Project

General

Profile

Actions
Copy link

Bug #19739

closed

Content-MD5 header is not validated with POST uploads

Added by Marcin Gibula about 7 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
High
Assignee:
Orit Wasserman
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
jewel kraken
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
Ceph - v10.2.7
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Radosgw does not check Content-MD5 header against uploaded file, if upload is done with POST method. It does work with PUT.

Attached script to reproduce. Tested against jewel 10.2.7

Files

content-md5-bug.php (2.18 KB) content-md5-bug.php Marcin Gibula, 04/21/2017 12:22 PM

Related issues 2 (0 open — 2 closed)

Copied to rgw - Backport #20724: jewel: Content-MD5 header is not validated with POST uploadsRejectedActions
Copied to rgw - Backport #20725: kraken: Content-MD5 header is not validated with POST uploadsRejectedActions
Actions
Copy link

Also available in: Atom PDF