From 597cc4b67362502d0287db84cb1c5c6ac46b7df4 Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Sun, 11 Apr 2021 17:39:05 +0100
Subject: [PATCH] syncthing: add patch for CVE-2021-21404

---
 pkgs/applications/networking/syncthing/default.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/pkgs/applications/networking/syncthing/default.nix b/pkgs/applications/networking/syncthing/default.nix
index 7baff125bac0..45adb7537b57 100644
--- a/pkgs/applications/networking/syncthing/default.nix
+++ b/pkgs/applications/networking/syncthing/default.nix
@@ -1,4 +1,4 @@
-{ buildGoModule, stdenv, lib, procps, fetchFromGitHub, nixosTests }:
+{ buildGoModule, stdenv, lib, procps, fetchFromGitHub, nixosTests, fetchpatch }:
 
 let
   common = { stname, target, postInstall ? "" }:
@@ -19,6 +19,11 @@ let
 
       patches = [
         ./add-stcli-target.patch
+        (fetchpatch {
+          name = "CVE-2021-21404.patch";
+          url = "https://github.com/syncthing/syncthing/commit/fb4fdaf4c0a79c22cad000c42ac1394e3ccb6a97.patch";
+          sha256 = "0xjh500fi50570dkf3xdaj2367ynn1cs95lypq6b0wi81kp7m540";
+        })
       ];
       BUILD_USER="nix";
       BUILD_HOST="nix";