From 4755bf2a60d9f2eb31e8eb43c762d2b41b02ee7b Mon Sep 17 00:00:00 2001
From: sh0uv1 <mirantuten@yandex.com>
Date: Sun, 13 Sep 2026 18:16:49 +0000
Subject: [PATCH] sngrep: fix CVE-2026-90558

Fixes: NixOS/nixpkgs#562879
Stack Buffer Overflow via SIP Headers

(cherry picked from commit 49546c7a32121b6830750d597ecc39ba5b45c34f)
---
 pkgs/by-name/sn/sngrep/package.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/by-name/sn/sngrep/package.nix b/pkgs/by-name/sn/sngrep/package.nix
index 813fd9f93bc1..a047885fc73f 100644
--- a/pkgs/by-name/sn/sngrep/package.nix
+++ b/pkgs/by-name/sn/sngrep/package.nix
@@ -10,6 +10,7 @@
   openssl,
   pcre2,
   pkg-config,
+  fetchpatch,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -46,6 +47,13 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   patches = [
+    # TODO: Remove this patch when updating to version 1.8.5
+    (fetchpatch {
+      name = "CVE-2026-90558.patch";
+      url = "https://github.com/irontec/sngrep/commit/1ff74ee3ab5ff280e8ba976aa8c744dca57eb35b.patch";
+      hash = "sha256-QizEvKztbosj3GoRtG9yxeqTglyBNLuuOmPF92XU7BE=";
+    })
+
     ./fix-sng_strncpy-declaration.patch
   ];