c03bc57212
Fixes the following vulnerabilities: * CVE-2016-10128 * CVE-2016-10129 * CVE-2016-10130 * CVE-2017-5338 * CVE-2017-5339
37 lines
1.2 KiB
Nix
37 lines
1.2 KiB
Nix
{ stdenv, fetchurl, pkgconfig, cmake, zlib, python, libssh2, openssl, curl, http-parser, libiconv }:
|
|
|
|
stdenv.mkDerivation (rec {
|
|
version = "0.24.6";
|
|
name = "libgit2-${version}";
|
|
|
|
src = fetchurl {
|
|
name = "${name}.tar.gz";
|
|
url = "https://github.com/libgit2/libgit2/tarball/v${version}";
|
|
sha256 = "070jrv690bd5dq991lc32qfnai9ywvrjzsfgi3rcw6kw4l2ynxjr";
|
|
};
|
|
|
|
# TODO: `cargo` (rust's package manager) surfaced a serious bug in
|
|
# libgit2 when the `Security.framework` transport is used on Darwin.
|
|
# The upstream issue is tracked at
|
|
# https://github.com/libgit2/libgit2/issues/3885 - feel free to
|
|
# remove this patch as soon as it's resolved (i.E. when cargo is
|
|
# working fine without this patch)
|
|
patches = stdenv.lib.optionals stdenv.isDarwin [
|
|
./disable-security.framework.patch
|
|
];
|
|
|
|
cmakeFlags = "-DTHREADSAFE=ON";
|
|
|
|
nativeBuildInputs = [ cmake python pkgconfig ];
|
|
buildInputs = [ zlib libssh2 openssl http-parser curl ];
|
|
|
|
meta = {
|
|
description = "The Git linkable library";
|
|
homepage = http://libgit2.github.com/;
|
|
license = stdenv.lib.licenses.gpl2;
|
|
platforms = with stdenv.lib.platforms; all;
|
|
};
|
|
} // stdenv.lib.optionalAttrs (!stdenv.isLinux) {
|
|
NIX_LDFLAGS = "-liconv";
|
|
propagatedBuildInputs = [ libiconv ];
|
|
})
|