summary refs log tree commit diff
path: root/pkgs/applications/graphics/dia
diff options
context:
space:
mode:
authorDmitry Kalinkin <dmitry.kalinkin@gmail.com>2021-01-30 12:01:45 -0500
committerDmitry Kalinkin <dmitry.kalinkin@gmail.com>2021-01-30 12:01:45 -0500
commitcd463399ff9462c90e271e8fd853c2da7051235f (patch)
treeee900781b5c97599feec6b4be3a82a1837037d52 /pkgs/applications/graphics/dia
parent882c9488fa79ecb42685a24825c72247f294863d (diff)
downloadnixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar.gz
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar.bz2
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar.lz
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar.xz
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.tar.zst
nixpkgs-cd463399ff9462c90e271e8fd853c2da7051235f.zip
dia: fix CVE-2019-19451
Diffstat (limited to 'pkgs/applications/graphics/dia')
-rw-r--r--pkgs/applications/graphics/dia/CVE-2019-19451.patch11
-rw-r--r--pkgs/applications/graphics/dia/default.nix4
2 files changed, 15 insertions, 0 deletions
diff --git a/pkgs/applications/graphics/dia/CVE-2019-19451.patch b/pkgs/applications/graphics/dia/CVE-2019-19451.patch
new file mode 100644
index 00000000000..28d6598330a
--- /dev/null
+++ b/pkgs/applications/graphics/dia/CVE-2019-19451.patch
@@ -0,0 +1,11 @@
+diff -ru a/app/app_procs.c b/app/app_procs.c
+--- a/app/app_procs.c	2021-01-30 11:09:52.000000000 -0500
++++ b/app/app_procs.c	2021-01-30 11:11:05.000000000 -0500
+@@ -785,6 +785,7 @@
+ 
+ 	if (!filename) {
+ 	  g_print (_("Filename conversion failed: %s\n"), filenames[i]);
++	  ++i;
+ 	  continue;
+ 	}
+ 
diff --git a/pkgs/applications/graphics/dia/default.nix b/pkgs/applications/graphics/dia/default.nix
index 6fe8aed8f67..d9de3eb7fc1 100644
--- a/pkgs/applications/graphics/dia/default.nix
+++ b/pkgs/applications/graphics/dia/default.nix
@@ -13,6 +13,10 @@ stdenv.mkDerivation {
     sha256 = "1fyxfrzdcs6blxhkw3bcgkksaf3byrsj4cbyrqgb4869k3ynap96";
   };
 
+  patches = [
+    ./CVE-2019-19451.patch
+  ];
+
   buildInputs =
     [ gtk2 libxml2 gettext python libxml2Python docbook5
       libxslt docbook_xsl libart_lgpl ]