requests / toolbelt

A toolbelt of useful classes and functions to be used with python-requests
https://toolbelt.readthedocs.org
Other
998 stars 186 forks source link

Address cases where MultipartEncoder source stream grows or shrinks mid-way through encoding, leading to malformed requests #314

Open cpfair opened 3 years ago

cpfair commented 3 years ago

Previously, MultipartEncoder in conjunction with requests could produce a malformed request if the source data stream grew (e.g. appending to a log file being uploaded) or shrunk during encoding. This change addresses both the growing case (by only transmitting the originally promised amount of data) and the shrinking case (by raising an exception).

Note that the data produced by MultipartEncoder itself was well formed. The issue occurs when downstream code makes promises or assumptions based on the initial len (e.g. transmitting it to the server as Content-Length, as requests does), only to have the encoder return more/less data. This change may break (presumably rare) use cases that rely on both a) on shrinking/growing the source data stream during encoding, and b) don't already fail due to the promised/actual encoded data length mismatch.