openexr: add patch for CVE-2021-45942
the CVE description is currently suggesting
db217f29df
as the fix, but it is wrong
checked this patch does silence valgrind's complaints with
reproducer file https://oss-fuzz.com/download?testcase_id=5275682339422208
This commit is contained in:
parent
c893059836
commit
a238071df4
|
@ -26,6 +26,13 @@ stdenv.mkDerivation rec {
|
|||
url = "https://github.com/AcademySoftwareFoundation/openexr/commit/2f19a01923885fda75ec9d19332de080ec7102bd.patch";
|
||||
sha256 = "1yxmrdzq1x1911wdzwnzr29jmg2r4wd4yx3vhjn0y5dpny0ri5y5";
|
||||
})
|
||||
(fetchpatch {
|
||||
name = "CVE-2021-45942.patch";
|
||||
url = "https://github.com/AcademySoftwareFoundation/openexr/commit/11cad77da87c4fa2aab7d58dd5339e254db7937e.patch";
|
||||
stripLen = 4;
|
||||
extraPrefix = "OpenEXR/IlmImf/";
|
||||
sha256 = "1wa2jn6sa0n3phaqvklnlbgk1bz60y756ad4jk4d757pzpnannsy";
|
||||
})
|
||||
];
|
||||
|
||||
nativeBuildInputs = [ cmake ];
|
||||
|
|
Loading…
Reference in a new issue