specially-crafted derivations that produce output paths belonging to other derivations. This could be used to inject malware into the store.
		
			
				
	
	
		
			23 lines
		
	
	
	
		
			332 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			23 lines
		
	
	
	
		
			332 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
| with import ./config.nix;
 | |
| 
 | |
| {
 | |
| 
 | |
|   good = mkDerivation {
 | |
|     name = "good";
 | |
|     builder = builtins.toFile "builder"
 | |
|       ''
 | |
|         mkdir $out
 | |
|         touch $out/good
 | |
|       '';
 | |
|   };
 | |
| 
 | |
|   bad = mkDerivation {
 | |
|     name = "good";
 | |
|     builder = builtins.toFile "builder"
 | |
|       ''
 | |
|         mkdir $out
 | |
|         touch $out/bad
 | |
|       '';
 | |
|   };
 | |
| 
 | |
| }
 |