nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-04-14 04:17:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

speex: patch zero division vector in wave header parser

Browse Source 
Fixes: CVE-2020-23903
This commit is contained in:
Martin Weinelt 2022-02-10 15:47:18 +01:00
parent 0bb878670b
commit 1eb584fc15
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/development/libraries/speex/default.nix
View File

@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl, autoreconfHook, pkg-config, fftw, speexdsp }:
{ lib, stdenv, fetchurl, fetchpatch, autoreconfHook, pkg-config, fftw, speexdsp }:
stdenv.mkDerivation rec {
pname = "speex";
@ -13,6 +13,14 @@ stdenv.mkDerivation rec {
sed -i '/AC_CONFIG_MACRO_DIR/i PKG_PROG_PKG_CONFIG' configure.ac
'';
patches = [
(fetchpatch {
name = "CVE-2020-23903.patch";
url = "https://github.com/xiph/speex/commit/870ff845b32f314aec0036641ffe18aba4916887.patch";
sha256 = "sha256-uEMDhDTw/LIWNPPCXW6kF+udBmNO88G/jJTojAA9fs8=";
})
];
outputs = [ "out" "dev" "doc" ];
nativeBuildInputs = [ autoreconfHook pkg-config ];