Merge pull request #288 from jzelinskie/200mb

worker: clarify maxFileSize purpose
8 years ago · 9532c03f95
parent 8e1fe0d01f de1f09e8b3
commit 9532c03f95
1 changed files with 3 additions and 1 deletions
--- a/worker/worker.go
+++ b/worker/worker.go
@ -30,7 +30,9 @@ const (
 	// Increased each time the engine changes.
 	Version = 3

-	// maxFileSize is the maximum size of a single file we should extract.
+	// maxFileSize enforces a maximum size of a single file within a tarball that
+	// will be extracted. This protects against malicious layers that may contain
+	// extremely large package database files.
 	maxFileSize = 200 * 1024 * 1024 // 200 MiB
 )