nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-21 16:11:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

file: add patch for CVE-2019-18218

Browse Source 
upstream patch 46a8443f76.patch
doesn't apply directly, debian have a version which has been adapted for
5.37.

(cherry picked from commit 99273fc555)
This commit is contained in:
Robert Scott
2019-10-26 14:28:02 +01:00
parent 0391c19a73
commit be28735bfe
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/tools/misc/file/default.nix
View File

@@ -1,4 +1,4 @@
{ stdenv, fetchurl, file, zlib, libgnurx }:
{ stdenv, fetchurl, fetchpatch, file, zlib, libgnurx }:
stdenv.mkDerivation rec {
name = "file-${version}";
@@ -12,6 +12,14 @@ stdenv.mkDerivation rec {
sha256 = "0ya330cdkvfi2d28h8gvhghj4gnhysmifmryysl0a97xq2884q7v";
};
patches = [
(fetchpatch {
name = "CVE-2019-18218.patch";
url = "https://sources.debian.org/data/main/f/file/1:5.37-6/debian/patches/cherry-pick.FILE5_37-67-g46a8443f.limit-the-number-of-elements-in-a-vector-found-by-oss-fuzz.patch";
sha256 = "1i22y91yndc3n2p2ngczp1lwil8l05sp8ciicil74xrc5f91y6mj";
})
];
nativeBuildInputs = stdenv.lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) file;
buildInputs = [ zlib ]
++ stdenv.lib.optional stdenv.hostPlatform.isWindows libgnurx;