[HADOOP-16482] S3A doesn't actually verify paths have the correct authority

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.1.0
• Fix Version/s: 3.3.0
• Component/s: fs/s3
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 31/Jul/19 20:20
• Updated: 07/Apr/20 13:04
• Resolved: 07/Apr/20 13:04

Description

Probably been around a long time, but we've never noticed, assuming that Path.makeQualified(uri, workingDir) did the right thing.

You can provide any s3a URI to an S3 command and it'll get mapped to the current bucket without any validation that the authorities are equal. Oops.

Issue Links

• Is contained by: HADOOP-15430 hadoop fs -mkdir -p path-ending-with-slash/ fails with s3guard