Project

General

Profile

Actions
Copy link

Bug #20418

closed

rgw: URI with \0 in the middle is silently handled as its initial part

Added by Radoslaw Zarzynski almost 7 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Radoslaw Zarzynski
Target version:
-
% Done:

0%

Source:
Development
Tags:
Backport:
kraken,jewel
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

$ curl -i "$publicURL/abc%00de" -X PUT -H "X-Auth-Token: $token"
HTTP/1.1 201 Created
Content-Length: 0
X-Trans-Id: tx000000000000000000042-005951047f-105b-default
X-Openstack-Request-Id: tx000000000000000000042-005951047f-105b-default
Accept-Ranges: bytes
Content-Type: text/plain; charset=utf-8
Date: Mon, 26 Jun 2017 12:56:31 GMT

...

$ curl -i "$publicURL/" -X GET -H "X-Auth-Token: $token"
HTTP/1.1 200 OK
Content-Length: 8
X-Timestamp: 1498484272.29762
X-Account-Container-Count: 2
X-Account-Object-Count: 0
X-Account-Bytes-Used: 0
X-Account-Bytes-Used-Actual: 0
X-Trans-Id: tx000000000000000000002-0059510e30-1053-default
X-Openstack-Request-Id: tx000000000000000000002-0059510e30-1053-default
Accept-Ranges: bytes
Content-Type: text/plain; charset=utf-8
Date: Mon, 26 Jun 2017 13:37:52 GMT

abc
cont

Swift returns 412 Invalid UTF8 or contains NULL in such situation.

Related issues 2 (0 open — 2 closed)

Copied to rgw - Backport #20829: kraken: rgw: URI with \0 in the middle is silently handled as its initial partRejectedActions
Copied to rgw - Backport #20830: jewel: rgw: URI with \0 in the middle is silently handled as its initial partRejectedActions
Actions
Copy link
 #1

Updated by Matt Benjamin almost 7 years ago

@radoslaw, is this in progress?

Matt

Actions
Copy link
 #2

Updated by Orit Wasserman almost 7 years ago

  • Status changed from New to Fix Under Review
Actions
Copy link
 #4

Updated by Radoslaw Zarzynski over 6 years ago

  • Status changed from Fix Under Review to Pending Backport
  • Backport set to kraken,jewel
Actions
Copy link
 #5

Updated by Nathan Cutler over 6 years ago

  • Copied to Backport #20829: kraken: rgw: URI with \0 in the middle is silently handled as its initial part added
Actions
Copy link
 #6

Updated by Nathan Cutler over 6 years ago

  • Copied to Backport #20830: jewel: rgw: URI with \0 in the middle is silently handled as its initial part added
Actions
Copy link
 #7

Updated by Nathan Cutler over 5 years ago

  • Status changed from Pending Backport to Resolved
Actions
Copy link

Also available in: Atom PDF