fix MongoDB BSONObjectTooLarge conditions

kevoreilly · Nov 13, 2024 · 5329b7a · 5329b7a
1 parent c6b8355
commit 5329b7a
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/modules/reporting/mongodb.py b/modules/reporting/mongodb.py
@@ -131,16 +131,19 @@ def run(self, results):
         try:
             mongo_insert_one("analysis", report)
         except OperationFailure as e:
-            # ToDo rewrite how children are stored
-            if str(e).startswith("BSONObj exceeds maximum nested object"):
-                log.debug("Deleting behavior process tree children from results.")
+            # check for error code 10334, BSONObjectTooLarge
+            if e.code == 10334:
+                # ToDo rewrite how children are stored
+                log.warning("Deleting behavior process tree children from results.")
                 del report["behavior"]["processtree"][0]["children"]
                 try:
                     mongo_insert_one("analysis", report)
                 except Exception as e:
                     log.error("Deleting behavior process tree parent from results: %s", str(e))
                     del report["behavior"]["processtree"][0]
                     mongo_insert_one("analysis", report)
+            else:
+                raise CuckooReportError("Failed inserting report in Mongo") from e
         except InvalidDocument as e:
             if str(e).startswith("cannot encode object") or "must not contain" in str(e):
                 self.loop_saver(report)