pyrox.dev
libtiff: `fetchpatch` -> `fetchurl`
See #20206. vcunat doesn't consider this important,
but it is perhaps nicer and now is a moment we can afford to rehash.
authored by Jan Malakhovski and committed by Vladimír Čunát 83f28fdd b4c296ee
+14
-16
pkgs/development/libraries/libtiff/default.nix
+14
-16
pkgs/development/libraries/libtiff/default.nix
···
21
21
enableParallelBuilding = true;
22
22
23
23
patches = let p = "https://sources.debian.net/data/main/t/tiff/${version}-${debversion}/debian/patches"; in [
24
-
(fetchpatch {
24
+
(fetchurl {
25
25
url = "${p}/01-CVE-2015-8665_and_CVE-2015-8683.patch";
26
-
sha256 = "1c4zmvxj124873al8fvkiv8zq7wx5mv2vd4f1y9w8liv92cm7hkc";
26
+
sha256 = "0qiiqpbbsf01b59x01z38cg14pmg1ggcsqm9n1gsld6rr5wm3ryz";
27
27
})
28
-
(fetchpatch {
28
+
(fetchurl {
29
29
url = "${p}/02-fix_potential_out-of-bound_writes_in_decode_functions.patch";
30
-
sha256 = "0rsc7zh7cdhgcmx2vbjfaqrb0g93a3924ngqkrzb14w5j2fqfbxv";
30
+
sha256 = "1ph057w302i2s94rhdw6ksyvpsmg1nlanvc0251x01s23gkdbakv";
31
31
})
32
-
(fetchpatch {
32
+
(fetchurl {
33
33
url = "${p}/03-fix_potential_out-of-bound_write_in_NeXTDecode.patch";
34
-
sha256 = "1s01xhp4sl04yhqhqwp50gh43ykcqk230mmbv62vhy2jh7v0ky3a";
34
+
sha256 = "1nhjg2gdvyzi4wa2g7nwmzm7nssz9dpdfkwms1rp8i1034qdlgc6";
35
35
})
36
-
(fetchpatch {
36
+
(fetchurl {
37
37
url = "${p}/04-CVE-2016-5314_CVE-2016-5316_CVE-2016-5320_CVE-2016-5875.patch";
38
-
sha256 = "0by35qxpzv9ib3mnh980gd30jf3qmsfp2kl730rq4pq66wpzg9m8";
38
+
sha256 = "0n47yk9wcvc9j72yvm5bhpaqq0yfz8jnq9zxbnzx5id9gdxmrkn3";
39
39
})
40
-
(fetchpatch {
40
+
(fetchurl {
41
41
url = "${p}/05-CVE-2016-6223.patch";
42
-
sha256 = "0rh8ia0wsf5yskzwdjrlbiilc9m0lq0igs42k6922pl3sa1lxzv1";
42
+
sha256 = "0r80hil9k6scdjppgyljhm0s2z6c8cm259f0ic0xvxidfaim6g2r";
43
43
})
44
-
(fetchpatch {
44
+
(fetchurl {
45
45
url = "${p}/06-CVE-2016-5321.patch";
46
-
sha256 = "0n0igfxbd3kqvvj2k2xgysrp63l4v2gd110fwkk4apfpm0hvzwh0";
46
+
sha256 = "1aacymlqv6cam8i4nbma9v05r3v3xjpagns7q0ii268h0mhzq6qg";
47
47
})
48
-
(fetchpatch {
48
+
(fetchurl {
49
49
url = "${p}/07-CVE-2016-5323.patch";
50
-
sha256 = "1j6w8g6qizkx5h4aq95kxzx6bgkn4jhc8l22swwhvlkichsh4910";
50
+
sha256 = "1xr5hy2fxa71j3fcc1l998pxyblv207ygzyhibwb1lia5zjgblch";
51
51
})
52
52
(fetchurl {
53
53
url = "${p}/08-CVE-2016-3623_CVE-2016-3624.patch";
···
61
61
url = "${p}/10-CVE-2016-3658.patch";
62
62
sha256 = "01kb8rfk30fgjf1hy0m088yhjfld1yyh4bk3gkg8jx3dl9bd076d";
63
63
})
64
-
65
-
66
64
];
67
65
68
66
doCheck = true;