[SERVER-24128] Namespace parsing in commands code must reject embedded null bytes Created: 10/May/16  Updated: 05/Apr/17  Resolved: 09/Dec/16

Status: Closed
Project: Core Server
Component/s: MapReduce, Write Ops
Affects Version/s: None
Fix Version/s: 3.5.1

Type: Bug Priority: Critical - P2
Reporter: David Storch Assignee: David Storch
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Duplicate
is duplicated by SERVER-26858 Remove explain_cmd_invalid_namespace.... Closed
Related
related to SERVER-24389 Fix or remove Command::parseNs() Backlog
Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: Query 2016-11-21, Query 2016-12-12, Query 2017-01-23
Participants:
Linked BF Score: 0

 Description   

A BSONElement of type String has a pointer+length implementation and therefore may contain an embedded null byte. However, in parsing we often interpret the string as null terminated, resulting in a different namespace that is considered valid later in the execution of the command. Such operations should fail with a useful message during parsing.



 Comments   
Comment by Githook User [ 09/Dec/16 ]

Author:

{u'username': u'dstorch', u'name': u'David Storch', u'email': u'david.storch@10gen.com'}

Message: SERVER-24128 reject embedded null bytes in namespace string parsing
Branch: master
https://github.com/mongodb/mongo/commit/7cf929f25638e4ad9525775c8ea0e18f3c86faf5

Generated at Thu Feb 08 04:05:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.