456c76169d
Fixes: * CVE-2017-9224 * CVE-2017-9226 * CVE-2017-9227 * CVE-2017-9228 * CVE-2017-9229 See: * https://secure.php.net/ChangeLog-7.php#7.1.6 * https://secure.php.net/ChangeLog-7.php#7.1.7
341 lines
9.6 KiB
Nix
341 lines
9.6 KiB
Nix
{ lib, stdenv, fetchurl, composableDerivation, autoconf, automake, flex, bison
|
|
, mysql, libxml2, readline, zlib, curl, postgresql, gettext
|
|
, openssl, pkgconfig, sqlite, config, libjpeg, libpng, freetype
|
|
, libxslt, libmcrypt, bzip2, icu, openldap, cyrus_sasl, libmhash, freetds
|
|
, uwimap, pam, gmp, apacheHttpd, libiconv, systemd }:
|
|
|
|
let
|
|
|
|
generic =
|
|
{ version, sha256 }:
|
|
|
|
let php7 = lib.versionAtLeast version "7.0";
|
|
mysqlHeaders = mysql.lib.dev or mysql;
|
|
|
|
in composableDerivation.composableDerivation {} (fixed: {
|
|
|
|
inherit version;
|
|
|
|
name = "php-${version}";
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
buildInputs = [ flex bison pkgconfig ]
|
|
++ lib.optional stdenv.isLinux systemd;
|
|
|
|
flags = {
|
|
|
|
# much left to do here...
|
|
|
|
# SAPI modules:
|
|
|
|
apxs2 = {
|
|
configureFlags = ["--with-apxs2=${apacheHttpd.dev}/bin/apxs"];
|
|
buildInputs = [apacheHttpd];
|
|
};
|
|
|
|
embed = {
|
|
configureFlags = ["--enable-embed"];
|
|
};
|
|
|
|
# Extensions
|
|
imap = {
|
|
configureFlags = [
|
|
"--with-imap=${uwimap}"
|
|
"--with-imap-ssl"
|
|
];
|
|
buildInputs = [ uwimap openssl pam ];
|
|
};
|
|
|
|
ldap = {
|
|
configureFlags = [
|
|
"--with-ldap"
|
|
"LDAP_DIR=${openldap.dev}"
|
|
"LDAP_INCDIR=${openldap.dev}/include"
|
|
"LDAP_LIBDIR=${openldap.out}/lib"
|
|
(lib.optional stdenv.isLinux "--with-ldap-sasl=${cyrus_sasl.dev}")
|
|
];
|
|
buildInputs = [openldap openssl] ++ lib.optional stdenv.isLinux cyrus_sasl;
|
|
};
|
|
|
|
mhash = {
|
|
configureFlags = ["--with-mhash"];
|
|
buildInputs = [libmhash];
|
|
};
|
|
|
|
curl = {
|
|
configureFlags = ["--with-curl=${curl.dev}"];
|
|
buildInputs = [curl openssl];
|
|
};
|
|
|
|
curlWrappers = {
|
|
configureFlags = ["--with-curlwrappers"];
|
|
};
|
|
|
|
zlib = {
|
|
configureFlags = ["--with-zlib=${zlib.dev}"];
|
|
buildInputs = [zlib];
|
|
};
|
|
|
|
libxml2 = {
|
|
configureFlags = [
|
|
"--with-libxml-dir=${libxml2.dev}"
|
|
];
|
|
buildInputs = [ libxml2 ];
|
|
};
|
|
|
|
pcntl = {
|
|
configureFlags = [ "--enable-pcntl" ];
|
|
};
|
|
|
|
readline = {
|
|
configureFlags = ["--with-readline=${readline.dev}"];
|
|
buildInputs = [ readline ];
|
|
};
|
|
|
|
sqlite = {
|
|
configureFlags = ["--with-pdo-sqlite=${sqlite.dev}"];
|
|
buildInputs = [ sqlite ];
|
|
};
|
|
|
|
postgresql = {
|
|
configureFlags = ["--with-pgsql=${postgresql}"];
|
|
buildInputs = [ postgresql ];
|
|
};
|
|
|
|
pdo_pgsql = {
|
|
configureFlags = ["--with-pdo-pgsql=${postgresql}"];
|
|
buildInputs = [ postgresql ];
|
|
};
|
|
|
|
mysql = {
|
|
configureFlags = ["--with-mysql"];
|
|
buildInputs = [ mysqlHeaders ];
|
|
};
|
|
|
|
mysqli = {
|
|
configureFlags = ["--with-mysqli=${mysqlHeaders}/bin/mysql_config"];
|
|
buildInputs = [ mysqlHeaders ];
|
|
};
|
|
|
|
mysqli_embedded = {
|
|
configureFlags = ["--enable-embedded-mysqli"];
|
|
depends = "mysqli";
|
|
assertion = fixed.mysqliSupport;
|
|
};
|
|
|
|
pdo_mysql = {
|
|
configureFlags = ["--with-pdo-mysql=${mysqlHeaders}"];
|
|
buildInputs = [ mysqlHeaders ];
|
|
};
|
|
|
|
bcmath = {
|
|
configureFlags = ["--enable-bcmath"];
|
|
};
|
|
|
|
gd = {
|
|
# FIXME: Our own gd package doesn't work, see https://bugs.php.net/bug.php?id=60108.
|
|
configureFlags = [
|
|
"--with-gd"
|
|
"--with-freetype-dir=${freetype.dev}"
|
|
"--with-png-dir=${libpng.dev}"
|
|
"--with-jpeg-dir=${libjpeg.dev}"
|
|
];
|
|
buildInputs = [ libpng libjpeg freetype ];
|
|
};
|
|
|
|
gmp = {
|
|
configureFlags = ["--with-gmp=${gmp.dev}"];
|
|
buildInputs = [ gmp ];
|
|
};
|
|
|
|
soap = {
|
|
configureFlags = ["--enable-soap"];
|
|
};
|
|
|
|
sockets = {
|
|
configureFlags = ["--enable-sockets"];
|
|
};
|
|
|
|
openssl = {
|
|
configureFlags = ["--with-openssl"];
|
|
buildInputs = [openssl openssl.dev];
|
|
};
|
|
|
|
mbstring = {
|
|
configureFlags = ["--enable-mbstring"];
|
|
};
|
|
|
|
gettext = {
|
|
configureFlags = ["--with-gettext=${gettext}"];
|
|
buildInputs = [gettext];
|
|
};
|
|
|
|
intl = {
|
|
configureFlags = ["--enable-intl"];
|
|
buildInputs = [icu];
|
|
};
|
|
|
|
exif = {
|
|
configureFlags = ["--enable-exif"];
|
|
};
|
|
|
|
xsl = {
|
|
configureFlags = ["--with-xsl=${libxslt.dev}"];
|
|
buildInputs = [libxslt];
|
|
};
|
|
|
|
mcrypt = let libmcrypt' = libmcrypt.override { disablePosixThreads = true; }; in {
|
|
configureFlags = ["--with-mcrypt=${libmcrypt'}"];
|
|
buildInputs = [libmcrypt'];
|
|
};
|
|
|
|
bz2 = {
|
|
configureFlags = ["--with-bz2=${bzip2.dev}"];
|
|
buildInputs = [bzip2];
|
|
};
|
|
|
|
zip = {
|
|
configureFlags = ["--enable-zip"];
|
|
};
|
|
|
|
ftp = {
|
|
configureFlags = ["--enable-ftp"];
|
|
};
|
|
|
|
fpm = {
|
|
configureFlags = ["--enable-fpm"];
|
|
};
|
|
|
|
mssql = stdenv.lib.optionalAttrs (!stdenv.isDarwin) {
|
|
configureFlags = ["--with-mssql=${freetds}"];
|
|
buildInputs = [freetds];
|
|
};
|
|
|
|
zts = {
|
|
configureFlags = ["--enable-maintainer-zts"];
|
|
};
|
|
|
|
calendar = {
|
|
configureFlags = ["--enable-calendar"];
|
|
};
|
|
};
|
|
|
|
cfg = {
|
|
imapSupport = config.php.imap or (!stdenv.isDarwin);
|
|
ldapSupport = config.php.ldap or true;
|
|
mhashSupport = config.php.mhash or true;
|
|
mysqlSupport = (!php7) && (config.php.mysql or true);
|
|
mysqliSupport = config.php.mysqli or true;
|
|
pdo_mysqlSupport = config.php.pdo_mysql or true;
|
|
libxml2Support = config.php.libxml2 or true;
|
|
apxs2Support = config.php.apxs2 or (!stdenv.isDarwin);
|
|
embedSupport = config.php.embed or false;
|
|
bcmathSupport = config.php.bcmath or true;
|
|
socketsSupport = config.php.sockets or true;
|
|
curlSupport = config.php.curl or true;
|
|
curlWrappersSupport = (!php7) && (config.php.curlWrappers or true);
|
|
gettextSupport = config.php.gettext or true;
|
|
pcntlSupport = config.php.pcntl or true;
|
|
postgresqlSupport = config.php.postgresql or true;
|
|
pdo_pgsqlSupport = config.php.pdo_pgsql or true;
|
|
readlineSupport = config.php.readline or true;
|
|
sqliteSupport = config.php.sqlite or true;
|
|
soapSupport = config.php.soap or true;
|
|
zlibSupport = config.php.zlib or true;
|
|
opensslSupport = config.php.openssl or true;
|
|
mbstringSupport = config.php.mbstring or true;
|
|
gdSupport = config.php.gd or true;
|
|
intlSupport = config.php.intl or true;
|
|
exifSupport = config.php.exif or true;
|
|
xslSupport = config.php.xsl or false;
|
|
mcryptSupport = config.php.mcrypt or true;
|
|
bz2Support = config.php.bz2 or false;
|
|
zipSupport = config.php.zip or true;
|
|
ftpSupport = config.php.ftp or true;
|
|
fpmSupport = config.php.fpm or true;
|
|
gmpSupport = config.php.gmp or true;
|
|
mssqlSupport = (!php7) && (config.php.mssql or (!stdenv.isDarwin));
|
|
ztsSupport = config.php.zts or false;
|
|
calendarSupport = config.php.calendar or true;
|
|
};
|
|
|
|
hardeningDisable = [ "bindnow" ];
|
|
|
|
preConfigure = ''
|
|
# Don't record the configure flags since this causes unnecessary
|
|
# runtime dependencies
|
|
for i in main/build-defs.h.in scripts/php-config.in; do
|
|
substituteInPlace $i \
|
|
--replace '@CONFIGURE_COMMAND@' '(omitted)' \
|
|
--replace '@CONFIGURE_OPTIONS@' "" \
|
|
--replace '@PHP_LDFLAGS@' ""
|
|
done
|
|
|
|
#[[ -z "$libxml2" ]] || addToSearchPath PATH $libxml2/bin
|
|
|
|
export EXTENSION_DIR=$out/lib/php/extensions
|
|
|
|
configureFlags+=(--with-config-file-path=$out/etc \
|
|
--includedir=$dev/include)
|
|
'';
|
|
|
|
configureFlags = [
|
|
"--with-config-file-scan-dir=/etc/php.d"
|
|
] ++ lib.optional stdenv.isDarwin "--with-iconv=${libiconv}"
|
|
++ lib.optional stdenv.isLinux "--with-fpm-systemd";
|
|
|
|
postInstall = ''
|
|
cp php.ini-production $out/etc/php.ini
|
|
'';
|
|
|
|
postFixup = ''
|
|
mkdir -p $dev/bin $dev/share/man/man1
|
|
mv $out/bin/phpize $out/bin/php-config $dev/bin/
|
|
mv $out/share/man/man1/phpize.1.gz \
|
|
$out/share/man/man1/php-config.1.gz \
|
|
$dev/share/man/man1/
|
|
'';
|
|
|
|
src = fetchurl {
|
|
url = "http://www.php.net/distributions/php-${version}.tar.bz2";
|
|
inherit sha256;
|
|
};
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "An HTML-embedded scripting language";
|
|
homepage = http://www.php.net/;
|
|
license = licenses.php301;
|
|
maintainers = with maintainers; [ globin ];
|
|
platforms = platforms.all;
|
|
outputsToInstall = [ "out" "dev" ];
|
|
};
|
|
|
|
patches = if !php7 then [ ./fix-paths.patch ] else [ ./fix-paths-php7.patch ];
|
|
|
|
postPatch = lib.optional stdenv.isDarwin ''
|
|
substituteInPlace configure --replace "-lstdc++" "-lc++"
|
|
'';
|
|
|
|
stripDebugList = "bin sbin lib modules";
|
|
|
|
outputs = [ "out" "dev" ];
|
|
|
|
});
|
|
|
|
in {
|
|
php56 = generic {
|
|
version = "5.6.31";
|
|
sha256 = "03xixkvfp64bqp97p8vlj3hp63bpjw7hc16b7fgm7w35rdlp2fcg";
|
|
};
|
|
|
|
php70 = generic {
|
|
version = "7.0.21";
|
|
sha256 = "07r3qqyyvf16k4xk5b2070fwilggmph5937drjm8cvyyjb1k789b";
|
|
};
|
|
|
|
php71 = generic {
|
|
version = "7.1.7";
|
|
sha256 = "1y0z5n0kyd15wzmn1lprjgaysbg0z428q9cjbx4dqf3zk296g6q7";
|
|
};
|
|
}
|