lua5_2: add patch for CVE-2022-28805

Derived from https://github.com/lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa

Changed files
+13 -1
pkgs
development
interpreters
+10
pkgs/development/interpreters/lua-5/CVE-2022-28805.patch
···
+
--- a/src/lparser.c
+
+++ b/src/lparser.c
+
@@ -301,6 +301,7 @@
+
expdesc key;
+
singlevaraux(fs, ls->envn, var, 1); /* get environment variable */
+
lua_assert(var->k == VLOCAL || var->k == VUPVAL);
+
+ luaK_exp2anyregup(fs, var); /* but could be a constant */
+
codestring(ls, &key, varname); /* key is variable name */
+
luaK_indexed(fs, var, &key); /* env[varname] */
+
}
+3 -1
pkgs/development/interpreters/lua-5/default.nix
···
sourceVersion = { major = "5"; minor = "2"; patch = "4"; };
hash = "0jwznq0l8qg9wh5grwg07b5cy3lzngvl5m2nl1ikp6vqssmf9qmr";
makeWrapper = makeBinaryWrapper;
-
patches = lib.optional stdenv.isDarwin ./5.2.darwin.patch;
+
patches = [
+
./CVE-2022-28805.patch
+
] ++ lib.optional stdenv.isDarwin ./5.2.darwin.patch;
};
lua5_2_compat = lua5_2.override({