From 9239a254e054d24b0de3358ba8c4bd9b50730bfd Mon Sep 17 00:00:00 2001 From: Kyle Steere Date: Tue, 27 May 2025 18:28:48 +0000 Subject: [PATCH] server: abort download on empty digest Signed-off-by: Kyle Steere --- server/download.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/server/download.go b/server/download.go index 6f79fd2d..784ba2d5 100644 --- a/server/download.go +++ b/server/download.go @@ -464,6 +464,10 @@ type downloadOpts struct { // downloadBlob downloads a blob from the registry and stores it in the blobs directory func downloadBlob(ctx context.Context, opts downloadOpts) (cacheHit bool, _ error) { + if opts.digest == "" { + return false, fmt.Errorf(("%s: %s"), opts.mp.GetNamespaceRepository(), "digest is is empty") + } + fp, err := GetBlobsPath(opts.digest) if err != nil { return false, err