From 1d94c1afb7e61ff31dc4bfbe7cfcbd358ee4edc6 Mon Sep 17 00:00:00 2001 From: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com> Date: Thu, 26 Oct 2023 17:03:38 +0100 Subject: [PATCH] Add limit to number of manifests (#2055) Signed-off-by: AdamKorcz --- pkg/docker/platform.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkg/docker/platform.go b/pkg/docker/platform.go index 0c0d6723..e97ff355 100644 --- a/pkg/docker/platform.go +++ b/pkg/docker/platform.go @@ -60,6 +60,10 @@ func GetPlatformImage(ref, platform string) (string, error) { return "", fmt.Errorf("cannot get index manifest: %w", err) } + if len(idxMft.Manifests) > 1000 { + return "", fmt.Errorf("platform image has too many manifests") + } + for _, manifest := range idxMft.Manifests { if plat.OS == manifest.Platform.OS && plat.Architecture == manifest.Platform.Architecture {