From 8e08f7515aed91689db2c978b00911043781a651 Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Sat, 22 Feb 2020 14:28:32 +0100 Subject: [PATCH] netpbm: fix typo on substituteInPlace parameters It seems like originally `-dSAFER` should have been replaced with `-dPARANOIDSAFER` instead of `-DSAFER` (capital D vs lower case d). This was pointed out in #75153. This might now finally (properly?) fix CVE-2005-2471. --- pkgs/tools/graphics/netpbm/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/tools/graphics/netpbm/default.nix b/pkgs/tools/graphics/netpbm/default.nix index 9de7603c973..b67e71c0fdf 100644 --- a/pkgs/tools/graphics/netpbm/default.nix +++ b/pkgs/tools/graphics/netpbm/default.nix @@ -15,7 +15,7 @@ stdenv.mkDerivation { postPatch = /* CVE-2005-2471, from Arch */ '' substituteInPlace converter/other/pstopnm.c \ - --replace '"-DSAFER"' '"-DPARANOIDSAFER"' + --replace '"-dSAFER"' '"-dPARANOIDSAFER"' ''; buildInputs =