[SERVER-43883] Enable WiredTiger cursor copy debug mode in asan builds Created: 08/Oct/19 Updated: 29/Oct/23 Resolved: 06/Apr/20 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Internal Code |
| Affects Version/s: | None |
| Fix Version/s: | 4.4.0-rc1, 4.7.0 |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Louis Williams | Assignee: | Daniel Gottlieb (Inactive) |
| Resolution: | Fixed | Votes: | 1 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||||||||||
| Backport Requested: |
v4.4
|
||||||||||||||||||||||||
| Sprint: | Execution Team 2020-02-24, Execution Team 2020-04-20 | ||||||||||||||||||||||||
| Participants: | |||||||||||||||||||||||||
| Description |
|
There is a class of bug that results in using unowned BSON or RecordData objects, which reference memory owned by something else, and accessing that memory after it has been freed or overwritten. This has the potential to lead to undefined behavior and in-memory data corruption. See We should enable WT cursor copy debug mode with the configuration "debug_mode=(cursor_copy=true)" on the call to wiredtiger_open.
Old Description:
|
| Comments |
| Comment by Githook User [ 10/Apr/20 ] |
|
Author: {'name': 'Daniel Gottlieb', 'email': 'daniel.gottlieb@mongodb.com', 'username': 'dgottlieb'}Message: When a cursor changes its position, accessing the address of the Cursor copy mode will allocate memory for a cursor's keys and values when (cherry picked from commit a5f2ec58c2360effcfeb338804bfa31dc4b7cff6) |
| Comment by Githook User [ 06/Apr/20 ] |
|
Author: {'name': 'Daniel Gottlieb', 'email': 'daniel.gottlieb@mongodb.com', 'username': 'dgottlieb'}Message: When a cursor changes its position, accessing the address of the Cursor copy mode will allocate memory for a cursor's keys and values when |
| Comment by Eric Milkie [ 03/Apr/20 ] |
|
The dependent tickets are now resolved so I'm moving this back to Open status. |
| Comment by Daniel Gottlieb (Inactive) [ 13/Feb/20 ] |
|
Attempting to turn this on for ASAN builds found some bugs with the cursor copy code itself in some trickier scenarios. I'm moving this ticket to blocked. |
| Comment by Louis Williams [ 14/Jan/20 ] |
|
Since |