Project

General

Profile

Actions

Bug #19739

closed

Content-MD5 header is not validated with POST uploads

Added by Marcin Gibula almost 7 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
High
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
jewel kraken
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Radosgw does not check Content-MD5 header against uploaded file, if upload is done with POST method. It does work with PUT.

Attached script to reproduce. Tested against jewel 10.2.7


Files

content-md5-bug.php (2.18 KB) content-md5-bug.php Marcin Gibula, 04/21/2017 12:22 PM

Related issues 2 (0 open2 closed)

Copied to rgw - Backport #20724: jewel: Content-MD5 header is not validated with POST uploadsRejectedActions
Copied to rgw - Backport #20725: kraken: Content-MD5 header is not validated with POST uploadsRejectedActions
Actions #1

Updated by Yehuda Sadeh almost 7 years ago

  • Priority changed from Normal to High
Actions #3

Updated by Yehuda Sadeh almost 7 years ago

we'll also need to create a new test in s3-tests for this one.

Actions #4

Updated by Orit Wasserman almost 7 years ago

  • Assignee set to Orit Wasserman
Actions #5

Updated by Orit Wasserman almost 7 years ago

  • Status changed from New to Fix Under Review
Actions #7

Updated by Yehuda Sadeh almost 7 years ago

  • Status changed from Fix Under Review to 7
Actions #8

Updated by Yuri Weinstein almost 7 years ago

Orit Wasserman wrote:

s3test tracker: http://tracker.ceph.com/issues/20213

merged

Actions #9

Updated by Casey Bodley over 6 years ago

  • Status changed from 7 to Pending Backport
  • Backport set to jewel kraken
Actions #10

Updated by Nathan Cutler over 6 years ago

  • Copied to Backport #20724: jewel: Content-MD5 header is not validated with POST uploads added
Actions #11

Updated by Nathan Cutler over 6 years ago

  • Copied to Backport #20725: kraken: Content-MD5 header is not validated with POST uploads added
Actions #12

Updated by Nathan Cutler over 5 years ago

  • Status changed from Pending Backport to Resolved
Actions

Also available in: Atom PDF