Merge pull request #64266 from risicle/ris-expat-CVE-2018-20843-r19.03

[r19.03] expat: add patch for CVE-2018-20843
This commit is contained in:
worldofpeace
2019-07-04 06:35:46 -04:00
committed by GitHub

View File

@@ -1,4 +1,4 @@
{ stdenv, fetchurl }:
{ stdenv, fetchurl, fetchpatch }:
stdenv.mkDerivation rec {
name = "expat-2.2.6";
@@ -8,6 +8,15 @@ stdenv.mkDerivation rec {
sha256 = "1wl1x93b5w457ddsdgj0lh7yjq4q6l7wfbgwhagkc8fm2qkkrd0p";
};
patches = [
(fetchpatch {
name = "CVE-2018-20843.patch";
url = "https://github.com/libexpat/libexpat/commit/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6.patch";
sha256 = "1i7bq9sp2k5348dvbfv26bprzv6ka1abf0j5ixjaff9alndm4f19";
stripLen = 1;
})
];
outputs = [ "out" "dev" ]; # TODO: fix referrers
outputBin = "dev";