2025-07-24 13:55:40 +02:00

100 lines
3.4 KiB
Nix

{
lib,
stdenv,
fetchurl,
fetchpatch,
}:
stdenv.mkDerivation (finalAttrs: {
pname = "jbigkit";
version = "2.1";
src = fetchurl {
url = "https://www.cl.cam.ac.uk/~mgk25/jbigkit/download/jbigkit-${finalAttrs.version}.tar.gz";
hash = "sha256-3nEGtr+vSV1oZcfdesbKE4G9EuDYFAXqgefyFnJj2TI=";
};
patches = [
# Archlinux patch: this helps users to reduce denial-of-service risks, as in CVE-2017-9937
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/0013-new-jbig.c-limit-s-maxmem-maximum-decoded-image-size.patch";
hash = "sha256-Yq5qCTF7KZTrm4oeWbpctb+QLt3shJUGEReZvd0ey9k=";
})
# Archlinux patch: fix heap overflow
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/0015-jbg_newlen-check-for-end-of-file-within-MARKER_NEWLE.patch";
hash = "sha256-F3qA/btR9D9NfzrNY76X4Z6vG6NrisI36SjCDjS+F5s=";
})
]
++ lib.optionals stdenv.hostPlatform.isLinux [
# Archlinux patch: build shared object
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-shared_lib.patch";
hash = "sha256-+efeeKg3FJ/TjSOj58kD+DwnaCm3zhGzKLfUes/d5rg=";
})
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-ldflags.patch";
hash = "sha256-ik3NifyuhDHnIMTrNLAKInPgu2F5u6Gvk9daqrn8ZhY=";
})
# Archlinux patch: update coverity
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-coverity.patch";
hash = "sha256-APm9A2f4sMufuY3cnL9HOcSCa9ov3pyzgQTTKLd49/E=";
})
# Archlinux patch: fix build warnings
(fetchpatch {
url = "https://gitlab.archlinux.org/archlinux/packaging/packages/jbigkit/-/raw/main/jbigkit-2.1-build_warnings.patch";
hash = "sha256-lDEJ1bvZ+zR7K4CiTq+aXJ8PGjILE3W13kznLLlGOOg=";
})
];
makeFlags = [
"AR=${lib.getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ar"
"CC=${stdenv.cc}/bin/${stdenv.cc.targetPrefix}cc"
"DESTDIR=${placeholder "out"}"
"RANLIB=${lib.getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ranlib"
];
postPatch = ''
sed -i 's/^\(CFLAGS.*\)$/\1 -fPIC/' Makefile
for f in Makefile libjbig/Makefile pbmtools/Makefile; do
sed -i -E 's/\bar /$(AR) /g;s/\branlib /$(RANLIB) /g' "$f"
done
'';
installPhase = ''
runHook preInstall
install -vDm 644 libjbig/*.h -t "$out/include/"
install -vDm 755 pbmtools/{jbgtopbm{,85},pbmtojbg{,85}} -t "$out/bin/"
install -vDm 644 pbmtools/*.1* -t "$out/share/man/man1/"
''
+ lib.optionalString stdenv.hostPlatform.isDarwin ''
install -vDm 644 libjbig/libjbig*.a -t "$out/lib/"
''
+ lib.optionalString stdenv.hostPlatform.isLinux ''
install -vDm 755 libjbig/*.so.* -t "$out/lib/"
for lib in libjbig.so libjbig85.so; do
ln -sv "$lib.${finalAttrs.version}" "$out/lib/$lib"
ln -sv "$out/lib/$lib.${finalAttrs.version}" "$out/lib/$lib.0"
done
''
+ ''
runHook postInstall
'';
doCheck = true;
# Testing deletes all files on each test, causes test failures.
enableParallelChecking = false;
meta = {
description = "Software implementation of the JBIG1 data compression standard";
homepage = "http://www.cl.cam.ac.uk/~mgk25/jbigkit/";
license = lib.licenses.gpl2Plus;
platforms = lib.platforms.all;
};
})