1{ stdenv, fetchgit, fetchpatch, autoreconfHook }:
2
3stdenv.mkDerivation rec {
4 version = "1.2.20";
5 name = "libtar-${version}";
6
7 # Maintenance repo for libtar (Arch Linux uses this)
8 src = fetchgit {
9 url = "git://repo.or.cz/libtar.git";
10 rev = "refs/tags/v${version}";
11 sha256 = "1pjsqnqjaqgkzf1j8m6y5h76bwprffsjjj6gk8rh2fjsha14rqn9";
12 };
13
14 patches = let
15 fp = name: sha256:
16 fetchpatch {
17 url = "http://sources.debian.net/data/main/libt/libtar/1.2.20-4/debian/patches/${name}.patch";
18 inherit sha256;
19 };
20 in [
21 (fp "no_static_buffers" "0yv90bhvqjj0v650gzn8fbzhdhzx5z0r1lh5h9nv39wnww435bd0")
22 (fp "no_maxpathlen" "11riv231wpbdb1cm4nbdwdsik97wny5sxcwdgknqbp61ibk572b7")
23 (fp "CVE-2013-4420" "0d010190bqgr2ggy02qwxvjaymy9a22jmyfwdfh4086v876cbxpq")
24 (fp "th_get_size-unsigned-int" "1ravbs5yrfac98mnkrzciw9hd2fxq4dc07xl3wx8y2pv1bzkwm41")
25 ];
26
27 buildInputs = [ autoreconfHook ];
28
29 meta = with stdenv.lib; {
30 description = "C library for manipulating POSIX tar files";
31 homepage = http://www.feep.net/libtar/;
32 license = licenses.bsd3;
33 platforms = platforms.linux;
34 maintainers = [ maintainers.bjornfor ];
35 };
36}