vim*: apply upstream patch to fix CVE-2016-1248

/cc #20814. Our version in master was past the last vulnerable one.
2026-10-03 13:30:36 +00:00 · 2016-11-30 14:34:36 +01:00
parent 5f40d803d7
commit 68fe9dfc71
1 changed files with 9 additions and 1 deletions
--- a/pkgs/applications/editors/vim/common.nix
+++ b/pkgs/applications/editors/vim/common.nix
@@ -1,4 +1,4 @@
-{ lib, fetchFromGitHub }:
+{ lib, fetchFromGitHub, fetchpatch }:
 rec {
  version = "7.4.2367";

@@ -18,6 +18,14 @@ rec {
    ''
      substituteInPlace runtime/ftplugin/man.vim \
        --replace "/usr/bin/man " "man "
+
+      patch -p1 < '${
+        fetchpatch {
+          name = "cve-2016-1248.diff";
+          url = "https://github.com/vim/vim/commit/d0b5138b.diff";
+          sha256 = "057kg95ipjdirbkr082wbwrbz5l79mwxir8ymkxhma6l6wbxidif";
+        }
+      }'
    '';

  meta = with lib; {