c7a9aa54ec
The upstream repo was archived on 2023-05-17 with the following comment: > This project has been identified as having known security escapes. It is now clear what (some) of these are, which prompts marking this package as vulnerable. This is now safe to do, as it is not a default part of our ffmpeg-full package any longer.
85 lines
1.8 KiB
Nix
85 lines
1.8 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchFromGitHub,
|
|
cmake,
|
|
pkg-config,
|
|
gtest,
|
|
libdrm,
|
|
libpciaccess,
|
|
libva,
|
|
libX11,
|
|
libXau,
|
|
libXdmcp,
|
|
libpthreadstubs,
|
|
fetchpatch,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "intel-media-sdk";
|
|
version = "23.2.2";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "Intel-Media-SDK";
|
|
repo = "MediaSDK";
|
|
rev = "intel-mediasdk-${version}";
|
|
hash = "sha256-wno3a/ZSKvgHvZiiJ0Gq9GlrEbfHCizkrSiHD6k/Loo=";
|
|
};
|
|
|
|
patches = [
|
|
# Search oneVPL-intel-gpu in NixOS specific /run/opengl-driver/lib directory
|
|
# See https://github.com/NixOS/nixpkgs/pull/315425
|
|
./nixos-search-onevplrt-in-run-opengl-driver-lib.patch
|
|
# https://github.com/Intel-Media-SDK/MediaSDK/pull/3005
|
|
(fetchpatch {
|
|
name = "include-cstdint-explicitly.patch";
|
|
url = "https://github.com/Intel-Media-SDK/MediaSDK/commit/a4f37707c1bfdd5612d3de4623ffb2d21e8c1356.patch";
|
|
hash = "sha256-OPwGzcMTctJvHcKn5bHqV8Ivj4P7+E4K9WOKgECqf04=";
|
|
})
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
cmake
|
|
pkg-config
|
|
];
|
|
buildInputs = [
|
|
libdrm
|
|
libva
|
|
libpciaccess
|
|
libX11
|
|
libXau
|
|
libXdmcp
|
|
libpthreadstubs
|
|
];
|
|
nativeCheckInputs = [ gtest ];
|
|
|
|
cmakeFlags = [
|
|
"-DBUILD_SAMPLES=OFF"
|
|
"-DBUILD_TESTS=${if doCheck then "ON" else "OFF"}"
|
|
"-DUSE_SYSTEM_GTEST=ON"
|
|
];
|
|
|
|
doCheck = true;
|
|
|
|
meta = with lib; {
|
|
description = "Intel Media SDK";
|
|
mainProgram = "mfx-tracer-config";
|
|
license = licenses.mit;
|
|
maintainers = with maintainers; [
|
|
midchildan
|
|
pjungkamp
|
|
];
|
|
knownVulnerabilities = [
|
|
''
|
|
End of life with various local privilege escalation vulnerabilites:
|
|
- CVE-2023-22656
|
|
- CVE-2023-45221
|
|
- CVE-2023-47169
|
|
- CVE-2023-47282
|
|
- CVE-2023-48368
|
|
''
|
|
];
|
|
platforms = [ "x86_64-linux" ];
|
|
};
|
|
}
|