diff options
| author | James Cook <james.cook@utoronto.ca> | 2015-03-02 23:39:54 -0800 |
|---|---|---|
| committer | James Cook <james.cook@utoronto.ca> | 2015-03-02 23:39:54 -0800 |
| commit | f7066d433c7d7f4c28383e420ff2d812797b916c (patch) | |
| tree | 11000261212a287314922844b2f862d76b23c589 /pkgs/applications/misc/procmail | |
| parent | d8a586427bf04e819b5dae4c49daa5da5f03fd6a (diff) | |
| download | nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar.gz nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar.bz2 nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar.lz nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar.xz nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.tar.zst nixlib-f7066d433c7d7f4c28383e420ff2d812797b916c.zip | |
procmail: Patch to fix CVE-2014-3618.
Diffstat (limited to 'pkgs/applications/misc/procmail')
| -rw-r--r-- | pkgs/applications/misc/procmail/CVE-2014-3618.patch | 18 | ||||
| -rw-r--r-- | pkgs/applications/misc/procmail/default.nix | 4 |
2 files changed, 21 insertions, 1 deletions
diff --git a/pkgs/applications/misc/procmail/CVE-2014-3618.patch b/pkgs/applications/misc/procmail/CVE-2014-3618.patch new file mode 100644 index 000000000000..e3aa5600e40e --- /dev/null +++ b/pkgs/applications/misc/procmail/CVE-2014-3618.patch @@ -0,0 +1,18 @@ +From http://seclists.org/oss-sec/2014/q3/495 (with whitespace corrected). + +--- a/src/formisc.c 2013-08-04 00:13:33.000000000 -0700 ++++ b/src/formisc.c 2014-09-03 11:42:25.986002396 -0700 +@@ -84,12 +84,11 @@ + case '"':*target++=delim='"';start++; + } + ;{ int i; +- do ++ while(*start) + if((i= *target++= *start++)==delim) /* corresponding delimiter? */ + break; + else if(i=='\\'&&*start) /* skip quoted character */ + *target++= *start++; +- while(*start); /* anything? */ + } + hitspc=2; + } diff --git a/pkgs/applications/misc/procmail/default.nix b/pkgs/applications/misc/procmail/default.nix index c786eec7e64d..f4980cb2c6b3 100644 --- a/pkgs/applications/misc/procmail/default.nix +++ b/pkgs/applications/misc/procmail/default.nix @@ -15,7 +15,9 @@ stdenv.mkDerivation { make DESTDIR=\$out install "; - phases = "unpackPhase installPhase"; + phases = "unpackPhase patchPhase installPhase"; + + patches = [ ./CVE-2014-3618.patch ]; src = fetchurl { url = ftp://ftp.fu-berlin.de/pub/unix/mail/procmail/procmail-3.22.tar.gz; |