[SERVER-24150] ValueReader::fromBSONElement elicits undefined behavior when interpreting NumberLong Created: 16/May/16  Updated: 06/Jun/16  Resolved: 16/May/16

Status: Closed
Project: Core Server
Component/s: JavaScript
Affects Version/s: None
Fix Version/s: 3.3.8

Type: Bug Priority: Major - P3
Reporter: Andrew Morrow (Inactive) Assignee: Andrew Morrow (Inactive)
Resolution: Done Votes: 0
Labels: undefined-sanitizer
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Operating System: ALL
Steps To Reproduce:

Run the 'core' js suite under ubsan.

Sprint: Platforms 15 (06/03/16)
Participants:

 Description   

In the NumberLong case of ValueReader::fromBSONElement, a great deal of casting between numeric types occurs, but this can elicit undefined behavior when values out of range for one type are cast through another.



 Comments   
Comment by Githook User [ 16/May/16 ]

Author:

{u'username': u'acmorrow', u'name': u'Andrew Morrow', u'email': u'acm@mongodb.com'}

Message: SERVER-23826 SERVER-24150 Avoid numerical UB in ValueReader::fromBSONElement
Branch: master
https://github.com/mongodb/mongo/commit/1991b885292a271437f7a72f22ca86f0f720a75b

Generated at Thu Feb 08 04:05:31 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.