[
https://issues.apache.org/jira/browse/HDDS-17056?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy Huang reassigned HDDS-17056:
---------------------------------
Assignee: Andy Huang
> S3G UploadPart does not verify x-amz-content-sha256
> ---------------------------------------------------
>
> Key: HDDS-17056
> URL: https://issues.apache.org/jira/browse/HDDS-17056
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Chung-En Lee
> Assignee: Andy Huang
> Priority: Major
>
> UploadPart computes the body SHA-256 but never compares it with
> x-amz-content-sha256, so mismatched parts are committed.
> * Has the check: `ObjectEndpoint#put` (L323-334),
> `ObjectEndpointStreaming#putKeyWithStream` (L146-157)
> * Missing: `ObjectEndpoint#createMultipartKey`,
> `ObjectEndpointStreaming#createMultipartKey`
> Addition: extract the duplicated PutObject check into a shared method and
> call it from both UploadPart paths.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
