-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Major - P3
-
Affects Version/s: None
-
Component/s: None
-
Query Optimization
-
Fully Compatible
-
ALL
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Wrapper object use after free
A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed
/data/bazel_cache/1de52aaeb35278243ca29a4785ce7969/execroot/_main_/src/mongo/db/query/classic_runtime_planner/multi_planner.cpp:44: WRAPPER_ESCAPE 162458 Calling "get" which extracts wrapped state from local "stage".
/data/bazel_cache/1de52aaeb35278243ca29a4785ce7969/execroot/_main_/src/mongo/db/query/classic_runtime_planner/multi_planner.cpp:44: WRAPPER_ESCAPE 162458 The internal representation of local "stage" escapes into "this->_multiplanStage", but is destroyed when it exits scope.