Add limit to number of manifests

Signed-off-by: AdamKorcz <[email protected]>
knative · Oct 25, 2023 · 796b298 · 796b298
1 parent cd0bc6a
commit 796b298
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/docker/platform.go b/pkg/docker/platform.go
@@ -60,6 +60,10 @@ func GetPlatformImage(ref, platform string) (string, error) {
 		return "", fmt.Errorf("cannot get index manifest: %w", err)
 	}
 
+	if len(idxMft.Manifests) > 1000 {
+		return "", fmt.Errorf("platform image has too many manifests")
+	}
+
 	for _, manifest := range idxMft.Manifests {
 		if plat.OS == manifest.Platform.OS &&
 			plat.Architecture == manifest.Platform.Architecture {