about summary refs log tree commit diff
path: root/pkgs/applications/editors/vim
diff options
context:
space:
mode:
authorRobin Gloster <mail@glob.in>2016-03-06 16:56:29 +0000
committerRobin Gloster <mail@glob.in>2016-03-06 16:57:34 +0000
commit2013614e1d74ad6b0f2d5ab76f3e2b77183806fe (patch)
treee27def41f9b87d74854b7ebaeeed4b80b97e6912 /pkgs/applications/editors/vim
parent1b4ec4b4959fbae154ea079f1ec8d15bcf6ff707 (diff)
downloadnixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar.gz
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar.bz2
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar.lz
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar.xz
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.tar.zst
nixlib-2013614e1d74ad6b0f2d5ab76f3e2b77183806fe.zip
vim-configurable: Disable hardening flag fortify
Fortify hardening detects a probable buffer overflow in vim at runtime. This
has to be fixed upstream.

Debian also disables fortify:

  https://anonscm.debian.org/cgit/pkg-vim/vim.git/tree/debian/rules#n6
Diffstat (limited to 'pkgs/applications/editors/vim')
-rw-r--r--pkgs/applications/editors/vim/configurable.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/applications/editors/vim/configurable.nix b/pkgs/applications/editors/vim/configurable.nix
index 2a80f5d42ad7..d041295ee9fb 100644
--- a/pkgs/applications/editors/vim/configurable.nix
+++ b/pkgs/applications/editors/vim/configurable.nix
@@ -191,6 +191,8 @@ composableDerivation {
 
   dontStrip = 1;
 
+  hardeningDisable = [ "fortify" ];
+
   meta = with stdenv.lib; {
     description = "The most popular clone of the VI editor";
     homepage    = http://www.vim.org;