SERVER-20080 Constrain ctor calls for JS types

Several types shouldn't be called as a ctor:
* NativeFunction
* Cursor
* CursorHandle
* NativeFunction

This prevents them from being called as such.

1 files changed, 42 insertions, 0 deletions

diff --git a/jstests/core/type4.js b/jstests/core/type4.js
new file mode 100644
index 00000000000..c35d7baecca
--- /dev/null
+++ b/jstests/core/type4.js
@@ -0,0 +1,42 @@
+(function(){
+    "use strict";
+
+    // Tests for SERVER-20080
+    //
+    // Verify that various types cannot be invoked as constructors
+
+    var t = db.jstests_type4;
+    t.drop();
+    t.insert({});
+    t.insert({});
+    t.insert({});
+
+    var oldReadMode = db.getMongo()._readMode;
+
+    assert.throws(function(){
+        (new _rand())();
+    }, [], "invoke constructor on natively injected function");
+
+    assert.throws(function(){
+          var doc = db.test.findOne();
+          new doc();
+    }, [], "invoke constructor on BSON");
+
+    assert.throws(function(){
+        db.getMongo()._readMode = "commands";
+        var cursor = t.find();
+        cursor.next();
+
+        new cursor._cursor._cursorHandle();
+    }, [], "invoke constructor on CursorHandle");
+
+    assert.throws(function(){
+        db.getMongo()._readMode = "compatibility";
+        var cursor = t.find();
+        cursor.next();
+
+        new cursor._cursor();
+    }, [], "invoke constructor on Cursor");
+
+    db.getMongo()._readMode = oldReadMode;
+})();