diff options
| author | Martin Weinelt <hexa@darmstadt.ccc.de> | 2022-02-10 15:47:18 +0100 |
|---|---|---|
| committer | Martin Weinelt <hexa@darmstadt.ccc.de> | 2022-02-10 16:18:03 +0100 |
| commit | 1eb584fc1521a352a6ff39c3605b218c6db1881f (patch) | |
| tree | 1bc49d3f370acd5805583d4e65f3aa0b232e2b84 /pkgs/development/libraries/speex | |
| parent | 0bb878670bdc95e82464075f43df015685f05b72 (diff) | |
speex: patch zero division vector in wave header parser
Fixes: CVE-2020-23903
Diffstat (limited to 'pkgs/development/libraries/speex')
| -rw-r--r-- | pkgs/development/libraries/speex/default.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/development/libraries/speex/default.nix b/pkgs/development/libraries/speex/default.nix index a7d4aa9707423..5509be7822d7e 100644 --- a/pkgs/development/libraries/speex/default.nix +++ b/pkgs/development/libraries/speex/default.nix @@ -1,4 +1,4 @@ -{ lib, stdenv, fetchurl, autoreconfHook, pkg-config, fftw, speexdsp }: +{ lib, stdenv, fetchurl, fetchpatch, autoreconfHook, pkg-config, fftw, speexdsp }: stdenv.mkDerivation rec { pname = "speex"; @@ -13,6 +13,14 @@ stdenv.mkDerivation rec { sed -i '/AC_CONFIG_MACRO_DIR/i PKG_PROG_PKG_CONFIG' configure.ac ''; + patches = [ + (fetchpatch { + name = "CVE-2020-23903.patch"; + url = "https://github.com/xiph/speex/commit/870ff845b32f314aec0036641ffe18aba4916887.patch"; + sha256 = "sha256-uEMDhDTw/LIWNPPCXW6kF+udBmNO88G/jJTojAA9fs8="; + }) + ]; + outputs = [ "out" "dev" "doc" ]; nativeBuildInputs = [ autoreconfHook pkg-config ]; |