···1+{ fetchurl, stdenv, flex }:
2+3+stdenv.mkDerivation rec {
4+ name = "splint-3.1.2";
5+6+ src = fetchurl {
7+ url = "http://www.splint.org/downloads/${name}.src.tgz";
8+ sha256 = "02pv8kscsrkrzip9r08pfs9xs98q74c52mlxzbii6cv6vx1vd3f7";
9+ };
10+11+ patches = [ ./tmpdir.patch ];
12+13+ buildInputs = [ flex ];
14+15+ doCheck = true;
16+17+ meta = {
18+ homepage = http://splint.org/;
19+ description = "Splint, an annotation-assisted lightweight static analyzer for C";
20+21+ longDescription = ''
22+ Splint is a tool for statically checking C programs for security
23+ vulnerabilities and coding mistakes. With minimal effort, Splint
24+ can be used as a better lint. If additional effort is invested
25+ adding annotations to programs, Splint can perform stronger
26+ checking than can be done by any standard lint.
27+ '';
28+29+ license = "GPLv2+";
30+ };
31+}