mirror of
https://github.com/project-zot/zot.git
synced 2026-06-15 11:37:56 +08:00
Gianluca Boiano
f2064c9af0
* fix: prevent nil pointer dereference in RemoveImageFromRepoMeta This commit fixes a critical bug where RemoveImageFromRepoMeta crashes with a nil pointer dereference during retention policy execution and GC operations. Root Cause: The function was accessing blob metadata without checking if it exists first. During GC/retention operations, the metadata database might have stale references to blobs that no longer exist, causing runtime panics. Changes: - Added nil check for descriptorBlobInfo before accessing LastUpdated field - Added nil check for blobInfo before dereferencing Size, Vendors, Platforms, and SubBlobs - Made the function consistent with recalculateAggregateFields which already had these checks Impact: - Fixes crashes during retention policy execution - Fixes crashes during GC manifest removal - Fixes image deletion failures via API - Eliminates need for dryRun: true workaround in retention config The fix gracefully handles missing blob metadata by skipping those entries instead of crashing. Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * test: add comprehensive tests for RemoveImageFromRepoMeta nil checks Add test coverage for the nil pointer dereference fixes in RemoveImageFromRepoMeta. These tests ensure the function handles missing blob metadata gracefully during GC and retention operations. Test cases: - Handle nil blob info for descriptor digest (line 280 check) - Handle nil blob info in queue traversal (line 297 check) - Verify correct behavior with valid blob info - Handle empty tags edge case - Skip tags with empty digest Coverage: RemoveImageFromRepoMeta now has 100% test coverage Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * test: fix RemoveImageFromRepoMeta tests to match actual usage Address review feedback: - Delete tag from repoMeta.Tags before calling RemoveImageFromRepoMeta - Fix blob count expectations after tag removal - Add assertion to verify tag was removed from metadata - Update comments to clarify expected behavior Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * test: add tag removal assertion to second test case Add missing assertion to verify tag1 was removed from resultMeta.Tags in the 'should handle nil blob info in queue traversal' test. Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * refactor: improve nil blob handling documentation and test coverage Address Copilot review feedback: - Expand comment at line 278 to explain implications of skipping tags with missing blob info, clarifying that metadata inconsistency is acceptable in GC/cleanup scenarios - Revise 'should handle nil blob info for descriptor digest' test to cover more realistic scenario: remove tag1 while tag2 has missing blob info, demonstrating graceful handling of data inconsistencies in remaining tags during removal operations All tests pass with 49 total assertions. Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * fix: prevent nil pointer in GetCandidates when statistics missing Add defensive check in pkg/retention/candidate.go to handle cases where a tag exists in repoMeta.Tags but has no corresponding entry in repoMeta.Statistics. This prevents incorrect retention decisions based on zero-value timestamps. Changes: - Check statistics existence before creating candidates - Skip tags with missing statistics (retained by GetRetainedTagsFromMetaDB) - Improve performance from O(n*m) to O(n) by using direct map lookup - Add comprehensive test coverage for missing statistics scenarios This addresses the concern raised in PR #3658 about metadata inconsistencies due to non-transactional writes to blob store and metaDB. Related: #3658 Signed-off-by: Gianluca Boiano <morf3089@gmail.com> * test: achieve 100% coverage for RemoveImageFromRepoMeta nil checks Enhance test coverage for RemoveImageFromRepoMeta to address codecov failures by adding comprehensive test cases that exercise all code paths including nil pointer checks and continue statements. Changes: - Enhanced 'nil blob info for descriptor digest' test to verify processing continues with other valid tags after skipping nil entries - Enhanced 'nil blob info in queue traversal' test to handle mixed valid/nil sub-blobs and verify correct processing continuation - Added 'multiple nil blobs in deeply nested structure' test to cover complex scenarios with multiple missing blobs at various nesting levels - Enhanced 'skip tags with empty digest' test to verify processing continues with valid tags after skipping empty digest entries - Added 'combined edge cases' test to verify all edge cases work together: empty digest, nil descriptor blob, and nil queue blob Coverage Results: - RemoveImageFromRepoMeta: 100.0% line coverage (was 87.50%) - All 7 test scenarios pass with 75 total assertions - All nil check code paths fully exercised - All continue statement behaviors validated Fixes codecov/patch failure on PR #3658 where 2 lines were missing coverage. Signed-off-by: Gianluca Boiano <morf3089@gmail.com> --------- Signed-off-by: Gianluca Boiano <morf3089@gmail.com>