https://pulp.plan.io/https://pulp.plan.io/favicon.ico2016-06-22T18:29:49ZPulpPulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125392016-06-22T18:29:49Zcduryeecduryee@redhat.com
<ul><li><strong>Description</strong> updated (<a title="View differences" href="/journals/12539/diff?detail_id=13283">diff</a>)</li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125402016-06-22T18:30:29Zcduryeecduryee@redhat.com
<ul><li><strong>Description</strong> updated (<a title="View differences" href="/journals/12540/diff?detail_id=13284">diff</a>)</li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125412016-06-22T19:16:24Zjcline@redhat.comjcline@redhat.com
<ul><li><strong>Status</strong> changed from <i>NEW</i> to <i>ASSIGNED</i></li><li><strong>Assignee</strong> set to <i>jcline@redhat.com</i></li></ul><p>While I poked around to make sure this was a Python bug I figured out exactly why it was crashing and burning so I'm just going to fix it right now.</p> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125422016-06-22T19:29:49Zjcline@redhat.comjcline@redhat.com
<ul><li><strong>Status</strong> changed from <i>ASSIGNED</i> to <i>POST</i></li></ul><p><a href="https://github.com/pulp/pulp/pull/2614" class="external">https://github.com/pulp/pulp/pull/2614</a></p> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125432016-06-22T20:00:05Zjcline@redhat.comjcline@redhat.com
<ul></ul><p>To reproduce this issue, you can curl the path in the issue. It will still get a 403, but there won't be a traceback:</p>
<p>1.</p>
<pre><code> curl -v 'http://localhost/streamer/var/lib/pulp/content/distribution/ks-CentOS--7-x86_64/images/pxeboot/vmlinuz?policy=eyJleHRlbnNpb25zIjogeyJyZW1vdGVfaXAiOiAiMTkyLjE2OC4xNC4xMzEifSwgInJlc291cmNlIjogIi9zdHJlYW1lci92YXIvbGliL3B1bHAvY29udGVudC9kaXN0cmlidXRpb24va3MtQ2VudE9TLS03LXg4Nl82NC9pbWFnZXMvcHhlYm9vdC92bWxpbnV6IiwgImV4cGlyYXRpb24iOiAxNDY1NzgzNTkxfQ==;signature=ANlO8fxrFZ3mi9J8bf64XGBOBeM3Wal49VDtZPlJvwpa2X7ezF6tl8jfC7RKrjwWuWxAotT8UMEKn4foZqodZogao4HGaQkddkcFAPrZ53OjYijF_3P4h8fETImWC2cJkY4Cq0lbNi2tQ96dLe7nEEVioXwN1jYOsm42ZBbKbq3wapTU3bAtnSSzD3AjF9G4n9KRJ-YZLmuk1DNxsKI0sMdjiGKiWqz7jJXyji7pkMP_QoGAhhudQwsdmVzB9H3BEEqFoXYmM0Zl7kqB6sB8Msn-UMPoVyOd1GaJ7Wc-FEs9QQ_CnxgF8xEkaMadM2DbbYRB8R-CUb2NbvH2WRZIPQ=='
</code></pre>
<p>2. Check /var/log/httpd/error_log and see the traceback from the issue description<br>
3. Apply the fix<br>
4. Repeat 1<br>
5. Check /var/log/httpd/error_log and note there's a denial for the request, but there's no traceback (the signature check is failing).</p>
<p>Alternately, request content that needs to be lazily fetched until you luck out and get a url that's got padding ('=' at the end of the policy or signature)</p> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=125752016-06-24T14:22:50Zamacdona@redhat.comaustin@redhat.com
<ul><li><strong>Triaged</strong> changed from <i>No</i> to <i>Yes</i></li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=128072016-07-05T13:44:37ZAnonymous
<ul><li><strong>Status</strong> changed from <i>POST</i> to <i>MODIFIED</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>Applied in changeset <a class="changeset" title="Handle queries containing base64 padding gracefully The lazy URL parser does not work with base6..." href="https://pulp.plan.io/projects/pulp/repository/pulp/revisions/9bf5a56e60b0be96862b75c934f79ba12eed3e6c">pulp|9bf5a56e60b0be96862b75c934f79ba12eed3e6c</a>.</p> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=129202016-07-11T13:54:40Zsemyerssean.myers@redhat.com
<ul><li><strong>Platform Release</strong> set to <i>2.8.6</i></li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=129772016-07-12T20:01:44Zsemyerssean.myers@redhat.com
<ul><li><strong>Status</strong> changed from <i>MODIFIED</i> to <i>5</i></li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=130372016-07-18T19:21:46Zsemyerssean.myers@redhat.com
<ul><li><strong>Status</strong> changed from <i>5</i> to <i>CLOSED - CURRENTRELEASE</i></li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=130602016-07-19T19:00:06Zsemyerssean.myers@redhat.com
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-8 priority-6 priority-default closed" href="/issues/2083">Task #2083</a>: Issues common to 2.9.1 and 2.8 stream</i> added</li></ul> Pulp - Issue #2031: possible incorrect URL param parsing by streamerhttps://pulp.plan.io/issues/2031?journal_id=388102019-04-15T20:28:21Zbmbouterbmbouter@redhat.com
<ul><li><strong>Tags</strong> <i>Pulp 2</i> added</li></ul>