From fa3aec7e4dc1292fa0fee0319b7efec04c68fde6 Mon Sep 17 00:00:00 2001
From: adisbladis <adis@blad.is>
Date: Sun, 14 Jan 2018 02:07:08 +0800
Subject: [PATCH] gst-plugins-bad: Fix CVE-2016-9447

---
 .../libraries/gstreamer/legacy/gst-plugins-bad/default.nix  | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/development/libraries/gstreamer/legacy/gst-plugins-bad/default.nix b/pkgs/development/libraries/gstreamer/legacy/gst-plugins-bad/default.nix
index bdb1b6c7bb7a..77465645d237 100644
--- a/pkgs/development/libraries/gstreamer/legacy/gst-plugins-bad/default.nix
+++ b/pkgs/development/libraries/gstreamer/legacy/gst-plugins-bad/default.nix
@@ -12,6 +12,12 @@ stdenv.mkDerivation rec {
     sha256 = "148lw51dm6pgw8vc6v0fpvm7p233wr11nspdzmvq7bjp2cd7vbhf";
   };
 
+  postInstall = ''
+    # Fixes CVE-2016-9447
+    # Does not actually impact NSF playback
+    rm -v $out/lib/gstreamer-0.10/libgstnsf.so
+  '';
+
   buildInputs =
     [ pkgconfig glib gstreamer gst-plugins-base libdvdnav libdvdread orc ];