From 2428000c6691d5126b82e1738f3d7b4d0c14fe5d Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Mon, 13 Feb 2023 00:20:17 +0000 Subject: [PATCH] debian-devscripts: add hardening-check-obey-binutils-env-vars.patch --- pkgs/tools/misc/debian-devscripts/default.nix | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/pkgs/tools/misc/debian-devscripts/default.nix b/pkgs/tools/misc/debian-devscripts/default.nix index e1ee9757fe8..b8a58ff400e 100644 --- a/pkgs/tools/misc/debian-devscripts/default.nix +++ b/pkgs/tools/misc/debian-devscripts/default.nix @@ -1,4 +1,4 @@ -{lib, stdenv, fetchurl, xz, dpkg +{lib, stdenv, fetchurl, fetchpatch, xz, dpkg , libxslt, docbook_xsl, makeWrapper, writeShellScript , python3Packages , perlPackages, curl, gnupg, diffutils, nano, pkg-config, bash-completion, help2man @@ -19,6 +19,14 @@ in stdenv.mkDerivation rec { hash = "sha256-j0fUVTS/lPKFdgeMhksiJz2+E5koB07IK2uEj55EWG0="; }; + patches = [ + (fetchpatch { + name = "hardening-check-obey-binutils-env-vars.patch"; + url = "https://github.com/Debian/devscripts/pull/2/commits/c6a018e0ef50a1b0cb4962a2f96dae7c6f21f1d4.patch"; + hash = "sha256-UpS239JiAM1IYxNuJLdILq2h0xlR5t0Tzhj47xiMHww="; + }) + ]; + postPatch = '' substituteInPlace scripts/Makefile --replace /usr/share/dpkg ${dpkg}/share/dpkg substituteInPlace scripts/debrebuild.pl --replace /usr/bin/perl ${perlPackages.perl}/bin/perl