Unverified Commit 125cefd4 authored by Thomas Gerbet's avatar Thomas Gerbet Committed by GitHub
Browse files

Merge pull request #280757 from risicle/ris-python-uamqp-CVE-2024-21646 

python3Packages.uamqp: add patch for CVE-2024-21646
parents 642317d0 812b2931

pkgs/development/python-modules/uamqp/default.nix

+8 −0
Original line number Diff line number Diff line
@@ -2,6 +2,7 @@ 
, stdenv

, buildPythonPackage

, fetchFromGitHub

, fetchpatch

, cython

, certifi

, CFNetwork
@@ -29,6 +30,13 @@ buildPythonPackage rec { 
  patches = lib.optionals (stdenv.isDarwin && stdenv.isx86_64) [

    ./darwin-azure-c-shared-utility-corefoundation.patch

  ] ++ [

    (fetchpatch {

      name = "CVE-2024-21646.patch";

      url = "https://github.com/Azure/azure-uamqp-c/commit/12ddb3a31a5a97f55b06fa5d74c59a1d84ad78fe.patch";

      stripLen = 1;

      extraPrefix = "src/vendor/azure-uamqp-c/";

      hash = "sha256-9o3TNKFeJvZRZeS6qo2Zl+JVFrrqAGYWDQbusz4Ou+g=";

    })

    # Fix incompatible function pointer conversion error with clang 16.

    ./clang-fix-incompatible-function-pointer-conversion.patch

  ];