summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAnderson Torres <torres.anderson.85@protonmail.com>2022-09-22 08:38:06 -0300
committerGitHub <noreply@github.com>2022-09-22 08:38:06 -0300
commita5e514e6b7618aaca3cd789ba73944979ad23c8a (patch)
treead849b972013b984be376b69afa5c1f06728efeb
parentMerge pull request #192406 from NixOS/backport-191670-to-release-22.05 (diff)
parentrizin: add patches for multiple CVEs (diff)
downloadnixpkgs-a5e514e6b7618aaca3cd789ba73944979ad23c8a.tar.gz
Merge pull request #191689 from risicle/ris-rizin-CVEs-22.05
[22.05] rizin: add patches for multiple CVEs
-rw-r--r--pkgs/development/tools/analysis/rizin/default.nix34
1 files changed, 34 insertions, 0 deletions
diff --git a/pkgs/development/tools/analysis/rizin/default.nix b/pkgs/development/tools/analysis/rizin/default.nix
index 9b15cdd148d8..645086f75049 100644
--- a/pkgs/development/tools/analysis/rizin/default.nix
+++ b/pkgs/development/tools/analysis/rizin/default.nix
@@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchurl
+, fetchpatch
, pkg-config
, libusb-compat-0_1
, readline
@@ -30,6 +31,39 @@ stdenv.mkDerivation rec {
sha256 = "sha256-7qSbOWOHwJ0ZcFqrAqYXzbFWgvymfxAf8rJ+75SnEOk=";
};
+ patches = [
+ (fetchpatch {
+ name = "CVE-2022-36039.patch";
+ url = "https://github.com/rizinorg/rizin/commit/52361f4f55107968820b1f3561c2ea7c451aed9d.patch";
+ sha256 = "sha256-rox4vKfRcS3YKPP55VxmEiZ8KezLV53SK1QHE4Bc8g0=";
+ })
+ (fetchpatch {
+ name = "CVE-2022-36040.patch";
+ url = "https://github.com/rizinorg/rizin/commit/bfb5f751e6fc720b61829aab84eb3749cd8f696a.patch";
+ sha256 = "sha256-xzMTSsHumN8FaIsWmBBIayCafvQXUJ0jPVQvOCodyRE=";
+ })
+ (fetchpatch {
+ name = "CVE-2022-36041.patch";
+ url = "https://github.com/rizinorg/rizin/commit/eeaf7c6a6fc64516fee82a4f0b8fbc1141e03d50.patch";
+ sha256 = "sha256-MA2XmOuK91w1U6eWiHx8qhYB+13zdohMe8YmkdXN27g=";
+ })
+ (fetchpatch {
+ name = "CVE-2022-36043.patch";
+ url = "https://github.com/rizinorg/rizin/commit/9819f69ecfa02d5f0c3886df46c85df09a51db80.patch";
+ sha256 = "sha256-u3CU5amtd5DRK7sg8Thp7wdg5SrcCFisdxRYFLdb7Zw=";
+ })
+ (fetchpatch {
+ name = "CVE-2022-36044.part-1.patch";
+ url = "https://github.com/rizinorg/rizin/commit/0f8e58bce910d7bcf4474f25277295c397e2fa7b.patch";
+ sha256 = "sha256-o11UwH34Ew6EnksY5YLoFcZDeW8iYkznLpUW92tcX40=";
+ })
+ (fetchpatch {
+ name = "CVE-2022-36044.part-2.patch";
+ url = "https://github.com/rizinorg/rizin/commit/b9443604d5555cd02b1ca43c6fc0ec4896a73982.patch";
+ sha256 = "sha256-mkPEmw6oGv1Tuo1mXT44gEuDHQ59anQuYzFkm7z/o7w=";
+ })
+ ];
+
mesonFlags = [
"-Duse_sys_capstone=enabled"
"-Duse_sys_magic=enabled"