tjh.dev
1{ stdenv, fetchzip, fetchpatch, cmake
2, libjpeg, openssl, zlib, libgcrypt, libpng
3, systemd
4}:
5
6let
7 s = # Generated upstream information
8 rec {
9 pname = "libvncserver";
10 version = "0.9.12";
11 url = "https://github.com/LibVNC/libvncserver/archive/LibVNCServer-${version}.tar.gz";
12 sha256 = "1226hb179l914919f5nm2mlf8rhaarqbf48aa649p4rwmghyx9vm"; # unpacked archive checksum
13 };
14in
15stdenv.mkDerivation {
16 inherit (s) pname version;
17 src = fetchzip {
18 inherit (s) url sha256;
19 };
20 patches = [
21 (fetchpatch {
22 name = "CVE-2018-20750.patch";
23 url = "https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec.patch";
24 sha256 = "004h50786nvjl3y3yazpsi2b767vc9gqrwm1ralj3zgy47kwfhqm";
25 })
26 (fetchpatch {
27 name = "CVE-2019-15681.patch";
28 url = "https://github.com/LibVNC/libvncserver/commit/d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.patch";
29 sha256 = "0hf0ss7all2m50z2kan4mck51ws44yim4ymn8p0d991y465y6l9s";
30 })
31 ];
32 nativeBuildInputs = [ cmake ];
33 buildInputs = [
34 libjpeg openssl libgcrypt libpng
35 ] ++ stdenv.lib.optional stdenv.isLinux systemd;
36 propagatedBuildInputs = [ zlib ];
37 meta = {
38 inherit (s) version;
39 description = "VNC server library";
40 homepage = "https://libvnc.github.io/";
41 license = stdenv.lib.licenses.gpl2Plus ;
42 maintainers = [stdenv.lib.maintainers.raskin];
43 platforms = stdenv.lib.platforms.unix;
44 };
45}