From 35575873813f60fff26f27a65e09038986f17cb5 Mon Sep 17 00:00:00 2001
From: Eelco Dolstra <edolstra@gmail.com>
Date: Thu, 5 Sep 2024 19:26:10 +0200
Subject: [PATCH] Detect NAR directory entries that collide with another path
 after case-hacking

The test was made by @puckipedia.
---
 src/libutil/archive.cc              |   3 +++
 tests/functional/case-collision.nar | Bin 0 -> 1928 bytes
 tests/functional/nars.sh            |   6 ++++++
 3 files changed, 9 insertions(+)
 create mode 100644 tests/functional/case-collision.nar

diff --git a/src/libutil/archive.cc b/src/libutil/archive.cc
index e4a6a3181..0d72f910d 100644
--- a/src/libutil/archive.cc
+++ b/src/libutil/archive.cc
@@ -243,6 +243,9 @@ static void parse(FileSystemObjectSink & sink, Source & source, const CanonPath
                                         debug("case collision between '%1%' and '%2%'", i->first, name);
                                         name += caseHackSuffix;
                                         name += std::to_string(++i->second);
+                                        auto j = names.find(name);
+                                        if (j != names.end())
+                                            throw Error("NAR contains file name '%s' that collides with case-hacked file name '%s'", prevName, j->first);
                                     } else
                                         names[name] = 0;
                                 }
diff --git a/tests/functional/case-collision.nar b/tests/functional/case-collision.nar
new file mode 100644
index 0000000000000000000000000000000000000000..2eff86901c617be2a830d23074923cb5b3b69aa3
GIT binary patch
literal 1928
zcmd;OfPlQr3f;t_<c!R+R9!;`1_nlmFoOn^W`WWrl?ACFCMSqsU|>keEJ{r-$uFve
z@>!vDYF-Ig43{~1iMe2NVCIIT7MFmu!uWalDPVbA`eE*12WetpU?@sWFU?6TV&H)C
zlk@XRQu9iRp<K9sG@$}8b76c^-7Nw&2juR$yv&Na<iz6Cx{So+>^e~JF_7zz;>z5d
z%)D#{HmLa}iACwDC5ZUYhl-=SADvICe_-w{Au}GRl^&R({>#g(0JC83A~rox+Z|<z
zMT5c}105c)d{t1CpO%@ET0Btk0?Y3yscDI&IVB|LGis-gq|CelO&_p$$W6^J2RQ`B
zCpN#p!V^}0a)AtCU|>kCNKGy+NleNCm%>m%1_q4sRU0a$tf-%qnWtZz!Ihevk*}bx
mm6u<VnVedzP+Fu=Tv=R_nyaM{S{|xkWvmX?fnHvXbUpxZ=(7F*

literal 0
HcmV?d00001

diff --git a/tests/functional/nars.sh b/tests/functional/nars.sh
index b2b6b2b1a..f2339af88 100755
--- a/tests/functional/nars.sh
+++ b/tests/functional/nars.sh
@@ -37,3 +37,9 @@ cmp case.nar "$TEST_ROOT/case.nar"
 # removal of the suffix).
 touch "$TEST_ROOT/case/xt_CONNMARK.h~nix~case~hack~3"
 (! nix-store "${opts[@]}" --dump "$TEST_ROOT/case" > /dev/null)
+
+# Detect NARs that have a directory entry that after case-hacking
+# collides with another entry (e.g. a directory containing 'Test',
+# 'Test~nix~case~hack~1' and 'test').
+rm -rf "$TEST_ROOT/case"
+expectStderr 1 nix-store "${opts[@]}" --restore "$TEST_ROOT/case" < case-collision.nar | grepQuiet "NAR contains file name 'test' that collides with case-hacked file name 'Test~nix~case~hack~1'"