Merge pull request #336199 from risicle/ris-wasmer-CVE-2024-38358-r24.05

[24.05] wasmer: add patch for CVE-2024-38358
NixOS · Aug 21, 2024 · e088f57 · e088f57
2 parents 71db815 + abf9037
commit e088f57
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/pkgs/development/interpreters/wasmer/default.nix b/pkgs/development/interpreters/wasmer/default.nix
@@ -5,6 +5,7 @@
 , llvmPackages
 , libffi
 , libxml2
+, fetchpatch
 , CoreFoundation
 , SystemConfiguration
 , Security
@@ -25,6 +26,14 @@ rustPlatform.buildRustPackage rec {
 
   cargoHash = "sha256-EpHM8YaT2Ty9IBX/gXEa9n8006A9Y5/fq/ueODxHlnc=";
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2024-38358.patch";
+      url = "https://github.com/wasmerio/wasmer/commit/ad4c9cd13de658114cb306262b717a6cb10b8263.patch";
+      hash = "sha256-2B/u5lvTxY8Ip6h4CDq31vhfIn5dqCmMMnSVA2XdTY8=";
+    })
+  ];
+
   nativeBuildInputs = [
     rustPlatform.bindgenHook
   ];