Details
-
Bug
-
Status: Closed
-
Critical - P2
-
Resolution: Fixed
-
2.4.0
-
None
-
ALL
Description
When a document is 'cloned' in JavaScript, or if a field named '_bson' is created on a JS object passed to an internal mongo function, unwrapHolder() may return a NULL pointer. This is unchecked at most call-sites.
Attachments
Issue Links
- is duplicated by
-
SERVER-9405 Map/Reduce leads to Segmentation fault in 2.4.1
-
- Closed
-