[
https://issues.apache.org/jira/browse/HDDS-16661?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated HDDS-16661:
----------------------------------
Labels: pull-request-available (was: )
> Validate unsigned S3 checksum trailer completion and framing
> ------------------------------------------------------------
>
> Key: HDDS-16661
> URL: https://issues.apache.org/jira/browse/HDDS-16661
> Project: Apache Ozone
> Issue Type: Improvement
> Components: S3
> Reporter: Huang Kuan Hao
> Assignee: Huang Kuan Hao
> Priority: Major
> Labels: pull-request-available
>
> {{UnsignedChunksInputStream}} stops at the zero-length completion chunk
> without parsing the checksum trailer. It cannot check that the trailer
> declared by {{x-amz-trailer}} is present or complete.
> The write guard reads only the decoded payload length and explicitly
> completes signed streams. Extend completion for unsigned trailer uploads so
> validation runs before commit, even when the payload length has already been
> satisfied.
> For {{STREAMING-UNSIGNED-PAYLOAD-TRAILER}}, parse the declared trailer,
> require a matching header name, validate checksum encoding and length, and
> require the final terminator. Make the parsed checksum available to payload
> checksum verification.
> Cover missing trailers, mismatched names, malformed values, truncated input,
> and valid AWS SDK uploads through PutObject and UploadPart. Preserve
> explicitly supported modes that do not require a trailer.
> Payload checksum comparison is tracked separately; unsigned uploads do not
> require a trailer signature.
> https://github.com/apache/ozone/pull/11222#pullrequestreview-5344295815
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
