Chung-En Lee created HDDS-17056:
-----------------------------------
Summary: S3G UploadPart does not verify x-amz-content-sha256
Key: HDDS-17056
URL: https://issues.apache.org/jira/browse/HDDS-17056
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Chung-En Lee
UploadPart computes the body SHA-256 but never compares it with
x-amz-content-sha256, so mismatched parts are committed.
* Has the check: `ObjectEndpoint#put` (L323-334),
`ObjectEndpointStreaming#putKeyWithStream` (L146-157)
* Missing: `ObjectEndpoint#createMultipartKey`,
`ObjectEndpointStreaming#createMultipartKey`
Addition: extract the duplicated PutObject check into a shared method and call
it from both UploadPart paths.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
