From c8ab7e5712e7444e5251e7b392c9cadfeceaec67 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Fri, 28 Oct 2022 12:48:37 -0700 Subject: [PATCH] python310Packages.mpmath: fix CVE-2021-29063 (cherry picked from commit 7e5832d0039e51bb4b85d62b66212881abc4ccdf) --- .../development/python-modules/mpmath/default.nix | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/mpmath/default.nix b/pkgs/development/python-modules/mpmath/default.nix index 59ebfc7091e3..e3b3223966c9 100644 --- a/pkgs/development/python-modules/mpmath/default.nix +++ b/pkgs/development/python-modules/mpmath/default.nix @@ -1,7 +1,9 @@ { lib , buildPythonPackage , fetchPypi +, fetchpatch , setuptools-scm +, pytestCheckHook }: buildPythonPackage rec { @@ -13,12 +15,21 @@ buildPythonPackage rec { sha256 = "79ffb45cf9f4b101a807595bcb3e72e0396202e0b1d25d689134b48c4216a81a"; }; + patches = [ + (fetchpatch { + name = "CVE-2021-29063.patch"; + url = "https://github.com/fredrik-johansson/mpmath/commit/46d44c3c8f3244017fe1eb102d564eb4ab8ef750.patch"; + hash = "sha256-DaZ6nj9rEsjTAomu481Ujun364bL5E6lkXFvgBfHyeA="; + }) + ]; + nativeBuildInputs = [ setuptools-scm ]; - # error: invalid command 'test' - doCheck = false; + checkInputs = [ + pytestCheckHook + ]; meta = with lib; { homepage = "https://mpmath.org/";