Unverified Commit 931f4645 authored by Mikael Voss's avatar Mikael Voss
Browse files

lib/types: check paths in pathWith with hasStorePathPrefix 

This permits usage of content‐addressed derivations and has the added
benefit of checking normalised paths.
parent bf790d1a

lib/tests/modules/pathWith.nix

+3 −0
Original line number Diff line number Diff line
@@ -58,6 +58,9 @@ in 
  pathInStore.ok1 = "${storeDir}/0lz9p8xhf89kb1c1kk6jxrzskaiygnlh-bash-5.2-p15.drv";

  pathInStore.ok2 = "${storeDir}/0fb3ykw9r5hpayd05sr0cizwadzq1d8q-bash-5.2-p15";

  pathInStore.ok3 = "${storeDir}/0fb3ykw9r5hpayd05sr0cizwadzq1d8q-bash-5.2-p15/bin/bash";

  pathInStore.ok4 = "/1121rp0gvr1qya7hvy925g5kjwg66acz6sn1ra1hca09f1z5dsab"; # CA derivation

  pathInStore.ok5 = "/1121rp0gvr1qya7hvy925g5kjwg66acz6sn1ra1hca09f1z5dsab/bin/bash"; # CA derivation

  pathInStore.ok6 = /1121rp0gvr1qya7hvy925g5kjwg66acz6sn1ra1hca09f1z5dsab; # CA derivation, path type

  pathInStore.bad1 = "";

  pathInStore.bad2 = "${storeDir}";

  pathInStore.bad3 = "${storeDir}/";

lib/types.nix

+8 −1
Original line number Diff line number Diff line
@@ -669,7 +669,14 @@ let 
            check =

              x:

              let

                isInStore = builtins.match "${builtins.storeDir}/[^.].*" (toString x) != null;

                isInStore = lib.path.hasStorePathPrefix (

                  if builtins.isPath x then

                    x

                  # Discarding string context is necessary to convert the value to

                  # a path and safe as the result is never used in any derivation.

                  else

                    /. + builtins.unsafeDiscardStringContext x

                );

                isAbsolute = builtins.substring 0 1 (toString x) == "/";

                isExpectedType = (

                  if inStore == null || inStore then isStringLike x else isString x # Do not allow a true path, which could be copied to the store later on.