nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-28 10:50:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Backport release-26.05] iwd: add patchset to fix exploitable memory-safety bugs (#565279)

Browse Source
This commit is contained in:
Thomas Gerbet
2026-09-22 08:26:51 +00:00
committed by GitHub
parent e314b6870d b350561da2
commit 98daee9f4b
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
pkgs/by-name/iw/iwd/package.nix
View File

@@ -2,6 +2,7 @@
lib,
stdenv,
fetchgit,
fetchpatch,
autoreconfHook,
pkg-config,
ell,
@@ -27,6 +28,29 @@ stdenv.mkDerivation (finalAttrs: {
# Remove dbus config referencing the netdev group, which we don't have.
# Users are advised to use the wheel group instead.
./no_netdev_group.diff
# Fixes for exploitable memory-safety bugs reported in
# https://abhinavagarwal07.github.io/posts/iwd-rrm-stack-overflow/
(fetchpatch {
name = "rrm-fix-stack-buffer-overflow-in-rrm_report_beacon_results.patch";
url = "https://raw.githubusercontent.com/abhinavagarwal07/iwd-security-poc/1d646278412ef446f30cb58025590e6ff5945cb0/patches/0001-rrm-fix-stack-buffer-overflow-in-rrm_report_beacon_r.patch";
hash = "sha256-t7f4vrS8Ns0BUt8UxS+62T+xWDZaA/t5A0cnXWm00ZU=";
})
(fetchpatch {
name = "ie-fix-off-by-one-in-he-capabilities-channel-width-set.patch";
url = "https://raw.githubusercontent.com/abhinavagarwal07/iwd-security-poc/1d646278412ef446f30cb58025590e6ff5945cb0/patches/0002-ie-fix-off-by-one-in-HE-Capabilities-Channel-Width-S.patch";
hash = "sha256-142lowS9YtOGwfRqryxxGnzcNZrz72tIOhVZhlo3fMY=";
})
(fetchpatch {
name = "ft-fix-mde_equal-self-comparison-and-type-mismatch.patch";
url = "https://raw.githubusercontent.com/abhinavagarwal07/iwd-security-poc/1d646278412ef446f30cb58025590e6ff5945cb0/patches/0003-ft-fix-mde_equal-self-comparison-and-type-mismatch.patch";
hash = "sha256-Qdm8eAw3tbH/wDWvmWIkKxMQ2m16o+VvEPYaKXBgAAw=";
})
(fetchpatch {
name = "ie-fix-uint8_t-underflow-in-fte-sub-element-parser.patch";
url = "https://raw.githubusercontent.com/abhinavagarwal07/iwd-security-poc/1d646278412ef446f30cb58025590e6ff5945cb0/patches/0004-ie-fix-uint8_t-underflow-in-FTE-sub-element-parser.patch";
hash = "sha256-6At7PUXoORM++9ndIzxTTRu7V09+D31DrdMNLt1EtOc=";
})
];
outputs = [