diff options
Diffstat (limited to 'pkgs/os-specific')
4 files changed, 6 insertions, 57 deletions
diff --git a/pkgs/os-specific/linux/kernel/interpreter-trunc.patch b/pkgs/os-specific/linux/kernel/interpreter-trunc.patch deleted file mode 100644 index a0eceec2258..00000000000 --- a/pkgs/os-specific/linux/kernel/interpreter-trunc.patch +++ /dev/null @@ -1,44 +0,0 @@ -From cb5b020a8d38f77209d0472a0fea755299a8ec78 Mon Sep 17 00:00:00 2001 -From: Linus Torvalds <torvalds@linux-foundation.org> -Date: Thu, 14 Feb 2019 15:02:18 -0800 -Subject: Revert "exec: load_script: don't blindly truncate shebang string" - -This reverts commit 8099b047ecc431518b9bb6bdbba3549bbecdc343. - -It turns out that people do actually depend on the shebang string being -truncated, and on the fact that an interpreter (like perl) will often -just re-interpret it entirely to get the full argument list. - -Reported-by: Samuel Dionne-Riel <samuel@dionne-riel.com> -Acked-by: Kees Cook <keescook@chromium.org> -Cc: Oleg Nesterov <oleg@redhat.com> -Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> ---- - fs/binfmt_script.c | 10 +++------- - 1 file changed, 3 insertions(+), 7 deletions(-) - -diff --git a/fs/binfmt_script.c b/fs/binfmt_script.c -index d0078cbb718b..7cde3f46ad26 100644 ---- a/fs/binfmt_script.c -+++ b/fs/binfmt_script.c -@@ -42,14 +42,10 @@ static int load_script(struct linux_binprm *bprm) - fput(bprm->file); - bprm->file = NULL; - -- for (cp = bprm->buf+2;; cp++) { -- if (cp >= bprm->buf + BINPRM_BUF_SIZE) -- return -ENOEXEC; -- if (!*cp || (*cp == '\n')) -- break; -- } -+ bprm->buf[BINPRM_BUF_SIZE - 1] = '\0'; -+ if ((cp = strchr(bprm->buf, '\n')) == NULL) -+ cp = bprm->buf+BINPRM_BUF_SIZE-1; - *cp = '\0'; -- - while (cp > bprm->buf) { - cp--; - if ((*cp == ' ') || (*cp == '\t')) --- -cgit 1.2-0.3.lf.el7 - diff --git a/pkgs/os-specific/linux/kernel/linux-hardkernel-4.14.nix b/pkgs/os-specific/linux/kernel/linux-hardkernel-4.14.nix index 6655845efe5..6bc69238591 100644 --- a/pkgs/os-specific/linux/kernel/linux-hardkernel-4.14.nix +++ b/pkgs/os-specific/linux/kernel/linux-hardkernel-4.14.nix @@ -1,10 +1,10 @@ { stdenv, buildPackages, fetchFromGitHub, perl, buildLinux, libelf, utillinux, ... } @ args: buildLinux (args // rec { - version = "4.14.87-153"; + version = "4.14.94-155"; # modDirVersion needs to be x.y.z. - modDirVersion = "4.14.87"; + modDirVersion = "4.14.94"; # branchVersion needs to be x.y. extraMeta.branch = "4.14"; @@ -13,7 +13,7 @@ buildLinux (args // rec { owner = "hardkernel"; repo = "linux"; rev = version; - sha256 = "1aj3l8pf3nl0mm4m5z4z4iqd72b0nqip4cajmhpfjmq8vkygcw5c"; + sha256 = "1jg4m17y5wkmfmw8y9y9nh14xzw6011gbzlckqabmbazcdpbmf9d"; }; defconfig = "odroidxu4_defconfig"; diff --git a/pkgs/os-specific/linux/kernel/linux-testing.nix b/pkgs/os-specific/linux/kernel/linux-testing.nix index 0cd793db339..ed685246444 100644 --- a/pkgs/os-specific/linux/kernel/linux-testing.nix +++ b/pkgs/os-specific/linux/kernel/linux-testing.nix @@ -1,13 +1,13 @@ { stdenv, buildPackages, fetchurl, perl, buildLinux, libelf, utillinux, ... } @ args: buildLinux (args // rec { - version = "5.0-rc6"; - modDirVersion = "5.0.0-rc6"; + version = "5.0-rc7"; + modDirVersion = "5.0.0-rc7"; extraMeta.branch = "5.0"; src = fetchurl { url = "https://git.kernel.org/torvalds/t/linux-${version}.tar.gz"; - sha256 = "1315hkjwgm97kh98y8ynsf6fy1b6yf4b74ws6d4s7dls70qzl3yw"; + sha256 = "0x5jvv4n9l1gisc0q9m9r7173d9qwpl6crd59fbmasbmvi9lnp41"; }; # Should the testing kernels ever be built on Hydra? diff --git a/pkgs/os-specific/linux/kernel/patches.nix b/pkgs/os-specific/linux/kernel/patches.nix index 18fd311ca06..4c338b37dec 100644 --- a/pkgs/os-specific/linux/kernel/patches.nix +++ b/pkgs/os-specific/linux/kernel/patches.nix @@ -57,11 +57,4 @@ rec { sha256 = "1l8xq02rd7vakxg52xm9g4zng0ald866rpgm8kjlh88mwwyjkrwv"; }; }; - - # https://github.com/NixOS/nixpkgs/issues/53672 - # https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb5b020a8d38f77209d0472a0fea755299a8ec78 - interpreter-trunc = { - name = "interpreter-trunc"; - patch = ./interpreter-trunc.patch; - }; } |