vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add architecture validation to manifest lists that contain schema 1 manifests

Browse source 
Fixes https://jira.coreos.com/browse/QUAY-1266
This commit is contained in:
Joseph Schorr 2018-12-19 13:42:07 -05:00
parent b5a5ce7c43
commit f0f2d9cdf4
9 changed files with 110 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
data/model/oci/manifest.py
View file

@ -74,8 +74,15 @@ def get_or_create_manifest(repository_id, manifest_interface_instance, storage):
def _create_manifest(repository_id, manifest_interface_instance, storage):
# Load, parse and get/create the child manifests, if any.
# Validate the manifest.
retriever = RepositoryContentRetriever.for_repository(repository_id, storage)
try:
manifest_interface_instance.validate(retriever)
except (ManifestException, MalformedSchema2ManifestList, BlobDoesNotExist, IOError):
logger.exception('Could not validate manifest `%s`', manifest_interface_instance.digest)
return None
# Load, parse and get/create the child manifests, if any.
child_manifest_refs = manifest_interface_instance.child_manifests(retriever)
child_manifest_rows = {}
child_manifest_label_dicts = []