From 41659418cfeb7a33fc76716a1847f79ae13d9b0c Mon Sep 17 00:00:00 2001
From: Eelco Dolstra <edolstra@gmail.com>
Date: Mon, 21 Mar 2022 14:00:54 +0100
Subject: [PATCH] fetchClosure: Require a CA path in pure mode

---
 src/libexpr/primops/fetchClosure.cc | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/src/libexpr/primops/fetchClosure.cc b/src/libexpr/primops/fetchClosure.cc
index 4bcc716db..22a4649a4 100644
--- a/src/libexpr/primops/fetchClosure.cc
+++ b/src/libexpr/primops/fetchClosure.cc
@@ -43,12 +43,19 @@ static void prim_fetchClosure(EvalState & state, const Pos & pos, Value * * args
 
     copyClosure(*srcStore, *state.store, RealisedPath::Set { *storePath });
 
+    /* In pure mode, require a CA path. */
+    if (evalSettings.pureEval) {
+        auto info = state.store->queryPathInfo(*storePath);
+        if (!info->isContentAddressed(*state.store))
+            throw Error({
+                .msg = hintfmt("in pure mode, 'fetchClosure' requires a content-addressed path, which '%s' isn't",
+                    state.store->printStorePath(*storePath)),
+                .errPos = pos
+            });
+    }
+
     auto storePathS = state.store->printStorePath(*storePath);
-
     v.mkString(storePathS, {storePathS});
-
-    // FIXME: in pure mode, require a CA path or a NAR hash of the
-    // top-level path.
 }
 
 static RegisterPrimOp primop_fetchClosure({