From c591959fa9d6c9382621c67000bc64ed6b3212fa Mon Sep 17 00:00:00 2001
From: Catherine <whitequark@whitequark.org>
Date: Sat, 30 May 2026 18:13:49 +0000
Subject: [PATCH] Address minor file descriptor leak in `CollectTar`.

Before this commit, the reader opened by `GetBlob` was not closed.
This does not matter for the current implementation of the S3 backend,
but for the FS backend the file descriptor was only closed by
the `os.file` finalizer.

V12-Ref: F-77205
---
 src/collect.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/collect.go b/src/collect.go
index 9933351..3e05628 100644
--- a/src/collect.go
+++ b/src/collect.go
@@ -72,6 +72,9 @@ func CollectTar(
 				return
 			}
 			blobData, err = io.ReadAll(blobReader)
+			if closer, ok := blobReader.(io.Closer); ok {
+				defer closer.Close()
+			}
 			if err != nil {
 				return
 			}