247d09a1fc
When Vault is concurrently creating and revoking leases for MongoDB users as part of the database secrets engine, and then loses connection to MongoDB, it can panic. This occurrs because the RevokeUser path does _not_ lock the mutex, but the CreateUser path does. Both threads of execution can concurently decide to call c.session.Close() in mongodb/connection_producer.go:119, and then mgo panics when the second close attempt occurs. |
||
|---|---|---|
| .. | ||
| cassandra | ||
| hana | ||
| mongodb | ||
| mssql | ||
| mysql | ||
| postgresql | ||