dnsmasq: Patch CVE-2017-15107

This commit is contained in:
adisbladis 2018-02-24 01:34:32 +08:00
parent fa06cab3fd
commit b492e2a164
No known key found for this signature in database
GPG Key ID: ED58F95069B004F5

View File

@ -1,4 +1,4 @@
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack }:
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack, fetchpatch }:
with stdenv.lib;
let
@ -18,6 +18,16 @@ stdenv.mkDerivation rec {
sha256 = "0ar5h5v3kas2qx2wgy5iqin15gc4jhqrqs067xacgc3lii1rz549";
};
patches = [
(fetchpatch {
name = "CVE-2017-15107.patch";
url = "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=patch;h=4fe6744a220eddd3f1749b40cac3dfc510787de6";
sha256 = "0r8grhh1q46z8v6manx1vvfpf2vmchfzsg7l1djh63b1fy1mbjkk";
# changelog does not apply cleanly but its safe to skip
excludes = [ "CHANGELOG" ];
})
];
preBuild = ''
makeFlagsArray=("COPTS=${copts}")
'';