anchor.diff:            $binary
         done
   
  -      # Rewrite pkexec|gksudo argument. Note that we can't delete bytes in binary.
  +      # Rewrite pkexec argument. Note that we cannot delete bytes in binary.
         sed -i -e 's,/bin/cp\x00,cp\x00\x00\x00\x00\x00\x00,g' ${primaryBinary}
   
         runHook postBuild
  
positive.code: 
      dontStrip = true;
      dontPatchELF = true;
      buildInputs = stdenv.lib.optionals (!usesGtk2) [ glib gtk3 ]; # for GSETTINGS_SCHEMAS_PATH
      nativeBuildInputs = [ makeWrapper ] ++ stdenv.lib.optional (!usesGtk2) wrapGAppsHook;
  
      buildPhase = ''
        runHook preBuild
  
negative.code: { buildVersion, sha256, dev ? false }:
  
  { fetchurl, stdenv, xorg, glib, glibcLocales, gtk3, cairo, pango, libredirect, makeWrapper, wrapGAppsHook
  , pkexecPath ? "/run/wrappers/bin/pkexec"
  , writeScript, common-updater-scripts, curl, gnugrep
  }:
  
  let
    pname = "sublime-merge";
  