From 8d989025e20d79fdaf5b6786e62e66fd6811fc3e Mon Sep 17 00:00:00 2001 From: Kyle Steere Date: Tue, 27 May 2025 18:28:48 +0000 Subject: [PATCH] server: abort download on empty digest Signed-off-by: Kyle Steere --- server/download.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/server/download.go b/server/download.go index 6f79fd2d3..784ba2d5e 100644 --- a/server/download.go +++ b/server/download.go @@ -464,6 +464,10 @@ type downloadOpts struct { // downloadBlob downloads a blob from the registry and stores it in the blobs directory func downloadBlob(ctx context.Context, opts downloadOpts) (cacheHit bool, _ error) { + if opts.digest == "" { + return false, fmt.Errorf(("%s: %s"), opts.mp.GetNamespaceRepository(), "digest is is empty") + } + fp, err := GetBlobsPath(opts.digest) if err != nil { return false, err