fix(object): partNumber must not be greater than 10000

Signed-off-by: yhjiango <[email protected]>
yhjiango · Mar 6, 2024 · 234d30e · 234d30e
1 parent 1f23b3f
commit 234d30e
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/objectnode/api_handler_multipart.go b/objectnode/api_handler_multipart.go
@@ -589,10 +589,6 @@ func (o *ObjectNode) checkReqParts(param *RequestParam, reqParts *CompleteMultip
 	}
 
 	for idx, reqPart := range reqParts.Parts {
-		if reqPart.PartNumber > len(multipartInfo.Parts) {
-			err = InvalidPart
-			return
-		}
 		if multipartInfo.Parts[reqPart.PartNumber-1].Size < MinPartSizeBytes && idx < len(reqParts.Parts)-1 {
 			err = EntityTooSmall
 			return
@@ -698,7 +694,7 @@ func (o *ObjectNode) completeMultipartUploadHandler(w http.ResponseWriter, r *ht
 	}
 	previousPartNum := 0
 	for _, p := range multipartUploadRequest.Parts {
-		if p.PartNumber < 1 {
+		if p.PartNumber < MinPartNumberValid || p.PartNumber > MaxPartNumberValid {
 			log.LogErrorf("completeMultipartUploadHandler: invalid part number: requestID(%v) partNum=%d",
 				GetRequestID(r), p.PartNumber)
 			errorCode = InvalidPartNumber