You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andreas Auernhammer 9c8b7306f5 security: fix write-to-RAM DoS vulnerability (#5957) ... This commit fixes a DoS vulnerability for certain APIs using signature V4 by verifying the content-md5 and/or content-sha56 of the request body in a streaming mode. The issue was caused by reading the entire body of the request into memory to verify the content-md5 or content-sha56 checksum if present. The vulnerability could be exploited by either replaying a V4 request (in the 15 min time frame) or sending a V4 presigned request with a large body.		7 years ago
..
auth	Remove panic() and handle it appropriately (#5807)	7 years ago
bpool	Add large bucket support for erasure coded backend (#5160)	7 years ago
cgroup	…
disk	…
ellipses	Add large bucket support for erasure coded backend (#5160)	7 years ago
event	fix: Avoid more crashes due to concurrent map usage (#5912)	7 years ago
handlers	Remove all unused variables and functions (#5823)	7 years ago
hash	security: fix write-to-RAM DoS vulnerability (#5957)	7 years ago
ioutil	Support SSE-C multipart source objects in CopyObject (#5603)	7 years ago
lock	…
madmin	Fix docs in admin API (#5559)	7 years ago
mimedb	…
mountinfo	…
net	Remove panic() and handle it appropriately (#5807)	7 years ago
policy	fix: export policy.Resource for remote RPC policy updates (#5941)	7 years ago
quick	Generalize loadConfig method to avoid reading from disk (#5819)	7 years ago
safe	…
sync/errgroup	Add large bucket support for erasure coded backend (#5160)	7 years ago
sys	…
trie	…
wildcard	…
words	…