See how whoopsie project compares to other vendors in security performance
Last updated 24 July 2024
bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie.