[SERVER-20629] Use-after-free in CatalogManagerReplicaSet::_runReadCommand Created: 24/Sep/15  Updated: 07/Oct/15  Resolved: 01/Oct/15

Status: Closed
Project: Core Server
Component/s: Sharding
Affects Version/s: 3.1.8
Fix Version/s: 3.1.9

Type: Bug Priority: Major - P3
Reporter: Kevin Pulo Assignee: Esha Maharishi (Inactive)
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to SERVER-19929 Audit sharding code for potential use... Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: TIG A (10/09/15)
Participants:

 Description   

Observed incidentally in an unrelated patch build. The test was jstests/noPassthroughWithMongod/sharding_balance3.js, but apparently in the initial instantiation of ShardingTest.

[js_test:sharding_balance3] 2015-09-24T00:31:20.588+0000 s20015| 2015-09-24T00:31:20.589+0000 D EXECUTOR [ShardWork-0] Executing a task on behalf of pool ShardWork
[js_test:sharding_balance3] 2015-09-24T00:31:20.588+0000 s20015| 2015-09-24T00:31:20.589+0000 D EXECUTOR [ShardWork-0] waiting for work; I am one of 1 thread(s); the minimum number of threads is 1
[js_test:sharding_balance3] 2015-09-24T00:31:20.855+0000 2015-09-24T00:31:20.855+0000 W NETWORK  [thread1] Failed to connect to 127.0.0.1:20015, reason: errno:10061 No connection could be made because the target machine actively refused it.
[js_test:sharding_balance3] 2015-09-24T00:31:21.285+0000 s20015| 2015-09-24T00:31:21.285+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\catalog\replset\catalog_manager_replica_set.cpp(1258)  mongo::CatalogManagerReplicaSet::_runReadCommand+0x197
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.285+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\catalog\replset\catalog_manager_replica_set.cpp(923)   mongo::CatalogManagerReplicaSet::runUserManagementReadCommand+0x1f
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.285+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\catalog\forwarding_catalog_manager.cpp(522)            <lambda_f245f6e009477acf374ef766d282129d>::operator()+0x56
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.285+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\catalog\forwarding_catalog_manager.cpp(316)            mongo::ForwardingCatalogManager::retry<<lambda_f245f6e009477acf374ef766d282129d> >+0x4a
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.285+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\catalog\forwarding_catalog_manager.cpp(526)            mongo::ForwardingCatalogManager::runUserManagementReadCommand+0x30
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\db\auth\user_cache_invalidator_job.cpp(96)               mongo::`anonymous namespace'::getCurrentCacheGeneration+0x1a9
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\db\auth\user_cache_invalidator_job.cpp(114)              mongo::UserCacheInvalidator::initialize+0x39
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\server.cpp(255)                                        runMongosServer+0x4c2
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\server.cpp(328)                                        _main+0x794
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\server.cpp(388)                                        mongoSMain+0x272
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    ...\src\mongo\s\server.cpp(412)                                        wmain+0x35
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    f:\dd\vctools\crt\crtw32\startup\crt0.c(255)                           __tmainCRTStartup+0xec
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] mongos.exe    f:\dd\vctools\crt\crtw32\startup\crt0.c(165)                           wmainCRTStartup+0xe
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] kernel32.dll                                                                         BaseThreadInitThunk+0xd
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I -        [mongosMain]
[js_test:sharding_balance3] 2015-09-24T00:31:21.286+0000 s20015| 2015-09-24T00:31:21.286+0000 I CONTROL  [mongosMain] writing minidump diagnostic file C:\data\mci\src\mongos.2015-09-24T00-31-21.mdmp
[js_test:sharding_balance3] 2015-09-24T00:31:22.055+0000 2015-09-24T00:31:22.055+0000 W NETWORK  [thread1] Failed to connect to 127.0.0.1:20015, reason: errno:10061 No connection could be made because the target machine actively refused it.
[MongoDFixture:job0] 2015-09-24T00:31:23.261+0000 I NETWORK  [conn9] end connection 127.0.0.1:56163 (0 connections now open)
[MongoDFixture:job0] 2015-09-24T00:31:23.452+0000 I NETWORK  [initandlisten] connection accepted from 127.0.0.1:56207 #10 (1 connection now open)
[js_test:sharding_balance3] 2015-09-24T00:31:23.098+0000 s20015| 2015-09-24T00:31:23.099+0000 I CONTROL  [mongosMain] *** immediate exit due to unhandled exception



 Comments   
Comment by Githook User [ 30/Sep/15 ]

Author:

{u'username': u'EshaMaharishi', u'name': u'Esha Maharishi', u'email': u'esha.maharishi@10gen.com'}

Message: SERVER-20629 make Shard return member variables by value or by shared_ptr
Branch: master
https://github.com/mongodb/mongo/commit/c1c097541b9a63d02da3c01a812ac447b7578ce8

Generated at Thu Feb 08 03:54:47 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.