tools/patch: apply upstream patch for cve-2019-13638