Uploaded image for project: 'MongoDB Command Line Tools'
  1. MongoDB Command Line Tools
  2. TOOLS-187

Bad bson dump can cause a seg fault on mongod when doing restore

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: Legacy C++ Implementation
    • Fix Version/s: 2.8.0-rc4
    • Component/s: mongorestore
    • Labels:
      None
    • Environment:
      mongod git hash 4aaed4ccfb608db56a269e0422f6d48385c28445
      osX

      Description

      Running a mongorestore on bad_user.bson will crash the server with the stack trace:

      Sat Aug  4 15:25:12 Got signal: 11 (Segmentation fault: 11).
       
      Sat Aug  4 15:25:12 Backtrace:
      0x10a991b2b 0x10a654031 0x10a653ee2 0x7fff8bd39cfa 0x7fa8fb6005c0 0x10a6e9701 0x10a6ef3ef 0x10a65d582 0x10aaedbdd 0x10a7ff8e5 0x7fff8bce58bf 0x7fff8bce8b75 
       0   mongod                              0x000000010a991b2b _ZN5mongo15printStackTraceERSo + 43
       1   mongod                              0x000000010a654031 _ZN5mongo10abruptQuitEi + 225
       2   mongod                              0x000000010a653ee2 _ZN5mongo24abruptQuitWithAddrSignalEiP9__siginfoPv + 242
       3   libsystem_c.dylib                   0x00007fff8bd39cfa _sigtramp + 26
       4   ???                                 0x00007fa8fb6005c0 0x0 + 140363748607424
       5   mongod                              0x000000010a6e9701 _ZN5mongo14receivedInsertERNS_7MessageERNS_5CurOpE + 977
       6   mongod                              0x000000010a6ef3ef _ZN5mongo16assembleResponseERNS_7MessageERNS_10DbResponseERKNS_11HostAndPortE + 6479
       7   mongod                              0x000000010a65d582 _ZN5mongo16MyMessageHandler7processERNS_7MessageEPNS_21AbstractMessagingPortEPNS_9LastErrorE + 206
       8   mongod                              0x000000010aaedbdd _ZN5mongo3pms9threadRunEPNS_13MessagingPortE + 1645
       9   mongod                              0x000000010a7ff8e5 thread_proxy + 229
       10  libsystem_c.dylib                   0x00007fff8bce58bf _pthread_start + 335
       11  libsystem_c.dylib                   0x00007fff8bce8b75 thread_start + 13

        Attachments

        1. bad_user.bson
          400 kB
        2. fuzzer.py
          1 kB
        3. user.bson
          400 kB

          Issue Links

            Activity

              People

              • Assignee:
                mpobrien Michael O'Brien
                Reporter:
                renctan Randolph Tan
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: