nixpkgs/pkgs/tools/archivers/unzip/default.nix
Franz Pletz aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00

52 lines
1.5 KiB
Nix

{ stdenv, fetchurl, bzip2
, enableNLS ? false, libnatspec }:
stdenv.mkDerivation {
name = "unzip-6.0";
src = fetchurl {
url = mirror://sourceforge/infozip/unzip60.tar.gz;
sha256 = "0dxx11knh3nk95p2gg2ak777dd11pr7jx5das2g49l262scrcv83";
};
hardeningDisable = [ "format" ];
patches = [
./CVE-2014-8139.diff
./CVE-2014-8140.diff
./CVE-2014-8141.diff
./CVE-2014-9636.diff
./CVE-2015-7696.diff
./CVE-2015-7697.diff
] ++ stdenv.lib.optional enableNLS
(fetchurl {
url = "http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/unzip/files/unzip-6.0-natspec.patch?revision=1.1";
name = "unzip-6.0-natspec.patch";
sha256 = "67ab260ae6adf8e7c5eda2d1d7846929b43562943ec4aff629bd7018954058b1";
});
nativeBuildInputs = [ bzip2 ];
buildInputs = [ bzip2 ] ++ stdenv.lib.optional enableNLS libnatspec;
makefile = "unix/Makefile";
NIX_LDFLAGS = [ "-lbz2" ] ++ stdenv.lib.optional enableNLS "-lnatspec";
buildFlags = "generic D_USE_BZ2=-DUSE_BZIP2 L_BZ2=-lbz2";
preConfigure = ''
sed -i -e 's@CF="-O3 -Wall -I. -DASM_CRC $(LOC)"@CF="-O3 -Wall -I. -DASM_CRC -DLARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 $(LOC)"@' unix/Makefile
'';
installFlags = "prefix=$(out)";
setupHook = ./setup-hook.sh;
meta = {
homepage = http://www.info-zip.org;
description = "An extraction utility for archives compressed in .zip format";
license = stdenv.lib.licenses.free; # http://www.info-zip.org/license.html
platforms = stdenv.lib.platforms.all;
};
}