Failure
OCI monolithic and chunked uploads enforce max_file_size_bytes after staging the body at
crates/peryx-ecosystem-oci/src/registry/uploads.rs:36-42 and :191-204. stream_into and append_chunk have no
limit.
A credential allowed to push can fill disk beyond the configured policy limit. A multi-request upload can exceed the
limit during any PATCH and remain stored in its session.
Expected fix
Enforce the remaining byte budget during each upload form. Define whether overflow removes or preserves a session. Cover
each protocol path.
Failure
OCI monolithic and chunked uploads enforce
max_file_size_bytesafter staging the body atcrates/peryx-ecosystem-oci/src/registry/uploads.rs:36-42and:191-204.stream_intoandappend_chunkhave nolimit.
A credential allowed to push can fill disk beyond the configured policy limit. A multi-request upload can exceed the
limit during any
PATCHand remain stored in its session.Expected fix
Enforce the remaining byte budget during each upload form. Define whether overflow removes or preserves a session. Cover
each protocol path.