hydra-queue-runner: Verify product names in hydra-build-products

2025-08-02 15:05:33 +02:00
parent 21a75982aa
commit 252801cea8
1 changed files with 2 additions and 0 deletions
--- a/src/hydra-queue-runner/build-result.cc
+++ b/src/hydra-queue-runner/build-result.cc
@@ -93,6 +93,8 @@ BuildOutput getBuildOutput(
            if (file == narMembers.end()) continue;

            product.name = product.path == store->printStorePath(output) ? "" : baseNameOf(product.path);
+            if (!std::regex_match(product.name, std::regex("[a-zA-Z0-9.@:_ -]*")))
+                product.name = "";

            if (file->second.type == SourceAccessor::Type::tRegular) {
                product.isRegular = true;