wpa_supplicant: apply patch for CVE-2019-16275 (#70266)

wpa_supplicant: apply patch for CVE-2019-16275
This commit is contained in:
Florian Klink 2019-10-14 23:00:05 +02:00 committed by GitHub
commit ac1aeb4fbb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -13,6 +13,14 @@ stdenv.mkDerivation rec {
sha256 = "05qzak1mssnxcgdrafifxh9w86a4ha69qabkg4bsigk499xyxggw";
};
patches = [
(fetchurl {
name = "CVE-2019-16275.patch";
url = "https://w1.fi/security/2019-7/0001-AP-Silently-ignore-management-frame-from-unexpected-.patch";
sha256 = "15xjyy7crb557wxpx898b5lnyblxghlij0xby5lmj9hpwwss34dz";
})
];
# TODO: Patch epoll so that the dbus actually responds
# TODO: Figure out how to get privsep working, currently getting SIGBUS
extraConfig = ''