Chris LuandDevin 4c2c0ff21c s3: fix wildcard matcher skipping '*' targets in policy patterns (#12034) ...

* s3: check pattern '*' before literal equality in matchWildcardString

When the target string carried a '*' at the offset of the pattern's '*',
the literal-equality case consumed it as a one-character match and no
backtrack point was recorded, so the comparison returned false. A Deny
Resource carrying a policy variable, or an Allow carrying NotResource,
could then be sidestepped by an object key containing '*' at the aligned
offset.

* test: cover literal asterisks in wildcard match targets

---------

Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-24 08:20:22 -07:00

..

buffer_pool

fix: cap pool retention so chunk-copy buffers don't hoard memory (#9422)

2026-05-10 13:34:25 -07:00

buffered_queue

ensure head index is within range

2024-05-05 12:20:08 -07:00

buffered_writer

webdav: improve webdav upload speed

2020-12-01 15:32:27 -08:00

chunk_cache

fix(chunk_cache): close data/index files on initialization error (#10057)

2026-06-23 01:49:35 -07:00

constants

filer: record the size of a multipart upload saved inside the entry (#11734)

2026-10-15 14:20:42 -07:00

fla9

go fmt

2023-11-26 11:47:20 -08:00

grace

fix(mini): shut down admin/s3/webdav/filer before volume/master on Ctrl+C (#9112)

2026-04-16 16:11:01 -07:00

http

volume: report the needle read error with a failed read (#11934)

2026-10-21 20:24:48 -07:00

httpdown

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

log_buffer

filer: bound metadata log flush retries during shutdown (#11596)

2026-10-06 09:51:02 +08:00

mem

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

pgxutil

fix(credential/postgres,s3api/iam): rename safety + pgxutil follow-ups to #9226 (#9230)

2026-04-26 16:31:53 -07:00

request_id

s3/iam: reuse one request id per request (#8538)

2026-03-06 15:22:39 -08:00

skiplist

skiplist: fix TestFindGreaterOrEqual flake (compare against largest key, not value) (#10757)

2026-08-14 08:31:31 -07:00

sqlutil

fix(util): ignore comment only sql input (#9933)

2026-06-12 10:10:27 -07:00

version

4.49

2026-10-23 03:49:00 +00:00

wildcard

s3: fix wildcard matcher skipping '*' targets in policy patterns (#12034)

2026-10-24 08:20:22 -07:00

async_worker_test.go

fix(mount): run entry invalidations off the meta-cache apply loop (#10002)

2026-06-19 09:19:35 -07:00

async_worker.go

fix(mount): run entry invalidations off the meta-cache apply loop (#10002)

2026-06-19 09:19:35 -07:00

buckets_test.go

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

buckets.go

Switch empty-folder cleanup to bucket policy (#8292)

2026-02-10 18:38:38 -08:00

bytes_test.go

fix(util): return full uint64 randomness (#9864)

2026-06-08 22:07:24 -07:00

bytes.go

fix(util): return full uint64 randomness (#9864)

2026-06-08 22:07:24 -07:00

cipher_test.go

refactor(cipher_test): plantext -> plaintext (#3669)

2022-09-14 11:24:09 -07:00

cipher.go

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

compression_stream.go

reduce gzip allocation

2021-08-20 18:38:18 +08:00

compression.go

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

concurrent_read_map.go

master: survive a volume layout deleted twice (#11098)

2026-09-02 11:50:48 -07:00

cond_wait.go

[volume] refactor and add metrics for flight upload and download data limit condition (#6920)

2025-07-02 18:03:49 -07:00

config_test.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00

config.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00

constants_4bytes.go

go fix

2026-02-20 18:42:00 -08:00

constants_5bytes.go

go fix

2026-02-20 18:42:00 -08:00

constants_lifecycle_interval_10sec.go

go fix

2026-02-20 18:42:00 -08:00

constants_lifecycle_interval_day.go

go fix

2026-02-20 18:42:00 -08:00

error_wait_group_test.go

refactor: extract EC orchestration into a shared weed/ec package (#10760)

2026-08-14 13:54:12 -07:00

error_wait_group.go

refactor: extract EC orchestration into a shared weed/ec package (#10760)

2026-08-14 13:54:12 -07:00

fadvise_linux_test.go

perf(cache): drop OS page cache after disk cache reads (#9098)

2026-04-16 09:38:42 -07:00

fadvise_linux.go

perf(cache): drop OS page cache after disk cache reads (#9098)

2026-04-16 09:38:42 -07:00

fadvise_other.go

perf(cache): drop OS page cache after disk cache reads (#9098)

2026-04-16 09:38:42 -07:00

file_util_non_posix.go

go fix

2026-02-20 18:42:00 -08:00

file_util_posix.go

go fix

2026-02-20 18:42:00 -08:00

file_util_test.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

file_util.go

fix(ec): make ec.decode write-path crash-safe and atomic (#9949)

2026-06-13 21:26:07 -07:00

fullpath_test.go

filer: keep generated inodes inside the positive signed 64-bit range (#11567)

2026-10-03 09:13:59 +08:00

fullpath.go

filer: keep generated inodes inside the positive signed 64-bit range (#11567)

2026-10-03 09:13:59 +08:00

inits_test.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

inits.go

try showing the first 100 volume ids and an extra ...

2020-05-29 16:15:33 +08:00

limited_executor.go

rename

2022-09-25 13:34:55 -07:00

lock_table_test.go

Fix lock table shared wait condition (#8707)

2026-03-19 16:08:24 -07:00

lock_table.go

filer: free orphaned hard-link chunks and remote objects in delete sweeps (#11809)

2026-10-18 12:23:30 -07:00

minfreespace_test.go

util: trim minFreeSpace values before parsing (#10083)

2026-06-24 09:03:38 -07:00

minfreespace.go

util: trim minFreeSpace values before parsing (#10083)

2026-06-24 09:03:38 -07:00

net_host_test.go

EC worker: pin jobs to replica-host workers, late-bind local source (#11718)

2026-10-13 05:31:34 +08:00

net_host.go

EC worker: pin jobs to replica-host workers, late-bind local source (#11718)

2026-10-13 05:31:34 +08:00

net_timeout.go

util: don't let the activity timeout clobber externally-set conn deadlines (#10212)

2026-07-02 17:03:00 -07:00

network.go

pb: fix IPv6 double brackets in ServerAddress formatting (#8329)

2026-02-12 18:11:03 -08:00

outbound_dial_test.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

outbound_dial.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

parse_test.go

util: support IPv6 host port parsing (#10046)

2026-06-22 20:32:43 -07:00

parse.go

util: support IPv6 host port parsing (#10046)

2026-06-22 20:32:43 -07:00

path_filter_test.go

filer.meta.backup: add -excludePaths flag to skip paths from backup (#7916)

2025-12-30 14:28:50 -08:00

path_filter.go

filer.meta.backup: add -excludePaths flag to skip paths from backup (#7916)

2025-12-30 14:28:50 -08:00

queue_test.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

queue_unbounded_test.go

filer: avoid possible timeouts for updates and deletions

2020-02-20 15:44:17 -08:00

queue_unbounded.go

refactor(queue_unbounded): inbountLen -> inboundLen (#3666)

2022-09-14 10:12:45 -07:00

queue.go

"golang.org/x/exp/slices" => "slices" and go fmt

2024-12-19 19:25:06 -08:00

reflect.go

show RemoteVolumes/EcVolumes only if it is not empty

2021-07-06 15:20:18 +08:00

retry_test.go

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

retry.go

filer: free orphaned hard-link chunks and remote objects in delete sweeps (#11809)

2026-10-18 12:23:30 -07:00

singleflight_test.go

feat(mount): singleflight dedup for concurrent chunk reads (#9100)

2026-04-16 10:18:05 -07:00

singleflight.go

feat(mount): singleflight dedup for concurrent chunk reads (#9100)

2026-04-16 10:18:05 -07:00

slice_test.go

expose whether a volume replica is backed by remote storage, and prefer local replicas (#11105)

2026-09-02 16:12:46 -07:00

slice.go

expose whether a volume replica is backed by remote storage, and prefer local replicas (#11105)

2026-09-02 16:12:46 -07:00

tag.go

Add volume dir tags and EC placement priority (#8472)

2026-03-01 10:22:00 -08:00

throttler.go

refactor: extract out the write throttler

2019-05-06 13:56:08 -07:00

time.go

Fix 6181/6182 (#6183)

2024-10-31 08:40:05 -07:00

volume_size.go

master: align default volume size with EC rows (#10761)

2026-08-15 21:37:20 -07:00