dnscrypt-wrapper: disable fortify3 hardening flag
This was enabled by default in db3e94c3
and breaks the key generation,
specifically `dnscrypt-wrapper --gen-crypt-keypair` fails with:
Generate crypt key pair... ok.
Secret key stored in 2.dnscrypt-cert.server.key
*** buffer overflow detected ***: terminated
FAQ:
1. Is the buffer overflow real? Probably.
2. Is it maintained? Is upstream going to fix it? Not really.
3. Are you willing to investigate and patch it yourself? Nope.
This commit is contained in:
parent
e1d36dfcb0
commit
f65d93f9f8
1 changed files with 3 additions and 0 deletions
|
@ -13,6 +13,9 @@ stdenv.mkDerivation rec {
|
|||
|
||||
enableParallelBuilding = true;
|
||||
|
||||
# causes `dnscrypt-wrapper --gen-provider-keypair` to crash
|
||||
hardeningDisable = [ "fortify3" ];
|
||||
|
||||
nativeBuildInputs = [ pkg-config autoreconfHook ];
|
||||
buildInputs = [ libsodium libevent ];
|
||||
|
||||
|
|
Loading…
Reference in a new issue