tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1{ callPackage, fetchpatch }:
2
3callPackage ./generic.nix {
4 version = "2.28.10";
5 hash = "sha256-09XWds45TFH7GORrju8pVQQQQomU8MlFAq1jJXrLW0s=";
6
7 patches = [
8 # cmake 4 compatibility
9 (fetchpatch {
10 url = "https://github.com/Mbed-TLS/mbedtls/commit/be4af04fcffcfebe44fa12d39388817d9949a9f3.patch";
11 hash = "sha256-CbDm6CchzoTia7Wbpbe3bo9CmHPOsxY2d055AfbCS0g=";
12 })
13 # fix build against Clang >= 20 (https://github.com/Mbed-TLS/mbedtls-framework/pull/173)
14 (fetchpatch {
15 name = "Add-__attribute__-nonstring-to-remove-unterminated-s.patch";
16 url = "https://github.com/Mbed-TLS/mbedtls-framework/commit/e811994babf84e29e56ebf97265f5fefdf18050f.patch";
17 hash = "sha256-PGXh7tMnl7VqBOWVZP3UqT5pEd0yh4oszEJNMiVOcGo=";
18 })
19 # fix build against Clang >= 20 (https://github.com/Mbed-TLS/mbedtls/pull/10215)
20 (fetchpatch {
21 name = "Add-__attribute__-nonstring-to-remove-unterminated-s.patch";
22 url = "https://github.com/Mbed-TLS/mbedtls/commit/2e1399f1e1ed6fa1072cf9584f5771322b0d001b.patch";
23 includes = [ "tests/*" ];
24 # drop some context in order to apply the backported patch cleanly
25 decode = "interdiff -U1 /dev/null -";
26 hash = "sha256-OTRnYw7Og6eAsB9pue1jkxO1xnkR48efz5QKjN9H0I8=";
27 })
28 ];
29}