guix-devel/guix/scripts
Ludovic Courtès 60b04024f8
substitute: Ignore irrelevant narinfo signatures.
Fixes <https://bugs.gnu.org/33733>.

Fixes a bug whereby 'guix substitute' would accept narinfos whose
signature does not cover the StorePath/NarHash/References tuple.

* guix/scripts/substitute.scm (narinfo-sha256)[%mandatory-fields]: New
variable.
Compute SIGNED-FIELDS; return #f unless each of the %MANDATORY-FIELDS
is among SIGNED-FIELDS.
 * tests/substitute.scm ("query narinfo with signature over nothing")
("query narinfo with signature over irrelevant bits"): New tests.
2018-12-14 00:02:59 +01:00
..
container
import import cran: Document "recursive" option. 2018-10-17 13:06:25 +02:00
system
archive.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
authenticate.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
build.scm build: Default to https://ci.guix.info for substitutes. 2018-12-04 10:57:56 +01:00
challenge.scm
container.scm scripts: Add missing -V option to commands that document it. 2018-07-07 18:10:31 +02:00
copy.scm
describe.scm describe: In 'channels' format, quote the channel name. 2018-12-07 15:14:12 +01:00
download.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
edit.scm
environment.scm status: Build upon multiplexed build output. 2018-10-15 23:06:55 +02:00
gc.scm
graph.scm graph: Add '--system'. 2018-09-16 23:00:44 +02:00
hash.scm guix hash: Fix version and help messages 2018-11-28 10:39:58 +01:00
import.scm guix: Add opam importer. 2018-07-10 10:11:01 +02:00
lint.scm lint: 'check-derivation' fully disables grafts. 2018-11-20 18:36:05 +01:00
offload.scm
pack.scm pack: List the available formats. 2018-11-27 19:23:39 +02:00
package.scm guix package: '--show' errors when asked for a non-existent package. 2018-11-11 23:53:29 +01:00
perform-download.scm perform-download: Optionally report a "download-progress" trace. 2018-09-27 23:21:53 +02:00
processes.scm Add 'guix processes'. 2018-10-29 00:13:38 +01:00
publish.scm Switch to Guile-Gcrypt. 2018-09-04 17:25:11 +02:00
pull.scm pull: Add missing monadic 'return'. 2018-11-07 21:56:16 +01:00
refresh.scm refresh: Account for overlapping updater coverage. 2018-12-10 19:59:01 -06:00
repl.scm repl: Load user's initialization file. 2018-12-03 08:04:51 +03:00
size.scm Remove most references to hydra.gnu.org. 2018-12-04 10:57:56 +01:00
substitute.scm substitute: Ignore irrelevant narinfo signatures. 2018-12-14 00:02:59 +01:00
system.scm guix system: Fix bootloader config file generation by 'guix system roll-back'. 2018-12-07 15:14:12 +01:00
weather.scm weather: Fix pasto in --version output. 2018-07-07 18:10:31 +02:00