worker: clarify maxFileSize purpose

Fixes #237.
8 years ago · de1f09e8b3
parent 7d0f29b28f
commit de1f09e8b3
1 changed files with 3 additions and 1 deletions
--- a/worker/worker.go
+++ b/worker/worker.go
@ -30,7 +30,9 @@ const (
 	// Increased each time the engine changes.
 	Version = 3

-	// maxFileSize is the maximum size of a single file we should extract.
+	// maxFileSize enforces a maximum size of a single file within a tarball that
+	// will be extracted. This protects against malicious layers that may contain
+	// extremely large package database files.
 	maxFileSize = 200 * 1024 * 1024 // 200 MiB
 )