Feng Ruohang 1233254309 fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy ...

A presigned or signed PUT authorized for a single object could be turned
into a server-side copy of any object the signing key can read by adding
an unsigned x-amz-copy-source header, executed as the signer. SigV4
verification only walked the signed-headers list, never the headers that
actually arrived; the meta-header check matched only X-Amz-Meta- and ran
only on the presigned path, so an unsigned x-amz-* header outside the
list was never seen while the router still dispatched the PUT to
CopyObjectHandler.

Reject any x-amz-* request header not covered by the signed headers, on
both the presigned (doesPresignedSignatureMatch) and Authorization-header
(doesSignatureMatch) paths, matching AWS S3. The check tests membership
in the signed set rather than value equality, so a header whose first
value is empty (e.g. {"", "/src/secret"}) cannot slip through.
X-Amz-Content-Sha256 is exempt (payload hash: read from the query for
presigned requests and bound into the string-to-sign for signed ones, so
it is self-protected) and X-Amz-Signature-Age is exempt (an internal
scratch header written after verification, so repeated verification of
the same request stays idempotent). The synthesized X-Amz-Tagging header
in PutObjectTagging is now injected after signature verification.

Tests that previously added x-amz-copy-source and friends after signing
(relying on the vulnerable behavior) now re-sign, mirroring real S3
clients. Adds checkUnsignedHeaders unit cases and TestPresignedVerifyIdempotent.

Reported by Oren Yomtov. Inherited unchanged from upstream minio/minio.
Tracked as SN-2026-011.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Feng Ruohang <rh@vonng.com>

2026-09-10 09:57:01 +08:00

..

testdata

Add LDAP public key authentication to SFTP (#19833)

2024-06-05 00:51:13 -07:00

acl-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-bucket-cors-roundtrip_test.go

fix: carry per-bucket CORS through bucket metadata export/import

2026-09-05 16:21:12 +08:00

admin-bucket-handlers.go

fix: carry per-bucket CORS through bucket metadata export/import

2026-09-05 16:21:12 +08:00

admin-handler-utils.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

admin-handlers-config-kv.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-idp-config.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-idp-ldap.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-idp-openid.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-pools.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-site-replication.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-users_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-users-race_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers-users.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

admin-heal-ops.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

admin-router.go

Bump Go version in toolchain directive to 1.24.8 (#21629)

2025-10-10 11:57:03 -07:00

admin-server-info.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

api-datatypes.go

Migrate golanglint-ci config to V2 (#21081)

2025-03-29 17:56:02 -07:00

api-errors_test.go

fix: align multipart completion checksum errors

2026-08-27 09:05:49 +08:00

api-errors.go

fix: return 500 for unreadable objects instead of 206

2026-09-05 14:50:00 +08:00

api-headers_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

api-headers.go

fix: record plaintext part sizes for replicated SSE-C multipart parts

2026-09-05 15:33:23 +08:00

api-resources_test.go

…

api-resources.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

api-response_test.go

fix: track implicit HTTP response commits

2026-08-04 22:48:06 +08:00

api-response.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

api-router.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

api-utils_test.go

…

api-utils.go

modernizes for loop in cmd/, internal/ (#21309)

2025-05-27 08:19:03 -07:00

apierrorcode_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

auth-handler_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

auth-handler.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

authtype_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

background-heal-ops.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

background-newdisks-heal-ops_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

background-newdisks-heal-ops_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

background-newdisks-heal-ops.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batch-expire_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-expire_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-expire_test.go

RELEASE.2026-03-14T12-00-00Z with go 1.26.0

2026-03-14 17:39:57 +08:00

batch-expire.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batch-handlers_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-handlers_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-handlers_test.go

RELEASE.2026-03-14T12-00-00Z with go 1.26.0

2026-03-14 17:39:57 +08:00

batch-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batch-job-common-types_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-job-common-types_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-job-common-types_test.go

Add line, col to types used in batch-expire (#18747)

2024-01-08 15:22:28 -08:00

batch-job-common-types.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batch-replicate_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-replicate_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-replicate_test.go

RELEASE.2026-03-14T12-00-00Z with go 1.26.0

2026-03-14 17:39:57 +08:00

batch-replicate.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batch-rotate_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-rotate_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

batch-rotate.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

batchjobmetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

benchmark-utils_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

bitrot_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

bitrot-streaming.go

s3: Provide enough buffer when the object final size is unknown (#20847)

2025-01-17 11:19:30 -08:00

bitrot-whole.go

remove all the frivolous logs, that may or may not be actionable (#18922)

2024-01-30 18:11:45 -08:00

bitrot.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bootstrap-messages.go

Migrate golanglint-ci config to V2 (#21081)

2025-03-29 17:56:02 -07:00

bootstrap-peer-server_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bootstrap-peer-server_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bootstrap-peer-server.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-cors-adversarial_test.go

fix: complete bucket CORS protocol validation

2026-08-29 09:10:58 +08:00

bucket-cors-handlers_test.go

fix: make bucket CORS replication converge

2026-08-29 01:33:24 +08:00

bucket-cors-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-cors-middleware_test.go

fix: never record a resident bucket as a CORS load failure

2026-09-03 00:45:02 +08:00

bucket-cors-site-replication_test.go

refactor: serve non-resident buckets with the global CORS policy

2026-09-02 14:06:56 +08:00

bucket-encryption_test.go

…

bucket-encryption-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-encryption.go

remove gateway completely (#15929)

2022-10-24 17:44:15 -07:00

bucket-handlers_test.go

fix: authorize explicit version deletes with DeleteObjectVersion

2026-09-02 07:08:02 +08:00

bucket-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-lifecycle_test.go

fix: for unexpected errors in reading versioning config panic (#14994)

2022-05-31 02:57:57 -07:00

bucket-lifecycle-audit.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

bucket-lifecycle-handlers_test.go

fix: copyObject restore with a specific version, update test cases (#19895)

2024-06-10 08:50:49 -07:00

bucket-lifecycle-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-lifecycle.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-listobjects-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-metadata_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-metadata_gen.go

feat: persist per-bucket CORS config in bucket metadata

2026-08-25 19:24:44 +05:00

bucket-metadata_test.go

feat: persist per-bucket CORS config in bucket metadata

2026-08-25 19:24:44 +05:00

bucket-metadata-lock_test.go

fix: harden bucket metadata creation edge cases

2026-09-02 07:20:53 +08:00

bucket-metadata-publication_test.go

fix: drop the broken bucket-metadata reload publication guard (issue #105 T3)

2026-09-08 16:13:54 +08:00

bucket-metadata-race_test.go

fix: drop the broken bucket-metadata reload publication guard (issue #105 T3)

2026-09-08 16:13:54 +08:00

bucket-metadata-reload_test.go

test: cover metadata reload with equal maximum timestamps

2026-09-09 19:35:13 +08:00

bucket-metadata-sys.go

fix: drop the broken bucket-metadata reload publication guard (issue #105 T3)

2026-09-08 16:13:54 +08:00

bucket-metadata.go

fix: order bucket deletion and metadata publication safely

2026-09-08 14:43:15 +08:00

bucket-notification-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-object-lock.go

fix: retransmit and re-order Object Lock for SSE-C replicas (single erasure set)

2026-09-07 00:11:04 +08:00

bucket-policy_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-policy-handlers_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-policy-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-policy.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

bucket-quota_test.go

fix: report effective bucket quotas in metrics

2026-09-05 21:23:46 +03:30

bucket-quota.go

fix: report effective bucket quotas in metrics

2026-09-05 21:23:46 +03:30

bucket-replication_test.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

bucket-replication-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-replication-metrics_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-replication-metrics_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-replication-metrics.go

Fix uninitialized replication stats (#20260)

2024-08-15 05:04:40 -07:00

bucket-replication-stats.go

tests: Do not allow forced type asserts (#20905)

2025-02-18 08:25:55 -08:00

bucket-replication-utils_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-replication-utils_gen.go

fix: satisfy stricter Go 1.26.1 linter checks

2026-03-21 13:49:36 +08:00

bucket-replication-utils_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

bucket-replication-utils.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

bucket-replication.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

bucket-resource-boundary_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-stats_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-stats_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-stats.go

fix(replication): expose bounded MRF queue drops

2026-09-09 14:37:02 +08:00

bucket-targets.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

bucket-versioning-handler.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

bucket-versioning.go

remove gateway completely (#15929)

2022-10-24 17:44:15 -07:00

build-constants.go

docs: adopt the no-CLA plus DCO policy and fix copyright terms

2026-08-06 12:43:58 +08:00

common-main_test.go

fix: restore embedded Console proxy and WebSocket configuration

2026-09-07 13:36:24 +08:00

common-main.go

fix: restore embedded Console proxy and WebSocket configuration

2026-09-07 13:36:24 +08:00

compression-ssec_test.go

fix: exclude SSE-C objects from compression

2026-09-05 15:51:24 +08:00

config-common.go

feat: SSE-KMS use uuid instead of read all data to md5. (#17958)

2023-09-18 10:00:54 -07:00

config-current_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

config-current.go

Merge branch 'main' into feat/access-based-ilm

2026-09-08 13:04:25 +08:00

config-dir_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

config-dir.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

config-encrypted_test.go

Bump up madmin-go and pkg deps (#17469)

2023-06-19 17:53:08 -07:00

config-migrate_test.go

fix: require DSNs for legacy database notifications

2026-08-24 02:22:20 +08:00

config-migrate.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

config-versions.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

config.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

consolelogger.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

copy-part-range_test.go

…

copy-part-range.go

…

crossdomain-xml-handler_test.go

fix: set request ID in tracing context key (#17602)

2023-07-08 07:31:42 -07:00

crossdomain-xml-handler.go

implement a flag to specify custom crossdomain.xml (#19262)

2024-03-17 23:42:40 -07:00

data-scanner_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

data-scanner-metric.go

fix: timeN function return final closure not be called (#21615)

2025-09-30 23:06:01 -07:00

data-scanner.go

Merge branch 'main' into feat/access-based-ilm

2026-09-08 13:04:25 +08:00

data-usage_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

data-usage-cache_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

data-usage-cache_gen.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

data-usage-cache_test.go

Add more size intervals to obj size histogram (#18772)

2024-01-12 23:51:08 -08:00

data-usage-cache.go

Merge branch 'main' into feat/access-based-ilm

2026-09-08 13:04:25 +08:00

data-usage-utils.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

data-usage.go

allow caller context during reloads() to cancel (#19687)

2024-05-08 17:51:34 -07:00

decommetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

delete-version-authz_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

dummy-data-generator_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

dummy-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

dynamic-timeouts_test.go

test: give the dynamic timeout tests a private random source

2026-09-02 20:04:57 +08:00

dynamic-timeouts.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

encryption-v1_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

encryption-v1.go

chore: remove dead code left by earlier fixes

2026-09-02 14:06:56 +08:00

endpoint_contrib_test.go

…

endpoint_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

endpoint-ellipses_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

endpoint-ellipses.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

endpoint.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

erasure-coding.go

fix(storage): reject unusable erasure metadata at every sink

2026-08-04 23:00:21 +08:00

erasure-common.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-decode_test.go

fix: restore safe erasure read buffer pooling

2026-08-04 22:48:06 +08:00

erasure-decode.go

fix: restore safe erasure read buffer pooling

2026-08-04 22:48:06 +08:00

erasure-encode_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-encode.go

Add PutObject Ring Buffer (#19605)

2024-05-14 17:11:04 -07:00

erasure-errors.go

Replaces 'disk'=>'drive' visible to end user (#15464)

2022-08-04 16:10:08 -07:00

erasure-heal_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-healing_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-healing-common_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-healing-common.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

erasure-healing.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-metadata_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-metadata-utils_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-metadata-utils.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-metadata.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-multipart-conditional_test.go

Updates for conditional put read quorum issue (#21653)

2025-10-23 21:05:31 -07:00

erasure-multipart-fullobject_test.go

Merge remote-tracking branch 'origin/main' into codex/issue-50-after-checksum-contract

2026-08-29 19:28:06 +08:00

erasure-multipart-ssec-replica_test.go

fix: record plaintext part sizes for replicated SSE-C multipart parts

2026-09-05 15:33:23 +08:00

erasure-multipart-upload-checksum_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

erasure-multipart.go

docs: point the multi-pool lock follow-up at pgsty/silo#133

2026-09-07 00:11:04 +08:00

erasure-object_test.go

fix: restore the merrs tag on dangling-object deletion audit records

2026-08-04 23:00:31 +08:00

erasure-object-conditional_test.go

Updates for conditional put read quorum issue (#21653)

2025-10-23 21:05:31 -07:00

erasure-object-conditional-delete_test.go

fix(delete): honor If-Match precondition on DeleteObject (#10)

2026-09-06 23:05:27 +08:00

erasure-object.go

docs: point the multi-pool lock follow-up at pgsty/silo#133

2026-09-07 00:11:04 +08:00

erasure-server-pool-decom_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

erasure-server-pool-decom_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

erasure-server-pool-decom_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-server-pool-decom.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-server-pool-rebalance_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

erasure-server-pool-rebalance_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

erasure-server-pool-rebalance.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-server-pool.go

Merge remote-tracking branch 'origin/main' into codex/access-tiering-ci-20260908

2026-09-08 15:08:34 +08:00

erasure-sets_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

erasure-sets.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

erasure-utils.go

remove all the frivolous logs, that may or may not be actionable (#18922)

2024-01-30 18:11:45 -08:00

erasure.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

etcd.go

logging: Add subsystem to log API (#19002)

2024-04-04 05:04:40 -07:00

event-notification.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

fmt-gen.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

format_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

format-erasure_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

format-erasure.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

format-meta.go

…

ftp-server-driver.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

ftp-server.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

generic-handlers_contrib.go

…

generic-handlers_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

generic-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

global-heal.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

globals.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

grid.go

fix(tls): honor Go key exchange defaults across transports

2026-09-09 18:50:12 +08:00

handler-api.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

handler-utils_test.go

chore: refresh compatibility and lint baselines

2026-09-02 02:31:20 +08:00

handler-utils.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

hasher.go

use crypto/sha256 only for FIPS 140-2 compliance (#14983)

2022-05-27 06:00:19 -07:00

healingmetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

healthcheck-handler.go

extend cluster health to return errors for IAM, and Bucket metadata (#19995)

2024-06-26 00:44:34 -07:00

healthcheck-main_test.go

fix: harden healthcheck and distroless lanes per adversarial review

2026-08-06 17:27:22 +08:00

healthcheck-main.go

fix: rewrite the healthcheck output selection as a switch

2026-08-06 19:09:26 +08:00

healthcheck-router.go

migrate to minio/mux from gorilla/mux (#16456)

2023-01-23 16:42:47 +05:30

http-stats.go

Add TTFB to all APIs and enable for responses without body (#20479)

2024-09-24 10:13:00 -07:00

http-tracer_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

http-tracer.go

Add TTFB to all APIs and enable for responses without body (#20479)

2024-09-24 10:13:00 -07:00

httprange_test.go

add support for specific error response for InvalidRange (#19668)

2024-05-05 09:56:21 -07:00

httprange.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

iam-etcd-store_test.go

…

iam-etcd-store.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

iam-object-store_test.go

Allow LDAP DNs with slashes to be loaded from object store (#20541)

2024-10-10 16:40:37 -07:00

iam-object-store.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

iam-store.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

iam.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

ilm-access-move_test.go

test: make access move failure recovery deterministic

2026-09-08 15:28:33 +08:00

ilm-access-tier_test.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

ilm-access-tier.go

fix: make access tier moves preserve versions and isolate writes

2026-09-08 15:08:34 +08:00

ilm-access-tracker_gen_test.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

ilm-access-tracker_gen.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

ilm-access-tracker_test.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

ilm-access-tracker.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

ilm-config.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

inspect-encryption_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

is-dir-empty_linux.go

turn-off Nlink readdir() optimization for NFS/CIFS (#19420)

2024-04-05 08:17:08 -07:00

is-dir-empty_other.go

turn-off Nlink readdir() optimization for NFS/CIFS (#19420)

2024-04-05 08:17:08 -07:00

jwt_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

jwt.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

kms-handlers_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

kms-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

kms-router.go

kms: add support for MinKMS and remove some unused/broken code (#19368)

2024-05-07 16:55:37 -07:00

last-minute_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

last-minute_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

last-minute.go

Do lockless last minute latency metrics (#17576)

2023-07-05 10:40:45 -07:00

lceventsrc_string.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

leak-detect_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

listen-notification-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

local-locker_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

local-locker_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

local-locker_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

local-locker.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

lock-rest-client_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

lock-rest-client.go

separate lock from common grid to avoid epoll contention (#20180)

2024-07-29 11:10:04 -07:00

lock-rest-server-common_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

lock-rest-server-common.go

perf: websocket grid connectivity for all internode communication (#18461)

2023-11-20 17:09:35 -08:00

lock-rest-server.go

Add lock overload protection (#20876)

2025-01-31 11:54:34 -08:00

logging.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

main.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metacache_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache_test.go

…

metacache-bucket_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

metacache-bucket.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metacache-entries_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

metacache-entries.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metacache-manager.go

remove gateway completely (#15929)

2022-10-24 17:44:15 -07:00

metacache-marker.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

metacache-server-pool.go

fix: return NoSuchBucket from listing shortcuts

2026-08-26 19:02:25 +08:00

metacache-set_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache-set_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache-set.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metacache-stream_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

metacache-stream.go

return error for AppendObject() API (#21272)

2025-05-07 08:37:12 -07:00

metacache-walk_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache-walk_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metacache-walk.go

s3: Fix early listing stopping when ILM is enabled (#472) (#21246)

2025-05-26 00:06:43 -07:00

metacache.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metrics-realtime.go

chore(deps): align the SILO Go dependency stack

2026-08-24 01:08:46 +08:00

metrics-resource.go

Bump Go version in toolchain directive to 1.24.8 (#21629)

2025-10-10 11:57:03 -07:00

metrics-router.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metrics-v2_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metrics-v2_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metrics-v2_test.go

Migrate golanglint-ci config to V2 (#21081)

2025-03-29 17:56:02 -07:00

metrics-v2.go

fix(replication): expose bounded MRF queue drops

2026-09-09 14:37:02 +08:00

metrics-v3-api.go

Add TTFB to all APIs and enable for responses without body (#20479)

2024-09-24 10:13:00 -07:00

metrics-v3-audit.go

Move /cluster/audit to /audit (#19708)

2024-05-10 07:50:39 -07:00

metrics-v3-bucket-replication.go

Add targetArn label for bucket replication metrics (#21354)

2025-06-04 13:45:31 -07:00

metrics-v3-cache.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

metrics-v3-cluster-config.go

Add cluster config metrics in metrics-v3 (#19507)

2024-05-24 05:50:46 -07:00

metrics-v3-cluster-erasure-set.go

Add more metrics to v3/cluster/erasure-set (#19714)

2024-05-14 00:25:56 -07:00

metrics-v3-cluster-health.go

feat: Add Metrics V3 API (#19068)

2024-03-10 01:15:15 -08:00

metrics-v3-cluster-iam.go

Add cluster IAM metrics in metrics-v3 (#19595)

2024-05-02 01:20:42 -07:00

metrics-v3-cluster-notification.go

Add cluster notification metrics in metrics-v3 (#19533)

2024-04-23 21:10:35 -07:00

metrics-v3-cluster-usage.go

fix: report effective bucket quotas in metrics

2026-09-05 21:23:46 +03:30

metrics-v3-handler.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

metrics-v3-ilm.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30

metrics-v3-logger-webhook.go

Add logger webhook metrics in metrics-v3 (#19515)

2024-05-14 00:27:33 -07:00

metrics-v3-replication.go

fix(replication): expose bounded MRF queue drops

2026-09-09 14:37:02 +08:00

metrics-v3-scanner.go

Add cluster scanner metrics in metrics-v3 (#19517)

2024-05-24 12:29:25 -07:00

metrics-v3-system-cpu.go

fix errors in metrics code on macos (#19965)

2024-06-20 10:55:03 -07:00

metrics-v3-system-drive.go

Migrate golanglint-ci config to V2 (#21081)

2025-03-29 17:56:02 -07:00

metrics-v3-system-memory.go

Add system memory metrics in v3 (#19486)

2024-04-16 22:10:25 -07:00

metrics-v3-system-network.go

feat: Add Metrics V3 API (#19068)

2024-03-10 01:15:15 -08:00

metrics-v3-system-process.go

fix errors in metrics code on macos (#19965)

2024-06-20 10:55:03 -07:00

metrics-v3-types.go

Enforce a bucket limit of 100 to v2 metrics calls (#20761)

2025-02-28 11:33:08 -08:00

metrics-v3.go

fix(replication): expose bounded MRF queue drops

2026-09-09 14:37:02 +08:00

metrics.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

mrf_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

mrf_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

mrf.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

namespace-lock_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

namespace-lock.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

naughty-disk_test.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

net_test.go

Bump Go version in toolchain directive to 1.24.8 (#21629)

2025-10-10 11:57:03 -07:00

net.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

notification-summary.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

notification.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

object_api_suite_test.go

fix: return NoSuchBucket from listing shortcuts

2026-08-26 19:02:25 +08:00

object-api-common.go

perf: websocket grid connectivity for all internode communication (#18461)

2023-11-20 17:09:35 -08:00

object-api-datatypes_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

object-api-datatypes.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

object-api-deleteobject_test.go

protect bpool from buffer pollution by invalid buffers (#20342)

2024-08-28 18:40:52 -07:00

object-api-errors.go

fix: align multipart completion checksum errors

2026-08-27 09:05:49 +08:00

object-api-getobjectinfo_test.go

avoid locks for internal and invalid buckets in MakeBucket() (#16302)

2022-12-23 07:46:00 -08:00

object-api-input-checks.go

logging: Add subsystem to log API (#19002)

2024-04-04 05:04:40 -07:00

object-api-interface_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

object-api-interface.go

Merge branch 'main' into feat/access-based-ilm

2026-09-08 13:04:25 +08:00

object-api-listobjects_test.go

Bump Go version in toolchain directive to 1.24.8 (#21629)

2025-10-10 11:57:03 -07:00

object-api-multipart_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

object-api-options_test.go

fix: end GetObjectAttributes part pagination correctly

2026-09-05 16:17:39 +08:00

object-api-options.go

fix: send the SSE-KMS context as a JSON object on federated copies

2026-09-09 17:51:32 +08:00

object-api-putobject_test.go

use typos instead of codespell (#19088)

2024-02-21 22:26:06 -08:00

object-api-utils_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

object-api-utils.go

Merge pull request #126 from pgsty/fix/issue-118-no-compressed-ssec

2026-09-06 09:26:12 +08:00

object-attributes-parts_test.go

test: reconcile encrypted-parts attributes test with #119 write validation

2026-09-06 09:51:09 +08:00

object-attributes-parts-pagination_test.go

fix: end GetObjectAttributes part pagination correctly

2026-09-05 16:17:39 +08:00

object-attributes-ssec_test.go

fix: preserve replicated object attributes reads

2026-08-29 18:18:01 +08:00

object-attributes-ssec-authz_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

object-checksum-unsupported_test.go

fix: reject unsupported checksum assertions

2026-08-29 17:23:26 +08:00

object-copy-checksum_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

object-copy-federation_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

object-copy-metadata_test.go

fix: exclude SSE-C objects from compression

2026-09-05 15:51:24 +08:00

object-crc64-composite_test.go

fix: reject composite CRC64NVME trailers

2026-08-29 18:15:51 +08:00

object-handlers_tampered_test.go

fix: return 500 for unreadable objects instead of 206

2026-09-05 14:50:00 +08:00

object-handlers_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

object-handlers-chunked-checksum_test.go

fix: honor header checksum when x-amz-trailer is advertised on non-trailer chunked PUT (#107)

2026-09-06 22:48:29 +08:00

object-handlers-common_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

object-handlers-common.go

fix: retransmit existing SSE-C replicas instead of metadata-copying them

2026-09-07 00:11:04 +08:00

object-handlers-conditional-delete_test.go

fix(delete): honor If-Match precondition on DeleteObject (#10)

2026-09-06 23:05:27 +08:00

object-handlers-delete-precond_test.go

fix(delete): honor If-Match precondition on DeleteObject (#10)

2026-09-06 23:05:27 +08:00

object-handlers.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

object-lambda-handlers_test.go

fix: lambda handler response to match the lambda return status (#21436)

2025-07-18 14:56:31 -07:00

object-lambda-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

object-multipart-federation-checksum_test.go

test: align federated client version

2026-08-29 16:00:21 +08:00

object-multipart-handlers_test.go

fix(iam): bind policy conditions to effective request values

2026-08-04 23:00:30 +08:00

object-multipart-handlers.go

fix: retransmit and re-order Object Lock for SSE-C replicas (single erasure set)

2026-09-07 00:11:04 +08:00

object-ssec-zero-byte_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

os_other.go

optimize mkdir calls to avoid base-dir Mkdir attempts (#18021)

2023-09-13 08:14:36 -07:00

os_unix.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

os_windows.go

tests: Do not allow forced type asserts (#20905)

2025-02-18 08:25:55 -08:00

os-dirent_fileino.go

…

os-dirent_ino.go

…

os-dirent_namelen_bsd.go

…

os-dirent_namelen_linux.go

…

os-instrumented.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

os-readdir_test.go

chore(deps): align the SILO Go dependency stack

2026-08-24 01:08:46 +08:00

os-readdir-common.go

…

os-reliable_test.go

optimize mkdir calls to avoid base-dir Mkdir attempts (#18021)

2023-09-13 08:14:36 -07:00

os-reliable.go

do not panic on rebalance during server restarts (#19563)

2024-04-22 10:49:30 -07:00

os-rename_linux.go

remove rename2 entirely, avoids the risk of moving data (#19058)

2024-02-14 17:09:38 -08:00

os-rename_nolinux.go

remove rename2 entirely, avoids the risk of moving data (#19058)

2024-02-14 17:09:38 -08:00

osmetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

peer-rest-client.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

peer-rest-common.go

Add multipart uploads cache for ListMultipartUploads() (#20407)

2024-09-09 09:58:30 -07:00

peer-rest-server.go

fix: drop the broken bucket-metadata reload publication guard (issue #105 T3)

2026-09-08 16:13:54 +08:00

peer-s3-client.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

peer-s3-server.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

perf-tests.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

policy_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

post-policy_test.go

fix: harden CORS and replication request trust

2026-09-01 20:50:08 +08:00

post-policy-fan-out.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

postpolicyform_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

postpolicyform.go

fix: Tagging in PostPolicy upload does not enforce policy tags (#21656)

2025-10-23 08:10:12 -07:00

prepare-storage.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

rebalance-admin.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

rebalancemetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

rebalstatus_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

replication-delete-marker_test.go

test: reuse replication compatibility fixtures

2026-09-09 14:44:02 +08:00

replication-mrf-observability_test.go

test: reuse replication compatibility fixtures

2026-09-09 14:44:02 +08:00

replication-resync-cancel_test.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

replication-ssec-retransmit_test.go

fix: repair an undecodable SSE-C replica on retransmit

2026-09-07 00:11:04 +08:00

replication-trust_test.go

Merge pull request #128 from pgsty/fix/issue-114-115-object-attributes-parts

2026-09-06 09:25:28 +08:00

replication-trust-ssec-replica_test.go

fix: store raw SSE-C replicas verbatim on the destination

2026-09-05 15:07:22 +08:00

replication-trust.go

fix: store raw SSE-C replicas verbatim on the destination

2026-09-05 15:07:22 +08:00

routers.go

separate lock from common grid to avoid epoll contention (#20180)

2024-07-29 11:10:04 -07:00

s3-zip-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

scannermetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

server_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

server-main_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

server-main.go

Merge branch 'main' into feat/access-based-ilm

2026-09-08 13:04:25 +08:00

server-rlimit.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

server-startup-msg_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

server-startup-msg.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

service.go

initialize the disk healer early on (#19143)

2024-02-27 23:02:14 -08:00

setup-type.go

remove gateway completely (#15929)

2022-10-24 17:44:15 -07:00

sftp-server_test.go

fix: SFTP auth bypass with no pub key in LDAP (#20986)

2025-02-27 10:43:32 -08:00

sftp-server-driver.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

sftp-server.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

shared-lock.go

fix: allow global leader lock context merge to be canceled (#16603)

2023-02-13 01:26:38 -08:00

signals.go

Dont start console service if MINIO_BROWSER=off (#20374)

2024-09-04 10:02:39 -07:00

signature-v2_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

signature-v2.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

signature-v4_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

signature-v4-parser_test.go

fix: allow trailing slash in AWS S3 POST policies (#21612)

2025-10-10 11:57:35 -07:00

signature-v4-parser.go

fix: allow trailing slash in AWS S3 POST policies (#21612)

2025-10-10 11:57:35 -07:00

signature-v4-utils_test.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

signature-v4-utils.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

signature-v4.go

fix(auth): reject unsigned x-amz-* headers to close CopyObject confused-deputy

2026-09-10 09:57:01 +08:00

site-replication_test.go

feat: replicate per-bucket CORS across sites and harden the protocol path

2026-08-27 12:46:47 +05:00

site-replication-bucket-adoption_test.go

fix: derive the Object Lock versioning rule from the parsed configuration

2026-09-02 18:49:16 +08:00

site-replication-metrics_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

site-replication-metrics_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

site-replication-metrics.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

site-replication-object-lock_test.go

fix: derive the Object Lock versioning rule from the parsed configuration

2026-09-02 18:49:16 +08:00

site-replication-status-accounting_test.go

refactor: serve non-resident buckets with the global CORS policy

2026-09-02 14:06:56 +08:00

site-replication-utils_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

site-replication-utils_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

site-replication-utils.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

site-replication.go

fix(replication): scope resync cancellation and drain worker lifecycle

2026-09-09 14:37:02 +08:00

speedtest.go

modernizes for loop in cmd/, internal/ (#21309)

2025-05-27 08:19:03 -07:00

storage-datatypes_gen_test.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

storage-datatypes_gen.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

storage-datatypes_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

storage-datatypes.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

storage-errors.go

chore: cut over to pgsty/silo and main

2026-08-06 09:28:06 +08:00

storage-interface.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

storage-rest_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

storage-rest-client.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

storage-rest-common_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

storage-rest-common_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

storage-rest-common.go

fix: CVE-2026-42600 remove ReadMultiple storage-REST API

2026-06-12 21:08:59 +08:00

storage-rest-server-guard_test.go

fix(storage): preserve ReadParts errors across keepalive responses

2026-08-04 23:00:30 +08:00

storage-rest-server-guard.go

fix(storage): preserve ReadParts errors across keepalive responses

2026-08-04 23:00:30 +08:00

storage-rest-server.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

storage-rest-traversal_test.go

fix(storage): preserve ReadParts errors across keepalive responses

2026-08-04 23:00:30 +08:00

storagemetric_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

streaming-signature-v4_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

streaming-signature-v4.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

streaming-v4-unsigned.go

fix: fake CVE-2026-40027 block unsigned-trailer query auth bypass

2026-04-16 14:46:44 +08:00

sts-datatypes.go

Add support for Identity Management Plugin (#14913)

2022-05-26 17:58:09 -07:00

sts-errors.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

sts-handlers_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

sts-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

stserrorcode_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

test-utils_test.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

tier_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

tier_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

tier_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

tier-handlers.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

tier-last-day-stats_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

tier-last-day-stats_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

tier-last-day-stats.go

Convert more peer <--> peer REST calls (#19004)

2024-02-19 14:54:46 -08:00

tier-sweeper.go

reload from drive tier-config when in-memory cache is not found (#19527)

2024-04-16 22:09:58 -07:00

tier.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

tls_defaults_test.go

fix(tls): honor Go key exchange defaults across transports

2026-09-09 18:50:12 +08:00

typed-errors.go

Add New Accesskey Info and OpenID Accesskey List API endpoints (#21097)

2025-04-16 00:34:24 -07:00

untar.go

tests: Do not allow forced type asserts (#20905)

2025-02-18 08:25:55 -08:00

update_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

update-notifier_test.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

update-notifier.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

update.go

build: converge the final 20260903 dependency graph

2026-09-03 20:54:40 +08:00

url_test.go

…

user-provider-utils.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

utils_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

utils.go

fix(tls): honor Go key exchange defaults across transports

2026-09-09 18:50:12 +08:00

veeam-sos-api.go

fix: report effective bucket quotas in metrics

2026-09-05 21:23:46 +03:30

version_test.go

…

warm-backend-azure.go

add tests for ILM transition and healing (#166) (#20601)

2024-10-31 15:10:24 -07:00

warm-backend-gcs.go

Migrate golanglint-ci config to V2 (#21081)

2025-03-29 17:56:02 -07:00

warm-backend-minio.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

warm-backend-s3.go

use provided region in tier configuration for S3 backend (#21365)

2025-06-08 09:13:30 -07:00

warm-backend.go

feat(server): present Silo identity and close the inherited upstream services

2026-08-06 08:46:58 +08:00

xl-storage_noatime_notsupported.go

Set O_NONBLOCK for reads and writes on unix (#20133)

2024-07-23 09:36:24 -07:00

xl-storage_noatime_supported.go

Set O_NONBLOCK for reads and writes on unix (#20133)

2024-07-23 09:36:24 -07:00

xl-storage_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

xl-storage_unix_test.go

move to go1.24 (#21114)

2025-04-09 07:28:39 -07:00

xl-storage_windows_test.go

rename Force to Immediate for clarity (#18540)

2023-11-28 22:35:16 -08:00

xl-storage-disk-id-check_test.go

fix: guard the ReadParts trace path against an empty part list

2026-08-04 23:00:31 +08:00

xl-storage-disk-id-check.go

fix: guard the ReadParts trace path against an empty part list

2026-08-04 23:00:31 +08:00

xl-storage-errors_test.go

…

xl-storage-errors.go

fix: handle syscall.EROFS also for osIsPermission() (#16765)

2023-03-06 08:56:29 -08:00

xl-storage-format_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

xl-storage-format-utils_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

xl-storage-format-utils.go

enhance getActualSize() to return valid values for most situations (#20228)

2024-08-08 08:29:58 -07:00

xl-storage-format-v1_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

xl-storage-format-v1_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

xl-storage-format-v1.go

Clear omitted fields (#20575)

2024-10-22 08:30:50 -07:00

xl-storage-format-v2_gen_test.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

xl-storage-format-v2_gen.go

Use new gofumpt (#21613)

2025-09-28 13:59:21 -07:00

xl-storage-format-v2_string.go

build: regenerate and verify all generated outputs

2026-08-04 23:02:16 +08:00

xl-storage-format-v2_test.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

xl-storage-format-v2-legacy.go

chore(deps): align the SILO Go dependency stack

2026-08-24 01:08:46 +08:00

xl-storage-format-v2.go

chore(deps): align the SILO Go dependency stack

2026-08-24 01:08:46 +08:00

xl-storage-free-version_test.go

Improve expiration of tiered objects (#18926)

2024-03-01 21:11:03 -08:00

xl-storage-free-version.go

Improve expiration of tiered objects (#18926)

2024-03-01 21:11:03 -08:00

xl-storage-meta-inline.go

Run modernize (#21546)

2025-08-28 19:39:48 -07:00

xl-storage.go

feat(ilm): relocate hot objects across server pools by GET frequency

2026-08-15 13:48:22 +03:30