checking "inputType <= mongo::JSTypeMax" implies that "inputType" is at least 20 on the false branch.
/src/mongo/db/pipeline/expression.cpp:6665: OVERRUN 140350 Checking "targetType >= 0" implies that "targetType" is at least 0 on the true branch.
/src/mongo/db/pipeline/expression.cpp:6665: OVERRUN 140350 Checking "targetType <= mongo::JSTypeMax" implies that "targetType" is between 0 and 19 (inclusive) on the true branch.