The return value of server_get_parameter function is retrieved without locking the server. In addition to this, the pointed to value is used instead of it being copied locally. This can cause reads of freed memory if server parameters are freed at runtime. The returned value can be a stale value as no locking is performed.

The updating of server parameters in config_runtime.cc can cause a parameter to be temporarily lost while it is being updated. In other words, the update is not fully atomic.