Project

General

Profile

Bug #20418

rgw: URI with \0 in the middle is silently handled as its initial part

Added by Radoslaw Zarzynski over 1 year ago. Updated 13 days ago.

Status:
Resolved
Priority:
Normal
Target version:
-
Start date:
06/26/2017
Due date:
% Done:

0%

Source:
Development
Tags:
Backport:
kraken,jewel
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

$ curl -i "$publicURL/abc%00de" -X PUT -H "X-Auth-Token: $token"
HTTP/1.1 201 Created
Content-Length: 0
X-Trans-Id: tx000000000000000000042-005951047f-105b-default
X-Openstack-Request-Id: tx000000000000000000042-005951047f-105b-default
Accept-Ranges: bytes
Content-Type: text/plain; charset=utf-8
Date: Mon, 26 Jun 2017 12:56:31 GMT

...

$ curl -i "$publicURL/" -X GET -H "X-Auth-Token: $token"
HTTP/1.1 200 OK
Content-Length: 8
X-Timestamp: 1498484272.29762
X-Account-Container-Count: 2
X-Account-Object-Count: 0
X-Account-Bytes-Used: 0
X-Account-Bytes-Used-Actual: 0
X-Trans-Id: tx000000000000000000002-0059510e30-1053-default
X-Openstack-Request-Id: tx000000000000000000002-0059510e30-1053-default
Accept-Ranges: bytes
Content-Type: text/plain; charset=utf-8
Date: Mon, 26 Jun 2017 13:37:52 GMT

abc
cont

Swift returns 412 Invalid UTF8 or contains NULL in such situation.


Related issues

Copied to rgw - Backport #20829: kraken: rgw: URI with \0 in the middle is silently handled as its initial part Rejected
Copied to rgw - Backport #20830: jewel: rgw: URI with \0 in the middle is silently handled as its initial part Rejected

History

#1 Updated by Matt Benjamin over 1 year ago

@radoslaw, is this in progress?

Matt

#2 Updated by Orit Wasserman over 1 year ago

  • Status changed from New to Need Review

#4 Updated by Radoslaw Zarzynski over 1 year ago

  • Status changed from Need Review to Pending Backport
  • Backport set to kraken,jewel

#5 Updated by Nathan Cutler over 1 year ago

  • Copied to Backport #20829: kraken: rgw: URI with \0 in the middle is silently handled as its initial part added

#6 Updated by Nathan Cutler over 1 year ago

  • Copied to Backport #20830: jewel: rgw: URI with \0 in the middle is silently handled as its initial part added

#7 Updated by Nathan Cutler 13 days ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF