Skip to content

Commit ae0f9db

Browse files
committed
fix: trusted_data now stores variable name and not the data, this was a critical bug
previously hardcoded 'mitra_trusted' as filename, bypassing variable name entirely also never stored data in VFS so verification had no stored state to compare against now creates VFS entry with correct variable name then verifies through vfs.read() means trusted_data verification goes through the same provenance enforcement as all reads
1 parent e692076 commit ae0f9db

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

src/mitra/interpreter.rs

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,8 @@ impl<'a> Interpreter<'a> {
2222
}
2323
AstNode::TrustedData { name, content } => {
2424
println!("[mitra] trusted_data {}", name);
25-
let td = TrustedData::new("mitra_trusted", content.as_bytes());
25+
self.vfs.create(&name, content.as_bytes());
26+
let td = TrustedData::new(&name, content.as_bytes());
2627
let ok = td.verify_or_halt();
2728
if ok {
2829
println!("[mitra] trusted_data \"{}\" approved for execution", name);

0 commit comments

Comments
 (0)