pyrox.dev
libdbiDrivers: take upstream patch to prevent buffer overflow triggered by glibc 2.38 fortification
+5
pkgs/development/libraries/libdbi-drivers/default.nix
+5
pkgs/development/libraries/libdbi-drivers/default.nix
···
16
17
buildInputs = [ libdbi sqlite postgresql ] ++ lib.optional (libmysqlclient != null) libmysqlclient;
18
19
+
patches = [
20
+
# https://sourceforge.net/p/libdbi-drivers/libdbi-drivers/ci/24f48b86c8988ee3aaebc5f303d71e9d789f77b6
21
+
./libdbi-drivers-0.9.0-buffer_overflow.patch
22
+
];
23
+
24
postPatch = ''
25
sed -i '/SQLITE3_LIBS/ s/-lsqlite/-lsqlite3/' configure;
26
'';
+11
pkgs/development/libraries/libdbi-drivers/libdbi-drivers-0.9.0-buffer_overflow.patch
+11
pkgs/development/libraries/libdbi-drivers/libdbi-drivers-0.9.0-buffer_overflow.patch
···
···
1
+
--- a/drivers/sqlite3/dbd_sqlite3.c
2
+
+++ b/drivers/sqlite3/dbd_sqlite3.c
3
+
@@ -1451,7 +1451,7 @@ static int getTables(char** tables, int
4
+
break;
5
+
}
6
+
7
+
- word_lower[item-start+1];
8
+
+ char word_lower[item-start+1];
9
+
strncpy(word_lower,start,item-start);
10
+
word_lower[item-start] = '\0';
11
+
int i = 0;