botan2: add patch for CVE-2021-40529

(cherry picked from commit 63bf10c8487963d50d67024859178178f776164a)
2021-09-08 05:07:41 +00:00
parent 57ff6689cc
commit e8fe5c4eb4
2 changed files with 12 additions and 1 deletions
@@ -1,4 +1,4 @@
-{ callPackage, ... } @ args:
+{ callPackage, fetchpatch, ... } @ args:

 callPackage ./generic.nix (args // {
  baseVersion = "2.18";
@@ -7,4 +7,13 @@ callPackage ./generic.nix (args // {
  postPatch = ''
    sed -e 's@lang_flags "@&--std=c++11 @' -i src/build-data/cc/{gcc,clang}.txt
  '';
+  extraPatches = [
+    (fetchpatch {
+      name = "CVE-2021-40529.patch";
+      url = "https://github.com/randombit/botan/commit/9a23e4e3bc3966340531f2ff608fa9d33b5185a2.patch";
+      sha256 = "1ax1n2l9zh0hk35vkkywgkhzpdk76xb9apz2wm3h9kjvjs9acr3y";
+      # our source tarball doesn't include the tests
+      excludes = [ "src/tests/*" ];
+    })
+  ];
 })