pyrox.dev
1{ stdenv, fetchurl, fetchpatch, libX11, libXaw }:
2
3let
4 getPatch = { name, sha256 }: fetchpatch {
5 inherit name sha256;
6 url = "https://projects.archlinux.org/svntogit/packages.git/plain/trunk/${name}"
7 + "?h=packages/t1lib&id=643a4c2c58e70072b5bc1e9e4624162517b58357";
8 };
9
10 patches = map getPatch [
11 { name = "lib-cleanup.diff"; sha256 = "1w3q1y4zk0y4mf2s2x9z4cd8d4af8i868c8837p40mz3dqrai4zp"; }
12 { name = "format-security.diff"; sha256 = "0cca94bif9dsc6iwpcnk1504gb3sl3nsqhni85c21q9aywyz26l3"; }
13 { name = "CVE-2011-0764.diff"; sha256 = "1j0y3f38im7srpqjg9jvx8as6sxkz8gw7hglcxnxl9qylx8mr2jh"; }
14 { name = "CVE-2011-1552_1553_1554.patch"; sha256 = "16cyq6jhyhh8912j8hapx9pq4rzxk36ljlkxlnyi7i3wr8iz1dir"; }
15 { name = "CVE-2010-2642.patch"; sha256 = "175zvyr9v1xs22k2svgxqjcpz5nihfa7j46hn9nzvkqcrhm5m9y8"; }
16 # this ^ also fixes CVE-2011-5244
17 ];
18in
19stdenv.mkDerivation {
20 name = "t1lib-5.1.2";
21
22 src = fetchurl {
23 url = "mirror://metalab/libs/graphics/t1lib-5.1.2.tar.gz";
24 sha256 = "0nbvjpnmcznib1nlgg8xckrmsw3haa154byds2h90y2g0nsjh4w2";
25 };
26 inherit patches;
27
28 buildInputs = [ libX11 libXaw ];
29 buildFlags = "without_doc";
30
31 postInstall = stdenv.lib.optional (!stdenv.isDarwin) "chmod +x $out/lib/*.so.*"; # ??
32
33 meta = {
34 platforms = stdenv.lib.platforms.unix;
35 };
36}