[SERVER-45674] $unionWith can encounter a use-after-free if double-disposed Created: 21/Jan/20  Updated: 29/Oct/23  Resolved: 28/Jan/20

Status: Closed
Project: Core Server
Component/s: Aggregation Framework
Affects Version/s: None
Fix Version/s: 4.3.4

Type: Bug Priority: Major - P3
Reporter: Charlie Swanson Assignee: Charlie Swanson
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
depends on SERVER-45790 Robustify $unionWith parsing Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: Query 2020-01-27, Query 2020-02-10
Participants:

 Description   

It looks like we have to copy this unfortunate if statement from $lookup



 Comments   
Comment by Githook User [ 28/Jan/20 ]

Author:

{'email': 'charlie.swanson@mongodb.com', 'name': 'Charlie Swanson', 'username': 'cswanson310'}

Message: SERVER-45674 Avoid use after free in $unionWith

create mode 100644 jstests/aggregation/sources/unionWith/unionWith_basic.js
Branch: master
https://github.com/mongodb/mongo/commit/b0131213f0cfd47fdf9af52f43ec0e3b67efcd2e

Generated at Thu Feb 08 05:09:26 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.