diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2017-10-24 13:25:16 +0200 |
|---|---|---|
| committer | Franz Pletz <fpletz@fnordicwalking.de> | 2017-10-24 14:21:06 +0200 |
| commit | a203fd2a57e828bcf567928ff41361fc52bc8e9b (patch) | |
| tree | b247452c7c4cc3958c5686280d1c754be4e5e510 /pkgs/development/libraries/SDL_image | |
| parent | b4d1c8898ef80db2a878055f08c38e3e2ebbd3d9 (diff) | |
SDL_image: add patch to fix CVE-2017-2887
Diffstat (limited to 'pkgs/development/libraries/SDL_image')
| -rw-r--r-- | pkgs/development/libraries/SDL_image/default.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/development/libraries/SDL_image/default.nix b/pkgs/development/libraries/SDL_image/default.nix index 62af47807cc2..55a4058fe56d 100644 --- a/pkgs/development/libraries/SDL_image/default.nix +++ b/pkgs/development/libraries/SDL_image/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, SDL, libpng, libjpeg, libtiff, libungif, libXpm }: +{ stdenv, fetchurl, fetchpatch, SDL, libpng, libjpeg, libtiff, libungif, libXpm }: stdenv.mkDerivation rec { name = "SDL_image-${version}"; @@ -9,6 +9,14 @@ stdenv.mkDerivation rec { sha256 = "16an9slbb8ci7d89wakkmyfvp7c0cval8xw4hkg0842nhhlp540b"; }; + patches = [ + (fetchpatch { + name = "CVE-2017-2887"; + url = "https://hg.libsdl.org/SDL_image/raw-diff/318484db0705/IMG_xcf.c"; + sha256 = "140dyszz9hkpgwjdiwp1b7jdd8f8l5d862xdaf3ml4cimga1h5kv"; + }) + ]; + buildInputs = [ SDL libpng libjpeg libtiff libungif libXpm ]; meta = with stdenv.lib; { |