01/01: gnu: libvpx: Set size limit to avoid CVE-2015-1258.

[Mark H. Weaver]

mhw pushed a commit to branch master
in repository guix.

commit 2ab5e39d22dd9698c33a7a6ed8d5266f596f68e0
Author: Mark H Weaver <address@hidden>
Date:   Wed Oct 7 22:37:17 2015 -0400

    gnu: libvpx: Set size limit to avoid CVE-2015-1258.
    
    * gnu/packages/video.scm (libvpx)[arguments]: Add "--size-limit"
      argument to configure.
---
 gnu/packages/video.scm |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm
index 5ec225e..45c1099 100644
--- a/gnu/packages/video.scm
+++ b/gnu/packages/video.scm
@@ -777,6 +777,8 @@ projects while introducing many more.")
                      (zero? (system* "./configure"
                                      "--enable-shared"
                                      "--as=yasm"
+                                     ;; Limit size to avoid CVE-2015-1258
+                                     "--size-limit=16384x16384"
                                      (string-append "--prefix=" out)))))
                  %standard-phases)
        #:tests? #f)) ; no check target