|
Wrapper object use after free
src/mongo/db/repl/tenant_file_importer_service.cpp
A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed
/src/mongo/db/repl/tenant_file_importer_service.cpp:214: WRAPPER_ESCAPE 137537 Calling "get" which extracts wrapped state from local "uniqueOpCtx".
/src/mongo/db/repl/tenant_file_importer_service.cpp:214: WRAPPER_ESCAPE 137537 Assigning: "opCtx" = "uniqueOpCtx.get()".
/src/mongo/db/repl/tenant_file_importer_service.cpp:229: WRAPPER_ESCAPE 137537 The internal representation of local "uniqueOpCtx" escapes into "this->_opCtx", but is destroyed when it exits scope.
|