Merge pull request #280757 from risicle/ris-python-uamqp-CVE-2024-21646

python3Packages.uamqp: add patch for CVE-2024-21646
This commit is contained in:
Thomas Gerbet 2024-01-26 22:48:41 +01:00 committed by GitHub
commit 125cefd4cf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -2,6 +2,7 @@
, stdenv
, buildPythonPackage
, fetchFromGitHub
, fetchpatch
, cython
, certifi
, CFNetwork
@ -29,6 +30,13 @@ buildPythonPackage rec {
patches = lib.optionals (stdenv.isDarwin && stdenv.isx86_64) [
./darwin-azure-c-shared-utility-corefoundation.patch
] ++ [
(fetchpatch {
name = "CVE-2024-21646.patch";
url = "https://github.com/Azure/azure-uamqp-c/commit/12ddb3a31a5a97f55b06fa5d74c59a1d84ad78fe.patch";
stripLen = 1;
extraPrefix = "src/vendor/azure-uamqp-c/";
hash = "sha256-9o3TNKFeJvZRZeS6qo2Zl+JVFrrqAGYWDQbusz4Ou+g=";
})
# Fix incompatible function pointer conversion error with clang 16.
./clang-fix-incompatible-function-pointer-conversion.patch
];