From b4bc98430c3e0271873cd0d473fa8806c248fb62 Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Wed, 3 Jul 2019 22:44:40 +0100
Subject: [PATCH] expat: add patch for CVE-2018-20843

---
 pkgs/development/libraries/expat/default.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/libraries/expat/default.nix b/pkgs/development/libraries/expat/default.nix
index 7e4d46c012dd..915fbf8d5498 100644
--- a/pkgs/development/libraries/expat/default.nix
+++ b/pkgs/development/libraries/expat/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl }:
+{ stdenv, fetchurl, fetchpatch }:
 
 stdenv.mkDerivation rec {
   name = "expat-2.2.6";
@@ -8,6 +8,15 @@ stdenv.mkDerivation rec {
     sha256 = "1wl1x93b5w457ddsdgj0lh7yjq4q6l7wfbgwhagkc8fm2qkkrd0p";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2018-20843.patch";
+      url = "https://github.com/libexpat/libexpat/commit/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6.patch";
+      sha256 = "1i7bq9sp2k5348dvbfv26bprzv6ka1abf0j5ixjaff9alndm4f19";
+      stripLen = 1;
+    })
+  ];
+
   outputs = [ "out" "dev" ]; # TODO: fix referrers
   outputBin = "dev";