sox: Patches for CVE-2014-8145

Found via RedHat bug 1174792. It was not clear whether these address a NULL dereference and a division by zero.
2015-02-15 00:12:29 -08:00
parent 2e4b5ba1ea
commit cf11e28599
3 changed files with 63 additions and 0 deletions
@@ -18,6 +18,13 @@ stdenv.mkDerivation rec {
    sha256 = "16x8gykfjdhxg0kdxwzcwgwpm5caa08y2mx18siqsq0ywmpjr34s";
  };

+  patches = [
+    # Patches for CVE-2014-8145, found via RedHat bug 1174792.  It was not
+    # clear whether these address a NULL deref and a division by zero.
+    ./0001-Check-for-minimum-size-sphere-headers.patch
+    ./0002-More-checks-for-invalid-MS-ADPCM-blocks.patch
+  ];
+
  buildInputs =
    optional (enableAlsa && stdenv.isLinux) alsaLib ++
    optional enableLibao libao ++