scriptis/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity
lix/src
History
jade 822997bd34 libstore: ban unpacking case hacked filenames from NARs 
There is absolutely no good reason these should show up in NARs besides
misconfigured systems and as long as the case hack exists, unpacking
such a NAR will cause its repacking to be wrong on systems with case
hack enabled.

This should not have any security impact on Lix to fix, but it was one
of the vectors for CVE-2024-45593:
https://github.com/NixOS/nix/security/advisories/GHSA-h4vv-h3jq-v493

Change-Id: I85b6075aacc069ee7039240b0f525804a2d8edcb
2024-10-09 14:47:39 -07:00
..
asan-options tree-wide: add support for asan! 2024-07-31 14:13:39 -07:00
legacy Remove static initializers for RegisterLegacyCommand 2024-10-01 16:08:58 -07:00
libcmd Remove static initializers for RegisterLegacyCommand 2024-10-01 16:08:58 -07:00
libexpr Set c++ version to c++23 2024-10-08 20:05:28 +02:00
libfetchers libfetchers/git: restore compat with builtins.fetchGit from 2.3 2024-09-28 14:52:06 +02:00
libmain Split ignoreException to avoid suppressing CTRL-C 2024-10-01 15:49:56 -07:00
libstore Fix gcc warning -Wmissing-field-initializers 2024-10-08 01:44:38 +00:00
libutil libstore: ban unpacking case hacked filenames from NARs 2024-10-09 14:47:39 -07:00
lix-doc rowan: 0.15.15 -> 0.15.16 2024-08-26 11:34:43 -07:00
nix Merge "Remove static initializers for RegisterLegacyCommand" into main 2024-10-09 20:37:58 +00:00
pch tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
lix-base.pc.in packaging: rename nixexpr -> lixexpr and so on 2024-05-23 16:45:23 -06:00
meson.build Remove static initializers for RegisterLegacyCommand 2024-10-01 16:08:58 -07:00