wolfssl: add patch for CVE-2022-23408

This commit is contained in:
Robert Scott
2022-01-19 19:46:43 +00:00
parent 77aa71f66f
commit 99a390e65f

View File

@@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, autoreconfHook
}:
@@ -15,6 +16,14 @@ stdenv.mkDerivation rec {
sha256 = "sha256-rv9D+P42RMH1O4YLQbZIEkD6KQfs8KgYjhnHeA9vQqE=";
};
patches = [
(fetchpatch {
name = "CVE-2022-23408.patch";
url = "https://github.com/wolfSSL/wolfssl/commit/73b4cc9476f6355a91138f545f3fd007ce058255.patch";
sha256 = "0r3z6ybmx3ylnw9zdva3gq4jy691r471qvhy6dvdgmdksh2kx63v";
})
];
# Almost same as Debian but for now using --enable-all --enable-reproducible-build instead of --enable-distro to ensure options.h gets installed
configureFlags = [
"--enable-all"