Operational Defect Database
BugZero found this defect 38 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
MongoDB | 2639822
Coverity analysis defect 141172: Wrapper object use after free
Last update date:
4/11/2024
Affected products:
MongoDB Server
Affected releases:
8.0.0-rc0
Fixed releases:
8.0 Required
Description:
Info
Wrapper object use after free A use after free bug would occur if the internal pointer is used. An internal pointer of a wrapper object remains available after the object is freed /src/mongo/db/s/resharding/resharding_recipient_service.cpp:1594: WRAPPER_ESCAPE 141172 Calling "get" which extracts wrapped state from temporary of type "mongo::ServiceContext::UniqueOperationContext". /src/mongo/db/s/resharding/resharding_recipient_service.cpp:1594: WRAPPER_ESCAPE 141172 Assigning: "opCtx" = "mongo::ServiceContext::UniqueOperationContext(mongo::cc()->makeOperationContext()).get()". /src/mongo/db/s/resharding/resharding_recipient_service.cpp:1594: WRAPPER_ESCAPE 141172 The internal representation of temporary of type "mongo::ServiceContext::UniqueOperationContext" is freed by its destructor. /src/mongo/db/s/resharding/resharding_recipient_service.cpp:1596: WRAPPER_ESCAPE 141172 Using internal representation of destroyed object temporary of type "mongo::ServiceContext::UniqueOperationContext".
Top User Comments
Steps to Reproduce
