public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

faad2: apply security patches from Debian

This commit is contained in:
Vladimír Čunát 2019-06-11 15:31:10 +02:00
parent feb949cd61
commit 57aa3ec33b
No known key found for this signature in database
GPG Key ID: E747DF1F9575A3AA
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
pkgs/development/libraries/faad2/default.nix
View File

@ -12,6 +12,30 @@ stdenv.mkDerivation rec {
sha256 = "1db37ydb6mxhshbayvirm5vz6j361bjim4nkpwjyhmy4ddfinmhl";
};
patches = let
fp = { ver ? "2.8.8-3", pname, name ? (pname + ".patch"), sha256 }: fetchurl {
url = "https://salsa.debian.org/multimedia-team/faad2/raw/debian/${ver}"
+ "/debian/patches/${pname}.patch?inline=false";
inherit name sha256;
};
in [
(fp {
# critical bug addressed in vlc 3.0.7 (but we use system-provided faad)
pname = "0004-Fix-a-couple-buffer-overflows";
sha256 = "1mwycdfagz6wpda9j3cp7lf93crgacpa8rwr58p3x0i5cirnnmwq";
})
(fp {
name = "CVE-2018-20362.patch";
pname = "0009-syntax.c-check-for-syntax-element-inconsistencies";
sha256 = "1z849l5qyvhyn5pvm6r07fa50nrn8nsqnrka2nnzgkhxlhvzpa81";
})
(fp {
name = "CVE-2018-20194.patch";
pname = "0010-sbr_hfadj-sanitize-frequency-band-borders";
sha256 = "1b1kbz4mv0zhpq8h3djnvqafh1gn12nikk9v3jrxyryywacirah4";
})
];
configureFlags = []
++ optional drmSupport "--with-drm";