nixpkgs/pkgs/development/libraries/zziplib/default.nix
Marek Mahut 3aa8f9448c
zziplib: patch CVE-2018-17828
Fixes https://github.com/NixOS/nixpkgs/issues/61961
Close https://github.com/NixOS/nixpkgs/pull/63189
vcunat amended some nitpicks into the original commit.
2019-06-16 12:17:30 +02:00

50 lines
1.6 KiB
Nix

{ docbook_xml_dtd_412, fetchurl, stdenv, perl, python2, zip, xmlto, zlib, fetchpatch }:
stdenv.mkDerivation rec {
name = "zziplib-${version}";
version = "0.13.69";
src = fetchurl {
url = "https://github.com/gdraheim/zziplib/archive/v${version}.tar.gz";
sha256 = "0i052a7shww0fzsxrdp3rd7g4mbzx7324a8ysbc0br7frpblcql4";
};
patches = [
(fetchpatch {
name = "CVE-2018-17828.patch";
url = "https://github.com/gdraheim/zziplib/commit/f609ae8971f3c0ce6.diff";
sha256 = "0jhiz4fgr93wzh6q03avn95b2nsf6402jaki6hxirxyhs5v9ahry";
})
];
postPatch = ''
sed -i -e s,--export-dynamic,, configure
'';
buildInputs = [ docbook_xml_dtd_412 perl python2 zip xmlto zlib ];
# tests are broken (https://github.com/gdraheim/zziplib/issues/20),
# and test/zziptests.py requires network access
# (https://github.com/gdraheim/zziplib/issues/24)
doCheck = false;
meta = with stdenv.lib; {
description = "Library to extract data from files archived in a zip file";
longDescription = ''
The zziplib library is intentionally lightweight, it offers the ability
to easily extract data from files archived in a single zip
file. Applications can bundle files into a single zip archive and
access them. The implementation is based only on the (free) subset of
compression with the zlib algorithm which is actually used by the
zip/unzip tools.
'';
license = with licenses; [ lgpl2Plus mpl11 ];
homepage = http://zziplib.sourceforge.net/;
maintainers = [ ];
platforms = python2.meta.platforms;
};
}