From 0d8188fd5a79fc174ed8aa856b6982da62868aba Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Mon, 14 Aug 2023 18:00:46 +0100
Subject: [PATCH] python3Packages.tornado_4: add patch for CVE-2023-28370

(cherry picked from commit cd6106c49716c9a35f9c332078e19857b759207b)
---
 pkgs/development/python-modules/tornado/4.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pkgs/development/python-modules/tornado/4.nix b/pkgs/development/python-modules/tornado/4.nix
index e4f59c148735..7476a22792ee 100644
--- a/pkgs/development/python-modules/tornado/4.nix
+++ b/pkgs/development/python-modules/tornado/4.nix
@@ -2,6 +2,7 @@
 , unittestCheckHook
 , buildPythonPackage
 , fetchPypi
+, fetchpatch
 , isPy27
 , pythonAtLeast
 }:
@@ -16,6 +17,14 @@ buildPythonPackage rec {
     sha256 = "02jzd23l4r6fswmwxaica9ldlyc2p6q8dk6dyff7j58fmdzf853d";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2023-28370.patch";
+      url = "https://github.com/tornadoweb/tornado/commit/32ad07c54e607839273b4e1819c347f5c8976b2f.patch";
+      hash = "sha256-2dpPHkNThOaZD8T2g1vb/I5WYZ/vy/t690539uprJyc=";
+    })
+  ];
+
   nativeCheckInputs = [ unittestCheckHook ];
 
   # We specify the name of the test files to prevent