Merge pull request #28172 from joke-lee/rgw-sts-bad-token

rgw: fix rgw crash and set correct error code

Reviewed-by: Matt Benjamin <mbenjamin@redhat.com>
Reviewed-by: Pritha Srivastava <prsrivas@redhat.com>

diff --cc src/rgw/rgw_rest_s3.cc
index ae1065160ad482aaebfdab63efc6a1b82de58586,1a90e8d47e415ef9120b1130f14e7413a6cfa829..67bd8f300a00552ce695e6dab63b689d240fd9d4
--- 1/src/rgw/rgw_rest_s3.cc
--- 2/src/rgw/rgw_rest_s3.cc
+++ b/src/rgw/rgw_rest_s3.cc
@@@ -4611,12 -4474,17 +4611,17 @@@ rgw::auth::s3::STSEngine::get_session_t
  
    ret = keyhandler->decrypt(en_input, dec_output, &error);
    if (ret < 0) {
 -    ldout(cct, 0) << "ERROR: Decryption failed: " << error << dendl;
 +    ldpp_dout(dpp, 0) << "ERROR: Decryption failed: " << error << dendl;
      return -EPERM;
    } else {
-     dec_output.append('\0');
-     auto iter = dec_output.cbegin();
-     decode(token, iter);
+     try {
+       dec_output.append('\0');
+       auto iter = dec_output.cbegin();
+       decode(token, iter);
+     } catch (const buffer::error& e) {
+       ldout(cct, 0) << "ERROR: decode SessionToken failed: " << error << dendl;
+       return -EINVAL;
+     }
    }
    return 0;
  }