Skip to content

Return bounded Range errors for hosted and raw reads - #194

Merged
LIghtJUNction merged 2 commits into
mainfrom
fix/bounded-http-range
Sep 30, 2026
Merged

LIghtJUNction merged 2 commits into
mainfrom
fix/bounded-http-range

Conversation

@LIghtJUNction

Copy link
Copy Markdown
Contributor

Refs #79.

Hosted and ordinary raw HTTP reads attempted numeric conversion without the Range field bound already used by Git LFS. Oversized numeric fields therefore escaped the normal range_not_satisfiable path instead of returning a stable 416 response. Apply the same 128-character parsing limit in both readers, before conversion.

Keep ordinary prefix/open-ended/suffix behavior, ETag/If-Range handling and authorization order unchanged. Add eight focused parsing cases plus real raw HTTP read-only conservation and hosted HTTP response checks.

Validation: three new oversized-number cases failed against original code and pass after the fix; all eight focused cases pass. Full Ruff check/format (589 files), Python 3.15 compilation, wheel/sdist build and package-content validation pass locally. PostgreSQL HTTP integration checks require CI because local initdb is unavailable; full contract and deployment gates must pass before merge. This is a malformed-input response-correctness fix; no unverified security-impact claim or production deployment.

@LIghtJUNction
LIghtJUNction marked this pull request as ready for review September 30, 2026 08:32
Copilot AI balanced review requested due to automatic review settings September 30, 2026 08:32
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-09-30T08:39:38.867948Z 0f057bf Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Copy link
Copy Markdown
Contributor Author

This complete change set is now included without modification in #195, together with the final #192 OAuth follow-up on current main 9f4806d. All four Range file blobs match this PR's validated head 0f057bf. The combined tree is 92d878ce and its full CI is running; please use #195 as the integration point to avoid separate merges invalidating the same combined verification. This PR remains open until the integration is actually landed.

@LIghtJUNction
LIghtJUNction merged commit de09959 into main Sep 30, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants