ilmbase-2.3.0: patch CVE-2018-18443

This commit is contained in:
Christian Kauhaus 2019-10-27 18:07:00 +01:00 committed by Frederik Rietdijk
parent 76b16d05e6
commit 9802b19e59

View file

@ -1,4 +1,5 @@
{ stdenv, fetchurl, buildPackages, automake, autoconf, libtool, which }:
{ stdenv, fetchurl, buildPackages, automake, autoconf, libtool, which,
fetchpatch }:
stdenv.mkDerivation rec {
pname = "ilmbase";
@ -21,7 +22,17 @@ stdenv.mkDerivation rec {
NIX_CFLAGS_LINK = [ "-pthread" ];
patches = [ ./bootstrap.patch ./cross.patch ];
patches = [
./bootstrap.patch
./cross.patch
(fetchpatch {
name = "CVE-2018-18443.patch";
url = "https://github.com/kdt3rd/openexr/commit/5fa930b82cff2db386c64ca512af19e60c14d32a.patch";
sha256 = "1j6xd0qkx99acc1szycxaj0wwp01yac67jz48hwc4fwwpz8blx4s";
stripLen = 1;
excludes = [ "CHANGES.md" ];
})
];
# fails 1 out of 1 tests with
# "lt-ImathTest: testBoxAlgo.cpp:892: void {anonymous}::boxMatrixTransform(): Assertion `b21 == b2' failed"