unrtf: patch against CVE-2016-10091

This commit is contained in:
Graham Christensen 2017-01-11 07:25:38 -05:00
parent b8b1892546
commit 2dab7782f3
No known key found for this signature in database
GPG key ID: 06121D366FE9435C

View file

@ -1,4 +1,4 @@
{ stdenv, fetchurl, autoconf, automake, libiconv }: { stdenv, fetchurl, fetchpatch, autoconf, automake, libiconv }:
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
name = "unrtf-${version}"; name = "unrtf-${version}";
@ -9,6 +9,14 @@ stdenv.mkDerivation rec {
sha256 = "1pcdzf2h1prn393dkvg93v80vh38q0v817xnbwrlwxbdz4k7i8r2"; sha256 = "1pcdzf2h1prn393dkvg93v80vh38q0v817xnbwrlwxbdz4k7i8r2";
}; };
patches = [
(fetchpatch {
name = "CVE-2016-10091-0001-convert.c-Use-safe-buffer-size-and-snprintf.patch";
url = "https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=849705;filename=0001-convert.c-Use-safe-buffer-size-and-snprintf.patch;msg=20";
sha256 = "0s0fjvm3zdm9967sijlipfrwjs0h23n2n8fa6f40xxp8y5qq5a0b";
})
];
nativeBuildInputs = [ autoconf automake ]; nativeBuildInputs = [ autoconf automake ];
buildInputs = [ ] ++ stdenv.lib.optional stdenv.isDarwin libiconv; buildInputs = [ ] ++ stdenv.lib.optional stdenv.isDarwin libiconv;