mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-11-16 06:47:09 +03:00
fd2cff9479
This version contains a security fix for CVE-2013-0249, for details please have a look at: http://curl.haxx.se/docs/adv_20130206.html Thanks to @roconnor for pointing this out. I'm pushing this to stdenv-updates because I'm not quite sure if it will break other things because 7.29.0 is now non-blocking by default. Plus the security vulnerability only affects IMAP, POP3 and SMTP protocol support. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cherry-picked into master, this won't change stdenv. Signed-off-by: Shea Levy <shea@shealevy.com>
67 lines
2.0 KiB
Nix
67 lines
2.0 KiB
Nix
{ stdenv, fetchurl
|
|
, zlibSupport ? false, zlib ? null
|
|
, sslSupport ? false, openssl ? null
|
|
, scpSupport ? false, libssh2 ? null
|
|
, linkStatic ? false
|
|
}:
|
|
|
|
assert zlibSupport -> zlib != null;
|
|
assert sslSupport -> openssl != null;
|
|
assert scpSupport -> libssh2 != null;
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "curl-7.29.0";
|
|
|
|
src = fetchurl {
|
|
url = "http://curl.haxx.se/download/${name}.tar.bz2";
|
|
sha256 = "0bw3sclhjqb2zwgcp6njjpaca62rwlj2mrw2r9wic47sqsxfhy4x";
|
|
};
|
|
|
|
# Zlib and OpenSSL must be propagated because `libcurl.la' contains
|
|
# "-lz -lssl", which aren't necessary direct build inputs of
|
|
# applications that use Curl.
|
|
propagatedBuildInputs =
|
|
stdenv.lib.optional zlibSupport zlib ++
|
|
stdenv.lib.optional sslSupport openssl;
|
|
|
|
configureFlags = ''
|
|
${if sslSupport then "--with-ssl=${openssl}" else "--without-ssl"}
|
|
${if scpSupport then "--with-libssh2=${libssh2}" else "--without-libssh2"}
|
|
${if linkStatic then "--enable-static --disable-shared" else ""}
|
|
'';
|
|
|
|
dontDisableStatic = if linkStatic then true else false;
|
|
|
|
CFLAGS = if stdenv ? isDietLibC then "-DHAVE_INET_NTOA_R_2_ARGS=1" else "";
|
|
LDFLAGS = if linkStatic then "-static" else "";
|
|
CXX = "g++";
|
|
CXXCPP = "g++ -E";
|
|
|
|
# libtool hack to get a static binary. Notice that to 'configure' I passed
|
|
# other LDFLAGS, because it doesn't use libtool for linking in the tests.
|
|
makeFlags = if linkStatic then "LDFLAGS=-all-static" else "";
|
|
|
|
crossAttrs = {
|
|
# We should refer to the cross built openssl
|
|
# For the 'urandom', maybe it should be a cross-system option
|
|
configureFlags = ''
|
|
${if sslSupport then "--with-ssl=${openssl.hostDrv}" else "--without-ssl"}
|
|
${if linkStatic then "--enable-static --disable-shared" else ""}
|
|
--with-random /dev/urandom
|
|
'';
|
|
};
|
|
|
|
passthru = {
|
|
inherit sslSupport openssl;
|
|
};
|
|
|
|
preConfigure = ''
|
|
sed -e 's|/usr/bin|/no-such-path|g' -i.bak configure
|
|
'';
|
|
|
|
meta = {
|
|
homepage = "http://curl.haxx.se/";
|
|
description = "A command line tool for transferring files with URL syntax";
|
|
};
|
|
}
|