Théophane Hufschmitt 68b6f897e4 Copy the output of fixed-output derivations before registering them ... It is possible to exfiltrate a file descriptor out of the build sandbox of FODs, and use it to modify the store path after it has been registered. To avoid that issue, don't register the output of the build, but a copy of it (that will be free of any leaked file descriptor).		2024-03-01 09:43:42 +01:00
..
build-remote	Allow dynamic derivation deps in inputDrvs	2023-09-07 10:39:37 -04:00
libcmd	add deprecation warnings in documentation	2023-11-27 14:08:16 +01:00
libexpr	Merge branch '2.19-maintenance' into ifd-buildStore-2.19	2024-01-11 07:21:51 -05:00
libfetchers	Merge pull request #9283 from obsidiansystems/mememory-source-accessor	2023-11-06 19:51:02 +01:00
libmain	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
libstore	Copy the output of fixed-output derivations before registering them	2024-03-01 09:43:42 +01:00
libutil	Copy the output of fixed-output derivations before registering them	2024-03-01 09:43:42 +01:00
nix	nix flake update add deprecation warnings.	2023-11-27 14:07:26 +01:00
nix-build	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
nix-channel	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
nix-collect-garbage	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
nix-copy-closure	Remove stray executable permissions on source files	2023-11-02 09:24:21 +01:00
nix-env	nix-env: Use state.mkList, required for correct stats	2023-11-17 10:23:32 +01:00
nix-instantiate	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
nix-store	Split up util.{hh,cc}	2023-11-05 12:20:02 -05:00
resolve-system-dependencies	Remove FormatOrString and remaining uses of format()	2023-03-02 15:57:54 +01:00
toml11	Replace cpptoml with toml11	2021-12-17 22:03:33 +01:00