Project

General

Profile

Bug #44635

Params "append" and "position" are not signed when append object

Added by yunqing wang 22 days ago. Updated 6 days ago.

Status:
In Progress
Priority:
Normal
Assignee:
Target version:
% Done:

100%

Source:
Community (dev)
Tags:
append object
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
rgw
Pull request ID:
Crash signature:

Description

When I append an oject, I found out that the param "append" and "position" are not signed in rgw. If the request was hacked and the param "position" was changed, it will make the request fail always.
We need calculate key signature inclued the two params.

History

#1 Updated by Daniel Gryniewicz 21 days ago

  • Pull request ID set to 34002

#2 Updated by Casey Bodley 13 days ago

  • Status changed from New to In Progress

#3 Updated by Casey Bodley 6 days ago

  • Assignee set to Casey Bodley

Also available in: Atom PDF