anchor.diff:  
     patches = [
       ./busybox-in-store.patch
  -    (fetchpatch {
  -      name = "CVE-2021-28831.patch";
  -      url = "https://git.busybox.net/busybox/patch/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd";
  -      sha256 = "0y79flfbk45krwn963nnbqc21a88bsz4k4asqwvcnfk2lkciadxm";
  -    }) # TODO: Removing when bumping the version
     ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch;
   
     postPatch = "patchShebangs .";
  
positive.code: 
  stdenv.mkDerivation rec {
    pname = "busybox";
    # TODO: When bumping to next version, remove the patch
    # for CVE-2021-28831 (assuming the patch was included in
    # the next upstream release)
    version = "1.32.1";
  
    # Note to whoever is updating busybox: please verify that:
    # nix-build pkgs/stdenv/linux/make-bootstrap-tools.nix -A test
    # still builds after the update.
    src = fetchurl {
      url = "https://busybox.net/downloads/${pname}-${version}.tar.bz2";
      sha256 = "1vhd59qmrdyrr1q7rvxmyl96z192mxl089hi87yl0hcp6fyw8mwx";
    };
  
    hardeningDisable = [ "format" "pie" ]
  
negative.code:   meta = with lib; {
      description = "Tiny versions of common UNIX utilities in a single small executable";
      homepage = "https://busybox.net/";
      license = licenses.gpl2Only;
      maintainers = with maintainers; [ TethysSvensson ];
      platforms = platforms.linux;
      priority = 10;
  