Fix SigV4 signing for large objects

CHANGELOG.md

@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 
 ## [Unreleased]
 
+### Fixed
+
+- **Large-object SigV4 signing** — Sign S3 requests with payload lengths above 2 GiB without rejecting their 64-bit `Content-Length` values.
+
 ## [5.15.1] - 2026-09-16
 
 ### Fixed

engine/extensions/storage-drivers/implementations/s3/src/main/java/com/dell/spt/storage/driver/coop/netty/http/s3/S3StorageDriver.java

@@ -2122,7 +2122,7 @@ protected final void applyAuthHeaders(
 
 				// Set payload header
 				final String contentLengthHeader = httpHeaders.get(HttpHeaderNames.CONTENT_LENGTH);
-				final int contentLength = contentLengthHeader == null ? 0 : Integer.parseInt(contentLengthHeader);
+				final long contentLength = contentLengthHeader == null ? 0 : Long.parseLong(contentLengthHeader);
 				if (contentLength > 0) {
 					httpHeaders.set(S3Api.AMZ_PAYLOAD_HEADER, S3Api.AMZ_UNSIGNED_PAYLOAD);
 				} else {
@@ -2259,7 +2259,7 @@ protected String getCanonicalV4(final HttpHeaders httpHeaders, final Map<String,
 		final String payloadHashHeader = httpHeaders.get(S3Api.AMZ_PAYLOAD_HEADER);
 		if (payloadHashHeader != null && !payloadHashHeader.isEmpty()) {
 			buffCanonical.append(payloadHashHeader);
-		} else if (Integer.parseInt(httpHeaders.get(HttpHeaderNames.CONTENT_LENGTH)) > 0) {
+		} else if (Long.parseLong(httpHeaders.get(HttpHeaderNames.CONTENT_LENGTH)) > 0) {
 			buffCanonical.append(S3Api.AMZ_UNSIGNED_PAYLOAD);
 		} else {
 			buffCanonical.append(S3Api.AMZ_EMPTY_BODY_SHA256);

engine/extensions/storage-drivers/implementations/s3/src/test/java/com/dell/spt/storage/driver/coop/netty/http/s3/S3StorageDriverTest.java

@@ -547,6 +547,39 @@ void applyAuthHeaders_v4_setsUnsignedPayloadForBodies() throws Exception {
 		assertEquals(S3Api.AMZ_UNSIGNED_PAYLOAD, headers.get(S3Api.AMZ_PAYLOAD_HEADER));
 	}
 
+	@Test
+	void applyAuthHeaders_v4_acceptsContentLengthAboveIntegerRange() throws Exception {
+		Config cfg = baseConfig(false, 4, false, null, "s3.us-east-1.amazonaws.com:443");
+		TestS3Driver drv = new TestS3Driver(cfg);
+		HttpHeaders headers = new DefaultHttpHeaders();
+		headers.set(HttpHeaderNames.HOST, "s3.us-east-1.amazonaws.com:443");
+		headers.set(HttpHeaderNames.CONTENT_LENGTH, (long) Integer.MAX_VALUE + 1);
+
+		Method m = S3StorageDriver.class.getDeclaredMethod(
+						"applyAuthHeaders", HttpHeaders.class, HttpMethod.class, String.class, Credential.class);
+		m.setAccessible(true);
+		m.invoke(drv, headers, HttpMethod.PUT, "/bucket/obj", TEST_CRED);
+
+		assertEquals(S3Api.AMZ_UNSIGNED_PAYLOAD, headers.get(S3Api.AMZ_PAYLOAD_HEADER));
+		assertNotNull(headers.get(HttpHeaderNames.AUTHORIZATION));
+	}
+
+	@Test
+	void canonicalV4_acceptsContentLengthAboveIntegerRange() throws Exception {
+		S3StorageDriver<Item, Operation<Item>> drv = newDriverMock();
+		HttpHeaders headers = new DefaultHttpHeaders();
+		headers.set(HttpHeaderNames.HOST, "s3.test:443");
+		headers.set(HttpHeaderNames.CONTENT_LENGTH, (long) Integer.MAX_VALUE + 1);
+
+		Method m = S3StorageDriver.class.getDeclaredMethod(
+						"getCanonicalV4", HttpHeaders.class, Map.class, HttpMethod.class, String.class);
+		m.setAccessible(true);
+		String canonical = (String) m.invoke(
+						drv, headers, new TreeMap<String, String>(), HttpMethod.PUT, "/bucket/object");
+
+		assertTrue(canonical.endsWith(S3Api.AMZ_UNSIGNED_PAYLOAD));
+	}
+
 	@Test
 	void canonicalV4_insertsEmptyQueryLineWhenAbsent() throws Exception {
 		Config cfg = baseConfig(false, 4, false, null, "127.0.0.1:9020");