Merge #165339: pjsip: add patch for CVE-2022-24764

This commit is contained in:
Vladimír Čunát 2022-04-18 08:29:19 +02:00
commit e766d457c6
No known key found for this signature in database
GPG key ID: E747DF1F9575A3AA

View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchFromGitHub, openssl, libsamplerate, alsa-lib, AppKit }:
{ lib, stdenv, fetchFromGitHub, openssl, libsamplerate, alsa-lib, AppKit, fetchpatch }:
stdenv.mkDerivation rec {
pname = "pjsip";
@ -13,6 +13,11 @@ stdenv.mkDerivation rec {
patches = [
./fix-aarch64.patch
(fetchpatch {
name = "CVE-2022-24764.patch";
url = "https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00.patch";
sha256 = "1fy78v3clm0gby7qcq3ny6f7d7f4qnn01lkqq67bf2s85k2phisg";
})
];
buildInputs = [ openssl libsamplerate ]