Skip to content

fix(oci): enforce blob size while streaming #201

Description

@gaborbernat

Failure

OCI monolithic and chunked uploads enforce max_file_size_bytes after staging the body at
crates/peryx-ecosystem-oci/src/registry/uploads.rs:36-42 and :191-204. stream_into and append_chunk have no
limit.

A credential allowed to push can fill disk beyond the configured policy limit. A multi-request upload can exceed the
limit during any PATCH and remain stored in its session.

Expected fix

Enforce the remaining byte budget during each upload form. Define whether overflow removes or preserves a session. Cover
each protocol path.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:performanceCache, HTTP, memory, and benchmark workarea:uploadUpload protocol and upload validationbugSomething isn't workingpriority:P2Performance, observability, or deferred featuretype:bugIncorrect behavior or missing validation

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions