fix: add bounds checking to addendum layer mutations to prevent panic (…

…#1715)
google · May 30, 2023 · 03b8657 · 03b8657
1 parent c3f8a49
commit 03b8657
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/v1/mutate/mutate.go b/pkg/v1/mutate/mutate.go
@@ -402,7 +402,9 @@ func Time(img v1.Image, t time.Time) (v1.Image, error) {
 			historyIdx++
 			break
 		}
-		addendums[addendumIdx].Layer = newLayer
+		if addendumIdx < len(addendums) {
+			addendums[addendumIdx].Layer = newLayer
+		}
 	}
 
 	// add all leftover History entries