anchor.diff:  
   stdenv.mkDerivation rec {
     pname = "busybox";
  +  # TODO: When bumping to next version, remove the patch
  +  # for CVE-2021-28831 (assuming the patch was included in
  +  # the next upstream release)
     version = "1.32.1";
   
     # Note to whoever is updating busybox: please verify that:
  
positive.code: { stdenv, lib, buildPackages, fetchurl, fetchFromGitLab
  , enableStatic ? stdenv.hostPlatform.isStatic
  , enableMinimal ? false
  # Allow forcing musl without switching stdenv itself, e.g. for our bootstrapping:
  
negative.code: 
    patches = [
      ./busybox-in-store.patch
      (fetchpatch {
        name = "CVE-2021-28831.patch";
        url = "https://git.busybox.net/busybox/patch/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd";
        sha256 = "0y79flfbk45krwn963nnbqc21a88bsz4k4asqwvcnfk2lkciadxm";
      }) # TODO: Removing when bumping the version
    ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch;
  
    postPatch = "patchShebangs .";
  