about summary refs log tree commit diff
path: root/pkgs/os-specific
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2017-06-21 21:26:59 +0200
committerFranz Pletz <fpletz@fnordicwalking.de>2017-06-22 00:44:28 +0200
commitaab71b31d5030bea94804d3677a3ffbc60e1876a (patch)
treeca444627c186d8b6f437ef0bfab01a2ca34eb006 /pkgs/os-specific
parent16aa92305bf8141c71cd44bc9af688e246df84df (diff)
downloadnixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar.gz
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar.bz2
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar.lz
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar.xz
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.tar.zst
nixlib-aab71b31d5030bea94804d3677a3ffbc60e1876a.zip
linux: patch CVE-2017-1000364 (stack clash)
Diffstat (limited to 'pkgs/os-specific')
-rw-r--r--pkgs/os-specific/linux/kernel/patches.nix19
1 files changed, 19 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/patches.nix b/pkgs/os-specific/linux/kernel/patches.nix
index 1747d34fe112..3e658e55dace 100644
--- a/pkgs/os-specific/linux/kernel/patches.nix
+++ b/pkgs/os-specific/linux/kernel/patches.nix
@@ -156,4 +156,23 @@ rec {
         sha256 = "10dmv3d3gj8rvj9h40js4jh8xbr5wyaqiy0kd819mya441mj8ll2";
       };
     };
+
+  # CVE-2017-1000364 (stack clash)
+  mm_larger_stack_guard_gap_4_9 = rec
+    { name = "mm-larger-stack-guard-gap-between-vmas.patch";
+      patch = fetchpatch {
+        inherit name;
+        url = "https://anonscm.debian.org/cgit/kernel/linux.git/plain/debian/patches/bugfix/all/mm-enlarge-stack-guard-gap.patch?h=debian/4.9.30-2%2bdeb9u1_bpo8%2b1";
+        sha256 = "0bl7w1zgcy691avp54p6mvzdam6snrb7pz3hywsf2g2mcxjkyja5";
+      };
+    };
+
+  mm_larger_stack_guard_gap_4_11 = rec
+    { name = "mm-larger-stack-guard-gap-between-vmas.patch";
+      patch = fetchpatch {
+        inherit name;
+        url = "https://anonscm.debian.org/cgit/kernel/linux.git/plain/debian/patches/bugfix/all/mm-larger-stack-guard-gap-between-vmas.patch?h=debian/4.11.6-1";
+        sha256 = "19bakn3119v5jkhh4w7x3d50py9an1w8h7v3mmy7y2l2agj4mn3i";
+      };
+    };
 }