pyrox.dev
1{ lib, stdenv, fetchurl, libmcrypt, libmhash }:
2
3stdenv.mkDerivation rec {
4 version = "2.6.8";
5 pname = "mcrypt";
6
7 src = fetchurl {
8 url = "mirror://sourceforge/mcrypt/MCrypt/${version}/${pname}-${version}.tar.gz";
9 sha256 = "5145aa844e54cca89ddab6fb7dd9e5952811d8d787c4f4bf27eb261e6c182098";
10 };
11
12 patches = [
13 ./format-string_CVE-2012-4426.patch
14 ./overflow_CVE-2012-4409.patch
15 ./segv.patch
16 ./sprintf_CVE-2012-4527.patch
17 ./malloc_to_stdlib.patch
18 ];
19
20 buildInputs = [ libmcrypt libmhash ];
21
22 env = lib.optionalAttrs stdenv.cc.isClang {
23 NIX_CFLAGS_COMPILE = "-Wno-implicit-function-declaration";
24 };
25
26 meta = {
27 description = "Replacement for old UNIX crypt(1)";
28 longDescription = ''
29 mcrypt, and the accompanying libmcrypt, are intended to be replacements
30 for the old Unix crypt, except that they are under the GPL and support an
31 ever-wider range of algorithms and modes.
32 '';
33 homepage = "https://mcrypt.sourceforge.net";
34 license = lib.licenses.gpl3Only;
35 platforms = lib.platforms.all;
36 maintainers = [ lib.maintainers.qknight ];
37 };
38}