From c143b829383f491c4081a86bc76c161d7652879f Mon Sep 17 00:00:00 2001
From: Michael Eischer <michael.eischer@fau.de>
Date: Sat, 9 May 2026 23:52:38 +0200
Subject: [PATCH] properly close file in error handling of saveConfig and
 saveBlob

---
 repo/repo.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/repo/repo.go b/repo/repo.go
index 0e38bb6a..adc4a55f 100644
--- a/repo/repo.go
+++ b/repo/repo.go
@@ -315,6 +315,7 @@ func (h *Handler) saveConfig(w http.ResponseWriter, r *http.Request) {
 
 	_, err = io.Copy(f, r.Body)
 	if err != nil {
+		_ = f.Close()
 		h.internalServerError(w, err)
 		return
 	}
@@ -589,6 +590,8 @@ func (h *Handler) saveBlob(w http.ResponseWriter, r *http.Request) {
 	// ensure this blob does not put us over the quota size limit (if there is one)
 	outFile, errCode, err := h.wrapFileWriter(r, tf)
 	if err != nil {
+		_ = tf.Close()
+		_ = os.Remove(tf.Name())
 		if h.opt.Debug {
 			log.Println(err)
 		}