Bug #24158
rgw: civetweb fails on urls with control characters
% Done:
0%
Source:
Tags:
Backport:
mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
Originally reported by Pritha, the new civetweb version is strict on url encoding urls and fails on urls with ctrl characters like {} etc.
1. s3curl.pl --debug --id admin -- -s -v -X POST "http://localhost:8000/?Action=CreateRole&RoleName=Test&Path=/application_abc/component_xyz/&AssumeRolePolicyDocument=\{\"Version\":\"2012-10-17\",\"Statement\":\[\{\"Effect\":\"Allow\",\"Principal\":\{\"Service\":\[\"ec2.amazonaws.com\"\]\},\"Action\":\[\"sts:AssumeRole\"\]\}\]\}&Version=2010-05-8" 2. s3curl.pl --debug --id admin -- -s -v -X POST "http://localhost:8000/?Action=CreateRole&RoleName=S3Access&Path=/application_abc/component_xyz/&AssumeRolePolicyDocument=%7B%22Version%22:%222012-10-17%22,%22Statement%22:\[%7B%22Effect%22:%22Allow%22,%22Principal%22:%7B%22AWS%22:\[%22arn:aws:iam:::user/TESTER%22\]%7D,%22Action%22:\[%22sts:AssumeRole%22\]%7D\]%7D&Version=2010-05-8"
version 1 fails currently, though it was succeeding earlier
Related issues
History
#1 Updated by Abhishek Lekshmanan almost 6 years ago
master pr: https://github.com/ceph/ceph/pull/22054
#2 Updated by Orit Wasserman almost 6 years ago
- Status changed from New to Fix Under Review
#3 Updated by Abhishek Lekshmanan almost 6 years ago
- Assignee set to Abhishek Lekshmanan
#4 Updated by Abhishek Lekshmanan over 5 years ago
- Status changed from Fix Under Review to Pending Backport
#5 Updated by Patrick Donnelly over 5 years ago
- Copied to Backport #26849: mimic: rgw: civetweb fails on urls with control characters added
#6 Updated by Nathan Cutler over 5 years ago
- Status changed from Pending Backport to Resolved