fix:Add empty string check after url_decode

Signed-off-by: Emin <emin.sunacoglu@clyso.com>

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index 1ef57eda495953ed05de9e6ef6beb293f3e23fe7..e061bbc78c1c08873968e5e45a7a41a3d45bac21 100644 (file)
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -4001,6 +4001,12 @@ int RGWPutObj::init_processing(optional_yield y) {
       copy_source_object_name =
         url_decode(copy_source_object_name.substr(0, pos));
     }
+    if (copy_source_object_name.empty()) {
+      //means url_decode returned empty string so the url is formatted badly
+      ret = -EINVAL;
+      ldpp_dout(this, 5) << "x-amz-copy-source bad format" << dendl;
+      return ret;
+    }
     pos = copy_source_bucket_name.find(":");
     if (pos == std::string::npos) {
       // if tenant is not specified in x-amz-copy-source, use tenant of the requester