summary refs log tree commit diff
path: root/pkgs/development/libraries/SDL_image
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2017-10-24 13:25:16 +0200
committerFranz Pletz <fpletz@fnordicwalking.de>2017-10-24 14:21:06 +0200
commita203fd2a57e828bcf567928ff41361fc52bc8e9b (patch)
treeb247452c7c4cc3958c5686280d1c754be4e5e510 /pkgs/development/libraries/SDL_image
parentb4d1c8898ef80db2a878055f08c38e3e2ebbd3d9 (diff)
downloadnixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar.gz
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar.bz2
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar.lz
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar.xz
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.tar.zst
nixpkgs-a203fd2a57e828bcf567928ff41361fc52bc8e9b.zip
SDL_image: add patch to fix CVE-2017-2887
Diffstat (limited to 'pkgs/development/libraries/SDL_image')
-rw-r--r--pkgs/development/libraries/SDL_image/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/development/libraries/SDL_image/default.nix b/pkgs/development/libraries/SDL_image/default.nix
index 62af47807cc..55a4058fe56 100644
--- a/pkgs/development/libraries/SDL_image/default.nix
+++ b/pkgs/development/libraries/SDL_image/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, SDL, libpng, libjpeg, libtiff, libungif, libXpm }:
+{ stdenv, fetchurl, fetchpatch, SDL, libpng, libjpeg, libtiff, libungif, libXpm }:
 
 stdenv.mkDerivation rec {
   name = "SDL_image-${version}";
@@ -9,6 +9,14 @@ stdenv.mkDerivation rec {
     sha256 = "16an9slbb8ci7d89wakkmyfvp7c0cval8xw4hkg0842nhhlp540b";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2017-2887";
+      url = "https://hg.libsdl.org/SDL_image/raw-diff/318484db0705/IMG_xcf.c";
+      sha256 = "140dyszz9hkpgwjdiwp1b7jdd8f8l5d862xdaf3ml4cimga1h5kv";
+    })
+  ];
+
   buildInputs = [ SDL libpng libjpeg libtiff libungif libXpm ];
 
   meta = with stdenv.lib; {