maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
snix/tvix/nix-compat
History
Florian Klink d4cbdc2beb feat(tvix/nix-compat/nixhash): support BASE64_NOPAD SRI 
Nix accepts SRI hashes that are missing their padding characters
in base64, as seen in
7e49471316/pkgs/development/libraries/kerberos/krb5.nix .

It only seems to work in the SRI case, not with `sha256` being set to a
(nopad) base64 string.

Add regression tests for this, and document why we don't want to support
*additional* characters afterwards.

Reported in https://b.tvl.fyi/issues/252

Change-Id: I9ffc2b417501b426ced1894a9cbf95ff5f0e5159
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8037
Reviewed-by: Alyssa Ross <hi@alyssa.is>
Tested-by: BuildkiteCI
2023-02-08 10:39:26 +00:00
..
src feat(tvix/nix-compat/nixhash): support BASE64_NOPAD SRI 2023-02-08 10:39:26 +00:00
Cargo.toml refactor(tvix/nix-compat): absorb //tvix/derivation 2023-01-31 15:16:39 +00:00
default.nix refactor(tvix): introduce nix-compat crate 2023-01-31 13:26:18 +00:00