Merge pull request #11143 from aep/for-upstream

fixes #11142 missing array length check on release
helm · Aug 9, 2022 · 4b18b19 · 4b18b19
2 parents 9fe4f2e + b9f347a
commit 4b18b19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/storage/driver/util.go b/pkg/storage/driver/util.go
@@ -63,7 +63,7 @@ func decodeRelease(data string) (*rspb.Release, error) {
 	// For backwards compatibility with releases that were stored before
 	// compression was introduced we skip decompression if the
 	// gzip magic header is not found
-	if bytes.Equal(b[0:3], magicGzip) {
+	if len(b) > 3 && bytes.Equal(b[0:3], magicGzip) {
 		r, err := gzip.NewReader(bytes.NewReader(b))
 		if err != nil {
 			return nil, err