summary refs log tree commit diff
path: root/pkgs/development/libraries/libopus
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2017-01-21 07:57:15 +0100
committerFranz Pletz <fpletz@fnordicwalking.de>2017-01-21 14:14:46 +0100
commit140d135ee2e2f2ea538591fe25719c9c91d4651e (patch)
tree79803679ebf5886617eae87924c44757dc095f6e /pkgs/development/libraries/libopus
parent72a002f9d617caa26617570cf00afe0ce748cb4b (diff)
downloadnixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar.gz
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar.bz2
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar.lz
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar.xz
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.tar.zst
nixpkgs-140d135ee2e2f2ea538591fe25719c9c91d4651e.zip
libopus: add patch to fix CVE-2017-0381
Diffstat (limited to 'pkgs/development/libraries/libopus')
-rw-r--r--pkgs/development/libraries/libopus/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/development/libraries/libopus/default.nix b/pkgs/development/libraries/libopus/default.nix
index 82bf9a48679..559caf8928b 100644
--- a/pkgs/development/libraries/libopus/default.nix
+++ b/pkgs/development/libraries/libopus/default.nix
@@ -1,4 +1,5 @@
-{ stdenv, fetchurl, fixedPoint ? false, withCustomModes ? true }:
+{ stdenv, fetchurl, fetchpatch
+, fixedPoint ? false, withCustomModes ? true }:
 
 let
   version = "1.1.3";
@@ -11,6 +12,13 @@ stdenv.mkDerivation rec {
     sha256 = "0cxnd7pjxbgh6l3cbzsw29phpr5cq28fikfhjlp1hc3y5s0gxdjq";
   };
 
+  patches = [
+    (fetchpatch { # CVE-2017-0381
+      url = "https://github.com/xiph/opus/commit/79e8f527b0344b0897a65be35e77f7885bd99409.patch";
+      sha256 = "0clm4ixqkaj0a6i5rhaqfv3nnxyk33b2b8xlm7vyfd0y8kbh996q";
+    })
+  ];
+
   outputs = [ "out" "dev" ];
 
   configureFlags = stdenv.lib.optional fixedPoint "--enable-fixed-point"