forked from lix-project/lix
![regnat](/assets/img/avatar_default.png)
When adding a path to the local store (via `LocalStore::addToStore`), ensure that the `ca` field of the provided `ValidPathInfo` does indeed correspond to the content of the path. Otherwise any untrusted user (or any binary cache) can add arbitrary content-addressed paths to the store (as content-addressed paths don’t need a signature).
61 lines
1.6 KiB
Makefile
61 lines
1.6 KiB
Makefile
nix_tests = \
|
|
hash.sh lang.sh add.sh simple.sh dependencies.sh \
|
|
config.sh \
|
|
gc.sh \
|
|
gc-concurrent.sh \
|
|
gc-auto.sh \
|
|
referrers.sh user-envs.sh logging.sh nix-build.sh misc.sh fixed.sh \
|
|
gc-runtime.sh check-refs.sh filter-source.sh \
|
|
local-store.sh remote-store.sh export.sh export-graph.sh \
|
|
db-migration.sh \
|
|
timeout.sh secure-drv-outputs.sh nix-channel.sh \
|
|
multiple-outputs.sh import-derivation.sh fetchurl.sh optimise-store.sh \
|
|
binary-cache.sh \
|
|
substitute-with-invalid-ca.sh \
|
|
binary-cache-build-remote.sh \
|
|
nix-profile.sh repair.sh dump-db.sh case-hack.sh \
|
|
check-reqs.sh pass-as-file.sh tarball.sh restricted.sh \
|
|
placeholders.sh nix-shell.sh \
|
|
linux-sandbox.sh \
|
|
build-dry.sh \
|
|
build-remote-input-addressed.sh \
|
|
build-remote-content-addressed-fixed.sh \
|
|
build-remote-content-addressed-floating.sh \
|
|
ssh-relay.sh \
|
|
nar-access.sh \
|
|
structured-attrs.sh \
|
|
fetchGit.sh \
|
|
fetchGitRefs.sh \
|
|
fetchGitSubmodules.sh \
|
|
fetchMercurial.sh \
|
|
signing.sh \
|
|
shell.sh \
|
|
brotli.sh \
|
|
zstd.sh \
|
|
pure-eval.sh \
|
|
check.sh \
|
|
plugins.sh \
|
|
search.sh \
|
|
nix-copy-ssh.sh \
|
|
post-hook.sh \
|
|
function-trace.sh \
|
|
recursive.sh \
|
|
describe-stores.sh \
|
|
flakes.sh \
|
|
build.sh \
|
|
compute-levels.sh \
|
|
ca/build.sh \
|
|
ca/substitute.sh \
|
|
ca/signatures.sh \
|
|
ca/nix-run.sh \
|
|
ca/nix-copy.sh
|
|
# parallel.sh
|
|
|
|
install-tests += $(foreach x, $(nix_tests), tests/$(x))
|
|
|
|
tests-environment = NIX_REMOTE= $(bash) -e
|
|
|
|
clean-files += $(d)/common.sh $(d)/config.nix $(d)/ca/config.nix
|
|
|
|
test-deps += tests/common.sh tests/config.nix tests/ca/config.nix tests/plugins/libplugintest.$(SO_EXT)
|