SAY-5 72c88bc960 fix(storage): bounds-check the file basename in PurgeUploads Walk callback ...

PurgeUploads' Walk callback split the visited path with path.Split and
indexed file[0] immediately. path.Split returns an empty basename for
paths that end in a trailing slash - in practice this happens when an
S3 driver surfaces a bare directory (common prefix) with an empty
Key. Indexing a zero-length string then panics with
'index out of range [0] with length 0' and takes down the whole
PurgeUploads goroutine (#4713).

Guard the length before touching file[0] so a trailing-slash /
empty-basename entry is simply skipped as 'not a reserved directory',
which matches what the branch was trying to do anyway. Runtime
behaviour for every non-empty entry is unchanged.

Closes #4713

Signed-off-by: SAY-5 <SAY-5@users.noreply.github.com>

2026-04-21 10:56:45 -07:00

..

api

modernize code

2026-02-12 18:28:58 +01:00

auth

feat(registry): enhance authentication checks in htpasswd implementation

2026-04-04 21:19:33 +02:00

handlers

fix(proxy): clamp oversized n query param instead of returning 400

2026-04-18 16:53:53 -07:00

listener

update golangci-lint to v2.9 and fix linting issues

2026-02-11 10:10:07 +01:00

middleware

modernize code

2026-02-12 18:28:58 +01:00

proxy

fix(proxy): fix tag list endpoint in proxy mode

2026-04-09 23:30:51 +08:00

storage

fix(storage): bounds-check the file basename in PurgeUploads Walk callback

2026-04-21 10:56:45 -07:00

doc.go

Move initialization code from main.go to the registry package

2015-09-09 14:39:31 -07:00

registry_test.go

modernize code

2026-02-12 18:28:58 +01:00

registry.go

modernize code

2026-02-12 18:28:58 +01:00

root.go

registry/storage: add option to quiet GC output.

2025-02-02 10:18:45 +01:00