diff options
| author | Ludovic Courtès <ludo@gnu.org> | 2026-06-24 11:34:05 +0200 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2026-07-02 19:42:48 +0200 |
| commit | 2ef8ed9f0df53bddf14bdecc2ea48c2d233213cc (patch) | |
| tree | 6f09ca584a6ddaf7928ab0d5ca5403fd9499f14d /tests/cve-sample.json | |
| parent | 48cdb840ac38f32493e76e2c81570a1dd3c50f1f (diff) | |
substitutes: Ignore narinfos that don’t match the request [security fix].
Previously, by serving a valid, signed, and authorized narinfo that does not
match what the client asked for, an attacker could cause users to get the
wrong substitute.
* guix/substitutes.scm (fetch-narinfos)[handle-narinfo-response]: Check
whether the result of ‘read-narinfo’ matches ‘request’ and ignore it if it
doesn’t.
[do-fetch]: Likewise with ‘narinfo-from-file’.
* tests/substitute.scm ("query narinfo that returns different store path")
("substitute, narinfo does not match requested store item"): New tests.
Reported-by: Reepca Russelstein <reepca@russelstein.xyz>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Merges: #9665
Diffstat (limited to 'tests/cve-sample.json')
0 files changed, 0 insertions, 0 deletions