Merge pull request #32119 from adisbladis/CVE-2017-8779

rpcbind: Patch for CVE-2017-8779
This commit is contained in:
adisbladis 2017-11-28 11:03:05 +08:00 committed by GitHub
commit 015e05149b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,4 @@
{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc
{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc, fetchpatch
, useSystemd ? true, systemd }:
stdenv.mkDerivation rec {
@ -12,6 +12,11 @@ stdenv.mkDerivation rec {
patches = [
./sunrpc.patch
(fetchpatch {
name = "CVE-2017-8779.patch";
url = "https://raw.githubusercontent.com/guidovranken/rpcbomb/e6da9e489aa8ad000b0ad5ac9abc5b4eefc3a769/rpcbind_patch.txt";
sha256 = "0w231w8fxihgrn526np078j3vbj3ylvjvxjmfpjvqhga5zg821ab";
})
];
buildInputs = [ libnsl libtirpc ]