Skip to content

Stop filling the disk when pulling images with oversized blobs - #932

Merged
dkovba merged 2 commits into
apple:mainfrom
dkovba:bound-blobs
Sep 18, 2026
Merged

dkovba merged 2 commits into
apple:mainfrom
dkovba:bound-blobs

Conversation

@dkovba

@dkovba dkovba commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Fixes issues in the blob download:

  • A Content-Length larger than the descriptor was accepted, and the body downloaded anyway.
  • The bytes received were never compared to the descriptor, so the write never stopped.

Blob downloads are now bounded by the descriptor size, so an oversized body is refused before anything is written.

Thank you, @iabdullah215, for bringing the issues to our attention.

@dkovba
dkovba merged commit 30d1881 into apple:main Sep 18, 2026
7 checks passed
@dkovba
dkovba deleted the bound-blobs branch September 18, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants