lapack: add patch for CVE-2021-4048 (#150788)

This commit is contained in:
Robert Scott 2021-12-25 21:56:35 +00:00 committed by GitHub
parent 8a4345ee0d
commit 1030e3e048
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, gfortran
, cmake
, shared ? true
@ -17,6 +18,14 @@ stdenv.mkDerivation rec {
sha256 = "sha256-ewYUM+M7jDO5LLnB4joiKkqgXjEDmWbFZbgad8x98gc=";
};
patches = [
(fetchpatch {
name = "CVE-2021-4048.patch";
url = "https://github.com/Reference-LAPACK/lapack/commit/0631b6beaed60ba118b0b027c0f8d35397bf5df0.patch";
sha256 = "1bqjw3f6ak9iz97y7ckn0rrfcgrzbn9prgfasl489qpxgzp2kjh8";
})
];
nativeBuildInputs = [ gfortran cmake ];
# Configure stage fails on aarch64-darwin otherwise, due to either clang 11 or gfortran 10.