-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Major
-
Component/s: cloudbees-jenkins-advisor-plugin
-
None
-
412.v9d1e9d6a_f428
MultipartConnection produces a malformed multipart upload in two ways:
- *Boundary contains = and is not quoted*: at MultipartConnection.java#L29 the header is
multipart/form-data; boundary====<ms>===. = is an RFC 2045 tspecial, so the value MUST be a quoted-string.
- *Two CRLFs before the closing delimiter* (MultipartConnection.java#L81 and MultipartConnection.java#L88) — RFC 2046 §5.1.1 defines the delimiter
as CRLF--boundary, so only one is the delimiter and the other lands inside the part content. Every uploaded bundle is the zip plus 2 trailing bytes (83,415-byte bundle arrives as 83,417).
It's harmless against the current server but will / is likely to become a problem eventually.